Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
File:                     2Bx5YkM8L-C_YrjDiDkplflCsUw.mft (raw, json)
Hash identifier:          pNJH5Wb7R0CMyS2rKzq/wGZEMgbDKls/CUpXTACiclw=
Subject key identifier:   45:8E:AD:31:53:BE:10:5B:F3:EB:2C:F6:EB:DE:DD:CD:89:F2:AA:69
Authority key identifier: D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C
Certificate issuer:       /CN=d81c7962433c2fe0bf62b8c388392995f942b14c
Certificate serial:       01962E2B21BFF4812F4BF2BE389EFB75629B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft
Manifest number:          0C30
Signing time:             Sun 13 Apr 2025 08:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:40 +0000
Files and hashes:         1: 2Bx5YkM8L-C_YrjDiDkplflCsUw.crl (hash: jEceECIJWUhRG+qaTwXnr9Lojwi4dCwKbbbsDzM71jk=)
                          2: U7DbhF1x3gp_yB_uvm-ZnLT56oc.roa (hash: BgWurSq7ETy/ZjmZQYeAZmnnu0X5jrDz9abGJjfRlMg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:21:bf:f4:81:2f:4b:f2:be:38:9e:fb:75:62:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d81c7962433c2fe0bf62b8c388392995f942b14c
        Validity
            Not Before: Apr 13 08:01:40 2025 GMT
            Not After : Apr 14 08:01:40 2025 GMT
        Subject: CN=458ead3153be105bf3eb2cf6ebdeddcd89f2aa69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9f:cc:11:4a:ce:fb:86:36:e1:34:0d:a2:2c:
                    40:5e:67:f9:fb:84:49:e3:b2:45:27:bd:58:38:ba:
                    9f:d9:ad:a6:2a:76:cd:98:d5:89:ea:53:3c:13:23:
                    6c:51:25:02:10:9d:3f:9d:52:b1:14:7b:2f:58:04:
                    55:6a:d8:35:54:a0:44:33:65:01:d3:bd:1b:26:a0:
                    bf:5c:9f:5b:44:56:91:0e:97:a3:0e:f8:da:0b:e0:
                    f4:b6:2e:8a:02:24:8d:bd:17:e3:40:c0:5f:1a:75:
                    b0:40:fa:9d:b8:8a:96:b5:98:b5:2a:87:23:8b:01:
                    07:cc:03:e4:b4:88:f5:04:59:05:57:68:ef:b8:8f:
                    e3:43:c4:79:c4:85:ad:a9:a9:6b:2f:89:17:2a:7c:
                    dd:ba:da:66:ad:66:d4:17:26:a3:27:55:03:56:61:
                    51:43:6f:f4:27:56:d0:91:1d:7d:8b:43:d9:c6:85:
                    19:67:39:c6:04:26:b2:42:3e:c8:8c:22:74:a3:95:
                    70:d4:4f:5a:71:97:33:57:48:cc:08:e4:44:16:41:
                    e0:ea:ce:d6:cd:0e:d6:3d:e1:49:43:1c:99:70:87:
                    56:fe:00:b5:55:a9:56:9c:d0:52:be:a2:95:3e:da:
                    84:4f:ca:ca:9e:09:6d:89:f4:78:ad:df:cf:ab:3b:
                    70:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:8E:AD:31:53:BE:10:5B:F3:EB:2C:F6:EB:DE:DD:CD:89:F2:AA:69
            X509v3 Authority Key Identifier:
                keyid:D8:1C:79:62:43:3C:2F:E0:BF:62:B8:C3:88:39:29:95:F9:42:B1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Bx5YkM8L-C_YrjDiDkplflCsUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ea70c-f5f6-4b27-94ca-3d344c9c26b6/1/2Bx5YkM8L-C_YrjDiDkplflCsUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:4e:0f:c6:6c:6c:33:a6:81:17:b2:f2:67:f8:e6:79:09:82:
         43:5c:cf:d1:dd:1c:e5:9b:25:1b:d3:bf:cd:94:56:43:5a:62:
         7b:15:97:aa:3d:a1:97:0a:bd:ad:63:92:50:60:d0:4d:bd:25:
         60:53:17:f6:61:a9:64:50:91:60:b1:b4:3e:40:ed:9a:c7:d0:
         6e:ca:b8:da:36:df:ce:00:d3:84:fe:b4:f7:79:b9:59:dc:b4:
         2d:e9:42:c1:dc:bd:b3:4c:a6:b9:96:9c:5b:2c:24:01:75:c1:
         5f:45:2c:98:2c:c5:ef:db:4e:43:1b:13:6f:be:55:77:49:0b:
         80:9b:b0:29:b8:3d:78:51:5c:ba:08:09:5f:f6:96:89:ca:a3:
         34:42:77:a8:79:71:8e:86:bb:51:b8:67:c8:f9:b3:2e:62:e0:
         24:a9:d0:34:8e:14:b0:a1:23:37:38:76:17:3a:74:24:bc:37:
         c1:77:23:3d:d0:5d:64:4f:ed:70:9f:d0:c5:34:e6:6c:b4:c6:
         c2:96:a9:3b:0b:ba:9b:62:32:62:aa:1a:bb:77:cd:89:1e:51:
         7e:60:05:ef:e0:10:18:37:a6:a2:75:ab:17:7d:41:8d:be:47:
         b1:a8:3f:7a:3d:2f:cf:0d:01:2e:6e:95:e3:3e:5e:b3:9a:b8:
         1b:f7:14:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----