Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
File:                     Rk2NgKs3p1e503SClf5mn04JOyM.mft (raw, json)
Hash identifier:          EsbIpiUSuYTiQYloUEtYKwDruFjEXlL1/Vf5y6Id9Lo=
Subject key identifier:   C6:4E:D6:1F:AB:A0:E2:4B:AE:FD:D6:0E:0D:F7:EA:54:D1:B6:10:1D
Authority key identifier: 46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23
Certificate issuer:       /CN=464d8d80ab37a757b9d3748295fe669f4e093b23
Certificate serial:       01962FAB9B2063F39584977315CE1F05C59A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft
Manifest number:          0F33
Signing time:             Sun 13 Apr 2025 15:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:37 +0000
Files and hashes:         1: Rk2NgKs3p1e503SClf5mn04JOyM.crl (hash: 4Tbgzp24jiaf6L3j8B6jp5XQMguAH1cwNOZCvRIdfG0=)
                          2: xJnPr2RyvvePQVXn-sWgNe1aA9M.roa (hash: yJ4J4gghIQZp1yxWa+HqkTzf9ODjqBVN9nX0iZFZokQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:9b:20:63:f3:95:84:97:73:15:ce:1f:05:c5:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464d8d80ab37a757b9d3748295fe669f4e093b23
        Validity
            Not Before: Apr 13 15:01:37 2025 GMT
            Not After : Apr 14 15:01:37 2025 GMT
        Subject: CN=c64ed61faba0e24baefdd60e0df7ea54d1b6101d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:20:c1:75:4d:44:b2:38:8b:e4:47:e4:ff:d6:
                    cf:89:e2:e3:c0:5e:da:86:6f:5d:b8:e6:ff:7e:f2:
                    cd:aa:3d:79:36:5c:48:d4:ee:c4:77:99:f1:a0:5b:
                    ff:e1:fb:b5:23:03:ab:fb:6e:5f:47:12:a7:f9:89:
                    8a:50:aa:9b:7a:94:2b:40:56:92:9a:47:3d:b3:01:
                    37:67:f1:e4:37:bd:d4:80:d9:3f:19:e3:bf:77:fe:
                    51:6c:08:0b:ac:b3:f4:a2:e4:34:3b:7e:d3:93:db:
                    26:77:33:03:8c:fe:4f:c4:ed:f1:b5:af:eb:63:e8:
                    a0:13:da:6e:49:04:aa:6b:0c:78:ff:3d:34:d7:0b:
                    40:01:ec:c6:31:7c:bd:30:e6:8e:44:a2:78:e9:41:
                    30:99:d3:ec:4d:44:9f:a7:62:c8:9b:b4:7d:3f:e0:
                    c4:26:3d:4c:be:18:f9:eb:72:9a:f4:75:af:6f:dc:
                    05:65:f8:80:75:74:e6:d4:2d:a3:8c:7c:1a:19:d2:
                    88:2e:08:07:b5:82:05:ad:90:ee:7b:72:00:7f:6c:
                    4a:41:a9:bf:5a:b0:05:71:82:8a:00:db:79:67:77:
                    96:4d:c1:4e:01:98:4e:ae:3c:67:3d:58:f7:6a:ca:
                    0f:ad:2f:d8:91:fe:2d:3b:ca:7c:e1:70:69:54:92:
                    d7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:4E:D6:1F:AB:A0:E2:4B:AE:FD:D6:0E:0D:F7:EA:54:D1:B6:10:1D
            X509v3 Authority Key Identifier:
                keyid:46:4D:8D:80:AB:37:A7:57:B9:D3:74:82:95:FE:66:9F:4E:09:3B:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk2NgKs3p1e503SClf5mn04JOyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ce47d2-7e71-45de-8f18-911bb3dcf0d7/1/Rk2NgKs3p1e503SClf5mn04JOyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:6f:f4:94:bd:dd:60:c1:f8:f0:8f:8b:bc:93:67:29:44:dd:
         ad:7a:37:fb:7f:aa:a8:73:6a:0e:b2:f0:54:cc:3a:2e:7e:89:
         0a:a0:b8:2b:ef:42:30:f1:f2:dc:9c:a5:b1:76:e7:f3:f2:89:
         09:62:c5:74:da:9c:85:9d:94:10:48:26:7b:0d:1c:22:78:53:
         e6:21:7c:dc:6b:ba:04:87:57:f6:e1:eb:b6:db:de:a2:e0:0f:
         f1:96:46:14:59:74:49:9b:72:8a:ee:45:b1:90:4f:f4:ae:c3:
         13:bc:c0:ee:7e:c3:a7:6c:0e:59:3c:55:c4:cc:ab:6c:3a:5b:
         11:6b:2e:a0:f6:c0:87:a6:5c:18:f2:01:d6:72:c9:50:c3:e4:
         af:17:4c:51:45:8b:a2:54:55:77:29:84:94:45:39:d6:2d:91:
         60:0f:d3:b8:32:17:4a:47:bb:57:6b:67:4b:5d:30:0a:7a:75:
         89:a1:c3:60:0d:75:f0:79:92:b1:eb:5d:3d:8d:b0:4d:0b:8c:
         0f:e7:17:97:72:25:f5:30:d8:77:92:cb:82:47:96:22:61:e0:
         9a:78:e2:1c:9a:44:74:27:cb:d0:84:02:b2:93:07:31:c1:8c:
         c2:a1:11:26:76:94:24:2a:f4:6b:65:10:d8:92:1d:ea:67:1c:
         05:38:33:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----