Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
File:                     2JQ2WyiggoNKdRqXdxt5ESRSTew.mft (raw, json)
Hash identifier:          pBWKuriupptM/uNjkT54d60mBdvXjGFl9xg/6WPcj2I=
Subject key identifier:   C2:82:9A:F3:94:5B:30:2F:7E:A1:5E:0A:EF:6F:BB:1A:82:63:D1:BF
Authority key identifier: D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC
Certificate issuer:       /CN=d894365b28a082834a751a97771b791124524dec
Certificate serial:       0195E0B48AA8B11A002C73040BFEB277CA8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft
Manifest number:          14C5
Signing time:             Sat 29 Mar 2025 07:01:22 +0000
Manifest this update:     Sat 29 Mar 2025 07:01:22 +0000
Manifest next update:     Sun 30 Mar 2025 07:01:22 +0000
Files and hashes:         1: 2JQ2WyiggoNKdRqXdxt5ESRSTew.crl (hash: 1RSrflb3Yo1cgwksuvFezziN5YEigzLWM0xVgzLCU/U=)
                          2: 5Be6EqezXfxwhrFPLeonCfAyvI8.roa (hash: 5DTu5fQoOJxSVXmen8IkdRj7K/ip+zcpfYhUFVu0omI=)
                          3: T1w2yjTpmwJ1zAyvHyThPVcOS4U.roa (hash: 2VUmqYcTbyu3BGa2UNYaNxKK9/e/jdNeWFxD6j6APMw=)
                          4: V_jn68LrMHXss4eZ4s-Ou3D0uUc.roa (hash: exDIqb2dn4rGevhqSLgxGPDH0tG5qTPwydwCvYcD+yY=)
                          5: Ypy0H2Bsr39UgswuoV5q1-sR_N4.roa (hash: pHbM4Rba/93pouqqIiXpHU4F3MQUwXB/YNEqfbXWHBc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:b4:8a:a8:b1:1a:00:2c:73:04:0b:fe:b2:77:ca:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d894365b28a082834a751a97771b791124524dec
        Validity
            Not Before: Mar 29 07:01:22 2025 GMT
            Not After : Mar 30 07:01:22 2025 GMT
        Subject: CN=c2829af3945b302f7ea15e0aef6fbb1a8263d1bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9e:95:e3:f6:1b:b1:9b:06:66:c5:bc:98:44:
                    81:42:a8:84:3a:cd:cc:8e:f2:d2:be:e1:56:4a:db:
                    76:ec:86:d8:1d:6a:7f:c1:70:58:68:dc:66:ce:d4:
                    f0:d9:f7:8d:ef:a4:f5:79:2e:66:6f:6e:18:56:1d:
                    f1:31:69:99:a9:27:66:7b:d9:bb:d2:c4:68:a2:2b:
                    41:3f:af:80:4b:2c:49:80:df:5c:e8:de:76:ad:fe:
                    a7:f8:4c:b5:ce:9a:80:e2:ce:20:f6:66:4d:e6:ea:
                    34:06:11:ef:43:38:cb:20:a0:eb:e0:ed:e9:e1:53:
                    a2:3d:51:e3:45:fd:04:2d:12:ae:3a:be:11:0a:37:
                    43:f7:60:b7:48:62:20:90:08:b2:ce:19:9b:a0:74:
                    e7:77:94:6c:31:a6:15:c6:78:74:d2:db:51:66:6f:
                    72:d8:f4:fa:5e:9e:e9:79:69:f0:83:89:63:dc:86:
                    0b:6d:cd:25:5a:bb:fd:0f:dd:b3:44:2e:52:89:45:
                    ae:e2:c5:23:43:00:43:18:c3:32:19:05:25:e7:4a:
                    52:11:5b:91:90:33:f2:40:f4:59:81:79:a4:cd:5b:
                    a9:85:83:03:6c:16:09:3c:76:c5:e7:5e:89:de:95:
                    e3:b0:81:91:bc:3e:ca:02:d7:cb:93:50:e9:27:c8:
                    c8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:82:9A:F3:94:5B:30:2F:7E:A1:5E:0A:EF:6F:BB:1A:82:63:D1:BF
            X509v3 Authority Key Identifier:
                keyid:D8:94:36:5B:28:A0:82:83:4A:75:1A:97:77:1B:79:11:24:52:4D:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JQ2WyiggoNKdRqXdxt5ESRSTew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a607f4-15dc-4db5-9601-2146179d8e2b/1/2JQ2WyiggoNKdRqXdxt5ESRSTew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ea:a7:cb:fe:73:c7:2b:48:99:06:dd:ee:9d:43:fb:12:9b:
         33:ac:5b:60:2b:39:89:f9:53:52:9c:35:a2:50:d1:93:23:81:
         31:02:7e:c7:58:ae:22:a8:ed:55:12:7e:da:51:22:e0:11:69:
         f6:0d:ef:93:94:da:08:e1:29:b9:f2:87:5a:1b:00:0e:31:74:
         9e:8c:17:27:0d:46:85:f4:c5:f1:73:57:50:02:86:a8:42:ab:
         44:ab:f6:a8:b8:3c:ea:b9:35:b2:bf:51:b6:dc:c4:71:04:12:
         f5:d4:fb:99:5e:5b:3d:f2:5e:16:43:15:43:45:02:68:d3:2f:
         89:b3:05:8d:88:f0:be:6b:ac:fe:34:30:f3:99:76:ab:17:a0:
         f6:e5:fc:ff:68:62:22:97:dd:05:8e:b9:76:98:9c:e3:07:54:
         5f:25:99:c6:38:e3:83:4d:25:51:f4:75:6d:99:da:7d:77:ca:
         cf:f9:14:97:f8:87:52:db:a7:e5:31:59:27:c0:8c:ac:8d:fc:
         86:16:8e:2d:07:84:c1:16:d0:c0:ee:ef:35:74:ab:93:72:88:
         a6:4f:7d:6c:9e:0a:85:61:95:6f:49:6c:22:71:4f:5a:81:67:
         3a:a4:25:ac:5b:c3:e7:4f:bd:da:43:dc:de:ac:69:c1:9b:0f:
         7e:61:d1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----