Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
File:                     2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft (raw, json)
Hash identifier:          yQWU9FdJ8zSkpJUGM9mxtVnSg1ZgRHXqWPcNv9W8olI=
Subject key identifier:   0D:70:57:05:07:D5:8C:3D:01:59:C7:B5:81:5C:00:16:B9:55:FE:AE
Authority key identifier: D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4
Certificate issuer:       /CN=d8182a98d6ef80ffb291827da8acca74491080b4
Certificate serial:       01962DF3EB3DA3E1D2D7A8688ABB7278367E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft
Manifest number:          0F60
Signing time:             Sun 13 Apr 2025 07:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:22 +0000
Files and hashes:         1: 2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl (hash: uMaFy5JSu9KaYrFkbtv/SeOKcuTECg2V7+3XVMJFv4o=)
                          2: 30vA-2Ti9J4x6gcI-EHLbrCUZpU.roa (hash: TTYewcef5lOn0EHzwdEkvaED9fy4qKHbWldg8iBnGRE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:eb:3d:a3:e1:d2:d7:a8:68:8a:bb:72:78:36:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8182a98d6ef80ffb291827da8acca74491080b4
        Validity
            Not Before: Apr 13 07:01:22 2025 GMT
            Not After : Apr 14 07:01:22 2025 GMT
        Subject: CN=0d70570507d58c3d0159c7b5815c0016b955feae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e9:93:16:25:73:ec:a0:4a:ca:31:d1:25:12:
                    b7:bf:c4:68:5f:7b:8f:7d:c4:b2:14:f6:98:81:0e:
                    47:67:cd:58:8e:66:0a:4d:17:c9:91:ab:0d:11:5e:
                    a9:df:67:8e:8c:b8:db:47:50:c8:8b:67:b6:1e:83:
                    14:22:27:03:b6:a6:fc:c5:1b:f5:d0:d7:d5:8f:32:
                    d1:ac:29:1b:5f:da:b8:40:2a:1d:92:f5:0f:71:3e:
                    75:8a:2c:eb:57:91:e7:a8:da:22:61:3a:33:14:b0:
                    e0:49:f3:0e:df:7f:e4:ad:bc:5d:78:3b:85:0b:08:
                    fa:1e:21:98:de:7a:c6:27:d6:07:fb:6c:0f:26:db:
                    a5:64:38:8a:c3:fe:e7:fb:64:92:1c:1d:61:d5:a5:
                    b1:37:a5:44:8f:34:1e:74:45:96:7f:f4:d7:d1:b5:
                    21:cf:fc:e2:1f:b1:d4:47:f0:c3:2f:4d:f8:5f:c0:
                    cd:86:7b:42:3c:76:d5:cc:a6:41:c0:dd:7d:ce:c0:
                    66:ea:28:82:72:2e:d5:5e:f1:a6:b7:1c:84:7f:c6:
                    89:7f:2b:4b:41:e9:63:2d:82:f8:97:0f:f4:b5:18:
                    51:3c:ed:93:7a:bc:af:cb:d2:08:35:73:32:05:e1:
                    52:7c:ee:3a:61:d9:ab:a1:cf:81:34:55:65:76:2a:
                    32:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:70:57:05:07:D5:8C:3D:01:59:C7:B5:81:5C:00:16:B9:55:FE:AE
            X509v3 Authority Key Identifier:
                keyid:D8:18:2A:98:D6:EF:80:FF:B2:91:82:7D:A8:AC:CA:74:49:10:80:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d85235-808c-4c0a-9c97-9b360e1ba321/1/2BgqmNbvgP-ykYJ9qKzKdEkQgLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:a2:42:fd:7b:22:31:54:a7:e6:59:3a:ee:d5:00:66:fa:17:
         77:47:3a:a6:82:99:0c:78:3c:a8:11:b7:26:35:f4:03:cf:a9:
         ae:6d:7f:94:09:b9:a3:68:6b:85:82:6b:16:30:76:27:54:da:
         08:2d:c8:7c:12:30:43:98:19:2b:3e:3c:71:e1:c7:b9:21:e3:
         84:87:1f:c5:a5:2d:c8:67:e0:ab:92:b7:57:1a:52:03:1e:7a:
         a4:ee:82:a8:1c:a0:0c:bc:a2:a9:ef:37:d2:bb:53:6d:53:fa:
         7e:54:6a:88:3a:6d:f0:12:9d:b8:c3:02:4c:2d:1b:15:ef:05:
         94:59:15:70:37:31:d9:c7:ab:ba:7f:35:f1:1a:f4:f3:12:0b:
         0d:31:32:42:0c:be:68:f7:08:9e:67:3f:c7:98:8f:ad:6d:dd:
         24:ed:81:68:c8:c6:67:d8:85:e5:39:3a:a2:07:79:ba:f7:1f:
         be:f9:a6:e4:e2:75:d8:db:30:21:71:3f:4d:a0:93:b3:19:ac:
         94:78:a5:01:19:1e:20:c1:60:c2:dd:87:61:11:5c:50:3a:b8:
         fe:7e:e9:08:d8:19:be:1d:b1:44:07:20:cc:de:6b:53:b3:89:
         f6:b4:90:86:18:9d:75:44:f1:31:0e:e5:55:ee:73:c7:87:dc:
         14:8b:70:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----