Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
File:                     1cZc2ktjD3K_ZA0WtB9y9aD511E.mft (raw, json)
Hash identifier:          FaHGzMlsF+Pt828JdCwDNO6jfMb8CLwTosaYWfJwRq8=
Subject key identifier:   2B:C5:5E:38:AF:53:41:4A:6B:11:90:67:25:21:C5:AB:C9:1D:0B:81
Authority key identifier: D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51
Certificate issuer:       /CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
Certificate serial:       01962E2AFE22744A3B9C0248E8F1D7B8FD1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft
Manifest number:          0CE4
Signing time:             Sun 13 Apr 2025 08:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:31 +0000
Files and hashes:         1: 1cZc2ktjD3K_ZA0WtB9y9aD511E.crl (hash: xKo0KUg3tVypkUtHkrNrz3OhNSJlvfR0PZBMRGvSuSg=)
                          2: vIfeAKl09iQuJw6UGqaMNu-i1xM.roa (hash: rnTrCrEZ28gshco/rvGtOCS7V1pX6Xki2r8crF4TWeg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:fe:22:74:4a:3b:9c:02:48:e8:f1:d7:b8:fd:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751
        Validity
            Not Before: Apr 13 08:01:31 2025 GMT
            Not After : Apr 14 08:01:31 2025 GMT
        Subject: CN=2bc55e38af53414a6b1190672521c5abc91d0b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a9:93:e6:ac:21:c9:c8:9b:d4:4f:e7:be:dc:
                    32:12:d8:9f:9a:08:11:81:03:89:42:da:79:04:d1:
                    ed:b9:03:24:ff:31:68:d4:4f:41:50:75:21:36:bd:
                    ee:32:de:2a:f3:da:95:05:60:81:fb:38:00:49:5a:
                    d6:f6:14:ef:f3:4c:cb:3a:ed:2b:c8:a6:49:59:24:
                    38:06:b8:23:33:9a:9b:6b:f9:19:11:ef:bf:b3:3e:
                    1d:c6:57:9f:b7:36:f9:89:ec:70:7f:ad:6d:21:71:
                    ba:63:65:01:4b:25:bf:3c:4e:88:27:e2:26:99:79:
                    34:8c:01:58:7d:28:56:ae:f3:a1:20:f6:23:30:67:
                    c4:28:0c:2b:69:c3:48:56:9e:60:83:be:02:aa:bd:
                    5b:e6:0b:6d:e2:9f:f8:9f:8d:18:3a:a7:84:7b:43:
                    0f:10:6c:c5:55:b6:21:9f:5a:53:00:dc:e1:0c:59:
                    91:9b:73:5d:7a:17:79:60:65:dc:15:f5:90:0e:98:
                    06:80:6b:06:3b:37:e8:20:37:c9:8c:fa:53:6c:af:
                    c0:87:8a:f0:9d:19:73:e2:9d:9d:e7:ab:d0:20:69:
                    5f:0f:66:f2:79:31:5e:68:bf:a5:5b:fa:57:aa:a4:
                    7f:ae:d3:0c:08:00:4a:f0:4e:99:19:c3:88:26:97:
                    75:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C5:5E:38:AF:53:41:4A:6B:11:90:67:25:21:C5:AB:C9:1D:0B:81
            X509v3 Authority Key Identifier:
                keyid:D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:96:a5:62:c2:09:83:81:0b:97:13:13:39:15:5a:88:01:48:
         41:51:7a:99:a3:ce:cd:69:57:f0:f7:e5:15:4d:5a:94:99:a1:
         55:44:99:3f:d7:d4:b4:e8:77:60:41:aa:ad:e0:f7:4c:ef:2b:
         7d:84:01:3c:1f:bc:dc:fa:14:aa:ed:57:f9:32:21:81:58:b7:
         04:d5:75:ca:3b:cf:47:2a:74:ea:10:f5:60:87:73:b9:19:3f:
         42:a3:ad:7a:1d:54:60:53:18:c1:45:fc:b9:72:28:43:f4:07:
         26:4d:9f:c1:91:dc:f4:65:ed:e4:ea:ad:7c:14:57:d4:3f:41:
         4c:f8:c8:fd:79:70:5e:80:88:fd:a1:79:79:6e:6d:85:47:52:
         51:31:9b:d7:17:2a:bc:45:ae:45:28:72:69:1e:cb:4f:5e:72:
         24:ae:7e:12:3b:8f:08:25:e4:38:c9:3f:82:7b:12:a4:5c:23:
         1b:1c:b4:2b:1d:61:59:74:60:e9:7b:26:cc:bf:54:4f:5e:f3:
         25:73:1b:e8:73:e9:52:46:a8:d5:7d:61:73:b9:31:e4:41:3e:
         36:c8:22:2b:b9:9f:dd:cd:69:e5:ca:01:45:78:d8:b6:77:c0:
         1f:f1:d4:b8:e8:70:d5:da:e1:2e:04:4a:ec:26:7f:71:22:cd:
         73:bc:53:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----