Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
File:                     2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft (raw, json)
Hash identifier:          x+j0CB9FI5kPkwlBN2319EZAE1Rq5cbKvAG/LZhuWzI=
Subject key identifier:   45:ED:71:09:18:9B:A5:55:F4:B7:E0:A3:C9:D2:46:DB:F6:FB:AF:9C
Authority key identifier: D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
Certificate issuer:       /CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Certificate serial:       01962F065742BD6F8D8B168ADB6221182B42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
Manifest number:          059E
Signing time:             Sun 13 Apr 2025 12:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:06 +0000
Files and hashes:         1: 20Dw3EtRjT0VsUf9XJsc0R3Ci-Y.roa (hash: eYk/5sRuyCDN9GA+BHkMTQtHbaoi0rArz9DpKNEObWk=)
                          2: 2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl (hash: 4WoDAX+peWB9VgjDjctj5A6TsdxzrQuicOzUUNJtOqI=)
                          3: 4syStsiJ4_nkcJBvU4Ns9Pjm0oQ.roa (hash: 2p6GX7iVYhsRkTJt8jEU86F9xE4rex2UzZbhNm8D8D0=)
                          4: N_GpQaNWWGxkbuDZ3ulfH-r64tk.roa (hash: IM2SiURjMxHWXsFqFI4woiJ2ADSr+qZUIrRaSOqm3m0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:57:42:bd:6f:8d:8b:16:8a:db:62:21:18:2b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
        Validity
            Not Before: Apr 13 12:01:06 2025 GMT
            Not After : Apr 14 12:01:06 2025 GMT
        Subject: CN=45ed7109189ba555f4b7e0a3c9d246dbf6fbaf9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:93:7f:9c:10:92:dd:2e:55:d1:25:a7:26:60:
                    5f:41:14:c5:f0:39:be:f5:c0:fc:bf:0f:f4:fd:61:
                    e4:97:3a:29:88:fe:eb:d2:ea:ac:98:16:6a:f5:48:
                    e2:48:cc:55:f6:8e:a8:ea:f0:1d:c5:91:49:fc:3d:
                    b1:d2:56:c2:f3:4e:7f:cf:91:a5:d2:50:93:ca:d2:
                    1e:09:97:51:dd:20:1a:35:42:71:c5:22:26:9f:53:
                    75:5c:ff:ea:55:33:64:7d:8d:4d:51:a8:2d:b9:d5:
                    52:b4:c0:0c:83:85:f7:9f:f8:40:f9:b6:3e:6c:2e:
                    5a:29:39:73:22:6c:9b:15:2c:10:df:b4:52:53:ff:
                    f3:10:33:43:5d:d3:27:d1:bf:1e:28:33:8e:42:88:
                    58:a3:08:8c:f7:10:4f:c1:22:4f:30:0e:d1:a1:d9:
                    71:5e:d1:04:18:68:a2:8a:91:a6:ee:1a:aa:be:7f:
                    25:b6:ec:3d:d2:15:30:c7:ce:f2:ca:be:e7:62:59:
                    94:d2:8b:e8:2d:af:48:aa:97:be:3f:8a:3a:6a:3a:
                    d1:a7:93:d9:8c:5f:93:40:a1:ea:f5:5a:cc:6a:90:
                    89:ad:6c:50:14:d7:0c:87:71:b1:da:ea:a2:93:c0:
                    91:f6:9f:9f:3b:94:c8:38:ab:76:34:fe:7b:47:0a:
                    3a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:ED:71:09:18:9B:A5:55:F4:B7:E0:A3:C9:D2:46:DB:F6:FB:AF:9C
            X509v3 Authority Key Identifier:
                keyid:D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:c0:3c:31:3d:e8:b7:ae:26:45:97:41:cc:2d:9e:7b:35:23:
         81:94:c5:fc:e4:4c:7d:12:2c:f9:77:2b:1c:2a:b2:ff:cb:5c:
         12:01:3a:dd:5a:fa:2e:57:1b:e4:f5:6e:87:ca:38:8e:cb:00:
         3b:c6:8c:5d:3b:d6:3c:63:3b:48:58:f2:78:1c:23:64:a1:f3:
         7d:c1:28:b8:52:9c:ce:3a:9d:cc:96:5a:ca:84:3c:e5:dc:b8:
         fc:24:ce:1f:7b:67:15:4b:1c:26:6b:11:03:f4:15:8c:70:b7:
         de:0b:c2:ae:55:cc:31:3b:ed:c9:82:6d:23:11:c7:5b:23:12:
         8f:d8:31:44:17:5b:01:73:69:de:bc:63:c3:a3:6b:7a:9e:a9:
         7c:35:48:75:7b:85:2d:db:4d:d9:65:ad:fd:12:9c:9a:17:f2:
         95:03:e1:d5:ea:bf:08:9c:6d:40:05:31:d6:c3:77:ef:00:e9:
         f5:8f:c1:d3:eb:0a:b7:1c:77:71:42:8f:73:0c:a9:8f:85:db:
         96:44:0d:ce:25:58:a0:24:41:f5:b5:4e:47:f1:5f:89:ca:da:
         4d:8b:ce:e1:ab:ba:4c:9e:c5:0b:fb:11:36:18:81:2b:bd:0e:
         a2:09:e0:cf:05:ea:23:ce:92:31:71:cb:2a:a4:5a:69:da:46:
         64:d8:dd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----