Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
File:                     c2spT5ZdrWQPnjU784-a8RkUeeo.mft (raw, json)
Hash identifier:          ZgvKWyg6Kr/+KxC5gty7DRVq7xhRDou4W109rmTVqg0=
Subject key identifier:   66:33:03:31:0F:69:8C:0B:98:9A:23:7C:1E:87:31:43:2E:29:74:F1
Authority key identifier: 73:6B:29:4F:96:5D:AD:64:0F:9E:35:3B:F3:8F:9A:F1:19:14:79:EA
Certificate issuer:       /CN=736b294f965dad640f9e353bf38f9af1191479ea
Certificate serial:       01962DF3C3BE13784B2C69B806F0E912803C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
Manifest number:          1306
Signing time:             Sun 13 Apr 2025 07:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:12 +0000
Files and hashes:         1: Pb8L9pbGV7NQfgKmcvhMk6D02_s.roa (hash: CoNWry2kYRJwo9FhSFsPeMR2m6gz3FAFYuGEKzEDx5w=)
                          2: c2spT5ZdrWQPnjU784-a8RkUeeo.crl (hash: 4pj3qMiZCE7eQBvAS/Hq9D8EMhjPXfVCj7aTAmIbV3M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c3:be:13:78:4b:2c:69:b8:06:f0:e9:12:80:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=736b294f965dad640f9e353bf38f9af1191479ea
        Validity
            Not Before: Apr 13 07:01:12 2025 GMT
            Not After : Apr 14 07:01:12 2025 GMT
        Subject: CN=663303310f698c0b989a237c1e8731432e2974f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6e:f8:89:a4:23:db:13:7c:fa:95:dc:e8:69:
                    8c:fb:f6:9c:75:fd:59:7d:f0:a1:e2:8d:a6:aa:0b:
                    4d:93:8e:f3:af:ff:c3:8b:35:f3:40:b4:79:a5:41:
                    aa:c4:2f:ee:52:8d:48:7e:11:d4:20:e8:86:b6:4a:
                    1e:fe:7e:bb:1f:9f:e6:77:68:16:73:15:8e:cf:44:
                    4e:f9:db:64:31:f8:e9:91:28:3f:89:e0:93:8a:c7:
                    1c:a6:0f:a0:74:92:5c:ac:e2:7f:a7:ff:4f:cc:57:
                    13:fd:b8:de:e4:b1:a5:ea:cd:62:5f:23:b3:93:3a:
                    a4:1d:f1:ab:04:e4:71:1e:db:6a:22:e2:fe:bc:69:
                    31:96:6d:c5:88:4d:7e:78:9b:48:ea:88:c2:f6:cc:
                    9b:c4:f2:67:fc:7c:65:78:07:34:0f:36:76:6a:ec:
                    73:d6:ad:c1:00:61:c8:f1:5b:c5:1a:ae:cc:ca:5e:
                    de:5b:34:f9:4b:b2:bf:05:a2:ae:74:02:67:24:e8:
                    aa:04:2f:e2:16:1a:3f:e3:48:3e:71:5d:f4:75:85:
                    62:14:36:a7:37:d2:3e:f0:5b:26:b4:a3:e2:04:b2:
                    da:14:83:3d:8a:ea:ae:bb:d7:bf:25:74:b7:79:19:
                    92:7a:2e:18:d0:45:c2:57:42:a5:12:dd:96:07:b7:
                    19:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:33:03:31:0F:69:8C:0B:98:9A:23:7C:1E:87:31:43:2E:29:74:F1
            X509v3 Authority Key Identifier:
                keyid:73:6B:29:4F:96:5D:AD:64:0F:9E:35:3B:F3:8F:9A:F1:19:14:79:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:b5:e5:d8:ab:00:49:03:8a:5a:c5:2d:bb:20:03:2e:5a:3a:
         06:49:36:86:5d:7b:b3:df:78:45:6b:e9:ff:30:8f:eb:cb:05:
         fb:06:cd:09:8d:63:39:4e:b3:fb:fc:a2:92:4d:ab:24:b9:5f:
         f2:e6:c3:40:39:9a:67:19:dc:fe:e6:88:92:32:3c:9f:e9:68:
         fa:53:c9:6f:18:f6:ea:8e:93:9f:f5:8d:9f:a0:6c:2a:57:fd:
         ab:cd:35:3d:5b:26:bb:b7:75:4d:ff:6f:96:ec:33:d1:ec:bc:
         c5:b6:70:09:93:8f:50:43:d5:5a:f9:73:1f:3b:d7:6c:f6:6a:
         49:65:30:74:20:ad:1e:18:b1:de:a5:ca:6b:67:44:1b:da:0f:
         29:be:ac:2c:96:fd:9f:3d:f5:84:32:5a:64:10:aa:d2:68:f8:
         c2:d7:a3:00:da:e6:e6:71:3e:04:fc:b5:b6:91:e5:62:74:52:
         db:9c:78:e9:1b:2d:cb:6b:ad:00:44:3e:d2:de:65:dc:a9:b3:
         84:fc:bb:5c:c6:34:45:94:71:7a:4b:f5:e3:b9:7d:8d:76:cf:
         30:b0:fa:8f:2c:98:03:e0:06:32:f3:61:c6:b1:bb:32:88:49:
         19:da:5f:6f:ae:f0:20:62:58:9b:45:0c:06:9e:3f:4f:53:3f:
         99:c7:de:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----