Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft
File:                     2MIJbMDFVXy6tsENYdB30Hj-cX8.mft (raw, json)
Hash identifier:          9fMUHvzgVtGilhlvX9T8rGJMn97zMBMGU0x4Md/w2Zk=
Subject key identifier:   20:A2:86:59:44:9E:A6:FD:B5:61:C7:CF:F9:93:33:87:96:67:03:56
Authority key identifier: D8:C2:09:6C:C0:C5:55:7C:BA:B6:C1:0D:61:D0:77:D0:78:FE:71:7F
Certificate issuer:       /CN=d8c2096cc0c5557cbab6c10d61d077d078fe717f
Certificate serial:       01962DF40F42C16EB3E4525530D3A9EFA739
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft
Manifest number:          067F
Signing time:             Sun 13 Apr 2025 07:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:31 +0000
Files and hashes:         1: 2MIJbMDFVXy6tsENYdB30Hj-cX8.crl (hash: 5Upz5by324CfhtbdWlYCRHJANyCFjtK+r8MU+4Ij6Kc=)
                          2: v--QteSWi6tQPkHDzqMh-ib3Ea0.roa (hash: 4DKBaLEIdscFHQJRoeUgffvp/rQ3x54nPWPAJ4H+N0s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:0f:42:c1:6e:b3:e4:52:55:30:d3:a9:ef:a7:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8c2096cc0c5557cbab6c10d61d077d078fe717f
        Validity
            Not Before: Apr 13 07:01:31 2025 GMT
            Not After : Apr 14 07:01:31 2025 GMT
        Subject: CN=20a28659449ea6fdb561c7cff993338796670356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3d:12:cf:46:ad:88:b5:e5:66:11:5d:a0:59:
                    dd:92:9b:54:3b:fe:ee:3a:9e:00:ce:04:65:31:ba:
                    f2:44:37:c4:16:ad:d0:f8:8f:39:80:4f:05:73:d3:
                    90:f9:bb:93:11:1e:71:cf:3c:72:67:7b:b2:b3:b4:
                    d6:49:35:ae:79:ed:ae:ae:e7:33:66:44:a6:88:9b:
                    7c:aa:dd:14:3a:42:11:20:80:d9:5f:8c:42:8c:bf:
                    d8:be:1d:22:7b:fe:ce:03:98:dc:63:f2:9d:45:29:
                    e1:f0:c0:19:2e:41:f6:35:79:bf:a0:4e:99:bc:08:
                    a0:f8:69:bf:32:59:b6:38:8a:cb:fd:8b:5a:87:63:
                    83:56:06:73:ba:85:77:77:54:a7:b6:98:4c:b9:6e:
                    3b:bf:a7:67:ac:8b:ed:f3:bf:d5:dd:5c:13:58:01:
                    3f:ad:3a:43:15:84:21:db:3f:cd:17:0c:41:c5:a1:
                    2c:61:ec:c4:21:c5:72:68:15:3f:89:c6:05:ca:19:
                    0f:f5:9b:7f:b4:87:fc:d7:de:52:7c:26:4b:ea:b6:
                    13:4d:45:1d:3f:9f:d3:f4:de:25:f8:78:10:bf:7f:
                    40:a7:5d:d1:22:3c:52:32:ec:2f:c2:59:c0:89:a3:
                    f4:a7:8c:df:2c:d6:ea:1e:84:0d:8d:53:eb:4f:8b:
                    dd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A2:86:59:44:9E:A6:FD:B5:61:C7:CF:F9:93:33:87:96:67:03:56
            X509v3 Authority Key Identifier:
                keyid:D8:C2:09:6C:C0:C5:55:7C:BA:B6:C1:0D:61:D0:77:D0:78:FE:71:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MIJbMDFVXy6tsENYdB30Hj-cX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5e51ba-508f-4f23-a79f-43283b3718dc/1/2MIJbMDFVXy6tsENYdB30Hj-cX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:4e:21:88:be:e7:f8:c2:53:e9:7f:d7:1b:72:8a:22:2c:c6:
         c5:e8:51:63:dc:f3:ac:22:06:85:8e:4c:28:78:8e:44:aa:c4:
         4f:3c:18:60:1d:9e:9d:9c:e5:47:e6:c2:53:49:c6:f0:84:e3:
         a0:42:a6:6e:7a:b4:ca:fd:11:d0:89:f0:b8:ba:b5:42:04:cb:
         78:fc:33:7d:36:86:d7:4b:e1:fb:3a:3d:d9:3d:f4:09:f7:12:
         6c:3c:bd:3f:ca:a5:f0:21:15:13:32:8b:56:ed:07:ef:bd:69:
         15:82:f9:9a:b6:df:31:f3:14:a2:d4:bc:bc:f2:98:71:97:5a:
         e7:9e:28:3a:3e:d3:4d:ec:b9:20:f5:77:40:2b:9f:04:25:e4:
         01:29:52:ce:d0:93:9d:47:4d:4a:b0:b5:1e:06:b4:32:ee:25:
         d7:c3:48:f9:81:65:b9:23:0c:12:6a:00:2c:1c:09:10:b6:31:
         3a:ca:1e:8f:a0:3b:be:53:03:2c:8e:54:86:0a:bb:07:0b:98:
         1a:07:86:a9:6e:86:1b:9d:21:f6:c6:35:43:29:45:9a:72:68:
         30:6a:0c:ae:62:e9:68:53:4d:c3:0e:a8:d4:7c:55:a8:e1:f1:
         a5:36:59:63:9d:6c:13:f8:f9:a0:db:b8:8f:aa:98:c2:47:60:
         35:c2:cc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----