Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
File:                     3pj4NjKYKX-6uupodyArXEQOWpA.mft (raw, json)
Hash identifier:          rxTI8ta8s5v2B8DNfWZkZHhvIcISA/Z4hIpFJ/6TpV4=
Subject key identifier:   63:F0:69:EF:8C:81:7F:95:C0:E6:D5:BB:7C:FF:0F:82:8F:10:04:19
Authority key identifier: DE:98:F8:36:32:98:29:7F:BA:BA:EA:68:77:20:2B:5C:44:0E:5A:90
Certificate issuer:       /CN=de98f8363298297fbabaea6877202b5c440e5a90
Certificate serial:       01962E98D349D3E877B657CAB5235E8F2501
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft
Manifest number:          0B79
Signing time:             Sun 13 Apr 2025 10:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:29 +0000
Files and hashes:         1: 3pj4NjKYKX-6uupodyArXEQOWpA.crl (hash: if1RfUBR0TubrknOcoyrQ8NkA5YNpaSVQpyituWKXHg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d3:49:d3:e8:77:b6:57:ca:b5:23:5e:8f:25:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de98f8363298297fbabaea6877202b5c440e5a90
        Validity
            Not Before: Apr 13 10:01:29 2025 GMT
            Not After : Apr 14 10:01:29 2025 GMT
        Subject: CN=63f069ef8c817f95c0e6d5bb7cff0f828f100419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f9:6c:ec:93:55:d6:86:6b:57:2f:8f:8f:5c:
                    82:82:70:93:bd:56:bd:b9:33:ed:2e:13:67:f6:72:
                    10:79:ac:63:1a:d8:b4:fe:da:e5:66:02:b0:84:7d:
                    dc:8f:75:8f:43:27:7b:d1:ab:bb:3c:20:07:23:53:
                    ec:ba:25:65:26:64:69:89:bf:48:9b:d1:97:a8:c8:
                    e2:38:8f:14:f5:cc:bb:e7:12:e5:b1:35:8f:77:dc:
                    f3:71:fb:e3:82:68:d2:b7:e1:bc:08:9b:f7:de:4a:
                    97:92:28:33:e6:6e:7a:20:a0:a0:2e:11:5c:27:a9:
                    55:93:4a:3c:60:9e:2b:47:b2:b4:70:00:65:83:01:
                    df:41:0d:0f:b6:da:b9:90:c6:f9:db:be:fb:95:1c:
                    1a:d8:4d:75:0c:e4:2c:b4:59:8d:26:f1:5c:71:cb:
                    f0:c4:4b:2a:80:44:94:6a:46:7d:f2:ca:e6:c7:3a:
                    de:b5:90:0f:bd:65:8d:90:1d:3a:e2:8e:46:03:b1:
                    4b:10:58:23:33:3b:5e:27:0a:7d:23:6e:32:2a:18:
                    f8:a0:d3:2b:c2:24:62:d4:e1:4e:3a:5f:ac:62:c5:
                    3b:f6:74:89:c5:dd:10:51:16:7c:09:aa:8c:22:d8:
                    46:f4:44:2c:87:80:3f:77:34:44:da:2b:4a:29:3b:
                    77:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F0:69:EF:8C:81:7F:95:C0:E6:D5:BB:7C:FF:0F:82:8F:10:04:19
            X509v3 Authority Key Identifier:
                keyid:DE:98:F8:36:32:98:29:7F:BA:BA:EA:68:77:20:2B:5C:44:0E:5A:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pj4NjKYKX-6uupodyArXEQOWpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/680e29-7d83-4558-b411-e7fbd50e0349/1/3pj4NjKYKX-6uupodyArXEQOWpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:f8:ba:60:d3:5e:bf:2c:47:46:36:44:f3:77:ec:05:11:40:
         f4:36:66:67:32:38:ec:96:c7:a6:29:47:2a:d9:07:80:d3:79:
         d0:c1:1f:30:69:03:78:3a:59:0f:46:f1:7a:09:44:ce:22:02:
         c5:8b:a6:4b:44:82:26:0d:4a:93:da:87:4d:62:ca:aa:7e:6f:
         00:c5:47:14:ff:1c:c9:e2:9a:8b:8f:12:ee:03:26:62:88:95:
         26:5a:40:92:93:ae:28:fe:61:84:58:38:14:1e:2c:f2:5d:7b:
         1f:11:9a:9c:fd:65:f4:05:48:76:91:e3:29:ad:65:38:3c:78:
         2c:c2:d5:41:03:59:13:07:a9:f8:91:cc:ab:ac:6f:31:87:5a:
         64:64:51:3b:22:25:88:e7:64:c0:49:5d:f2:3f:96:4d:35:76:
         80:04:a9:29:49:1c:18:d9:bd:de:3f:20:e8:e1:08:65:71:bb:
         59:d7:06:f8:9f:c5:a9:ef:ad:3c:eb:b9:3a:31:47:aa:90:e6:
         82:e3:e6:23:83:24:47:8f:86:2f:b3:d5:69:ab:64:0f:a9:37:
         a4:b3:f7:8e:0e:8f:9e:ea:6f:6f:96:98:22:61:c0:87:87:13:
         53:8e:5d:35:ef:bf:12:29:3e:ba:e9:63:66:c6:92:69:83:95:
         f8:79:39:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----