Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
File:                     2BvvWhox71z8A2ucK3CkKr0EAH4.mft (raw, json)
Hash identifier:          co8q2gniKVvtd30yBO9ww+/XsK9/Nbtc0nqjRsEvohM=
Subject key identifier:   2D:CD:D0:A6:C6:7D:D5:D0:37:20:70:FB:D4:0F:00:16:B6:08:80:E1
Authority key identifier: D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E
Certificate issuer:       /CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e
Certificate serial:       01962ECF7234309A1103DBA5D8EE7D2763F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft
Manifest number:          0F62
Signing time:             Sun 13 Apr 2025 11:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:09 +0000
Files and hashes:         1: 0DAp-FN5fWxEjj8ABkpB3v75uG8.roa (hash: kHiwxIZcA4WWeVtzQ3OoqcvX97QaxDPHie0o+OkcTmE=)
                          2: 2BvvWhox71z8A2ucK3CkKr0EAH4.crl (hash: OqtFU8ubl4DJw4rw4NkfhUjMsuPjOiu45FMpYg9gwE4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:72:34:30:9a:11:03:db:a5:d8:ee:7d:27:63:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d81bef5a1a31ef5cfc036b9c2b70a42abd04007e
        Validity
            Not Before: Apr 13 11:01:09 2025 GMT
            Not After : Apr 14 11:01:09 2025 GMT
        Subject: CN=2dcdd0a6c67dd5d0372070fbd40f0016b60880e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b9:f6:0a:e6:80:cb:7c:78:41:fb:42:ae:5e:
                    bf:0e:a1:4e:b6:3d:29:28:52:b2:3a:4b:61:b3:68:
                    42:e7:f9:ce:1d:53:92:eb:af:56:5c:72:50:1b:35:
                    3c:8a:2c:8a:7a:4d:11:a8:13:25:75:a6:5d:37:df:
                    4c:21:b5:43:c7:75:64:0f:de:80:2f:dc:ac:a0:b0:
                    54:01:15:1c:1f:02:ce:09:f3:8a:e7:db:29:ae:af:
                    f8:46:d9:0e:d0:06:bf:c2:d9:12:3e:8e:a4:0e:23:
                    45:7c:f4:d4:83:c7:0b:5b:65:dd:2a:29:96:92:0d:
                    4d:e0:a0:d1:9e:e5:c4:e6:fa:de:72:aa:64:30:35:
                    b4:67:d9:44:10:31:05:73:f3:1a:39:5f:00:06:f1:
                    18:4d:37:17:c4:34:d4:74:07:29:cb:d6:03:6d:3c:
                    a3:7d:5e:5f:9f:3b:be:a9:b7:2a:fe:c2:5f:ac:d5:
                    90:4c:0d:70:23:73:f4:65:da:bf:f8:39:6a:f5:b4:
                    1d:8e:14:73:47:e9:76:a5:77:78:3e:96:79:33:13:
                    19:92:d3:f1:55:c1:08:34:a7:a6:f0:27:b5:74:05:
                    33:da:15:8b:77:38:1e:03:bc:83:7b:e4:e9:6a:e3:
                    94:d0:58:df:bc:2a:6b:df:cf:c2:05:df:a9:d8:73:
                    77:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CD:D0:A6:C6:7D:D5:D0:37:20:70:FB:D4:0F:00:16:B6:08:80:E1
            X509v3 Authority Key Identifier:
                keyid:D8:1B:EF:5A:1A:31:EF:5C:FC:03:6B:9C:2B:70:A4:2A:BD:04:00:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2BvvWhox71z8A2ucK3CkKr0EAH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/56ebd2-8185-48bd-bbd4-9ceeba8ba24c/1/2BvvWhox71z8A2ucK3CkKr0EAH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:00:db:24:71:c7:54:cf:9e:9b:c8:35:c0:3d:ac:4e:d7:97:
         7a:37:7f:ad:e7:a8:b6:d8:23:ea:57:98:dc:eb:88:55:2c:a7:
         f1:6c:c5:86:27:23:ca:a1:67:33:32:f6:d8:25:f8:ce:32:5d:
         1a:8b:d6:e4:62:50:31:b7:c0:dd:62:ad:7b:23:09:e8:4c:fe:
         31:a0:57:b8:d9:00:57:6c:3f:f6:8f:c1:a8:ba:20:29:15:6c:
         21:d4:3f:66:d6:60:45:5d:9a:f4:ad:86:11:8a:c4:e2:f6:d7:
         79:5a:e1:d8:94:8b:d2:10:4a:3b:37:c0:d6:1c:93:e7:ab:55:
         d2:f7:f9:b8:6f:3e:3a:81:52:74:a7:eb:f6:5e:49:1a:a8:3f:
         68:84:52:59:61:d2:1e:87:16:40:54:ca:fc:01:67:cd:ea:98:
         86:2b:2e:6b:fb:91:2f:cc:14:d3:5d:13:4e:cc:84:f6:1f:dc:
         e3:ed:48:20:03:9a:02:91:6a:ad:4d:29:65:31:5c:3b:21:fb:
         05:e4:f8:10:62:50:e3:70:47:96:96:f1:d1:c8:75:40:8e:71:
         11:9a:50:45:74:9c:26:e1:8d:92:91:fd:9f:52:e9:b6:02:e9:
         61:b0:bb:28:34:65:38:a4:e9:a3:de:6c:5f:72:00:a0:55:b0:
         2d:3e:85:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----