Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
File:                     K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft (raw, json)
Hash identifier:          NWFqAqZV1DZS9ZF5PPMpR7dsztoh0KnudBvF9dW4YF8=
Subject key identifier:   4D:AC:61:68:B6:E8:7A:8F:18:08:EA:76:84:D6:43:FE:75:A2:33:DD
Authority key identifier: 2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69
Certificate issuer:       /CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
Certificate serial:       01962ECF6B96D179F35D55054C0B5A27C6D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft
Manifest number:          015B
Signing time:             Sun 13 Apr 2025 11:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:07 +0000
Files and hashes:         1: K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl (hash: RNTAmI9AvnB/GJOO1ljauf2zfb39FRrVrAeEuczAqsE=)
                          2: cRNU9mqjTuLyrs64AbQG-Q8lS_M.roa (hash: gATqx8bTowXwaPkDc2Os+EOXUJAixbB51eSVdjtnNog=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:6b:96:d1:79:f3:5d:55:05:4c:0b:5a:27:c6:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b78cdca1616c3c6b5f191fc33a934789b12c069
        Validity
            Not Before: Apr 13 11:01:07 2025 GMT
            Not After : Apr 14 11:01:07 2025 GMT
        Subject: CN=4dac6168b6e87a8f1808ea7684d643fe75a233dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:91:84:dc:09:05:a9:c9:0e:8e:33:f1:45:ac:
                    d2:a0:5c:50:29:03:6c:b4:4b:89:f4:59:57:7f:61:
                    a1:e1:87:f1:5f:bf:7e:6b:d8:cd:24:45:d2:c6:7d:
                    91:5d:25:c9:06:02:7f:ce:5d:02:98:2e:7b:7e:a1:
                    a9:4f:2c:63:cb:d3:70:33:72:9d:a9:a4:cd:25:d6:
                    45:b6:43:80:f1:05:5c:e1:b3:68:0b:af:48:d8:fa:
                    22:a2:3b:79:e4:4b:ed:c0:8a:46:e3:d5:26:96:6d:
                    3f:53:91:7a:3f:e4:80:f4:5f:85:e2:2c:7f:85:11:
                    bf:ee:07:ad:bc:1c:6d:9e:30:20:c1:39:e3:a4:97:
                    67:31:32:70:dd:df:e6:20:2d:42:6a:e0:5c:8b:fb:
                    86:b4:83:f1:48:31:c2:44:c0:c7:42:46:ab:7e:75:
                    83:43:ab:6c:88:a4:0f:5e:6d:1b:95:02:af:93:6c:
                    9b:ea:16:a4:2a:20:ea:cb:62:61:0e:87:b0:63:3f:
                    d7:e9:d9:0d:e6:67:8b:55:b2:1f:16:17:15:ce:63:
                    90:44:25:bc:8a:16:59:a6:92:88:95:10:13:c7:75:
                    4b:7c:92:7a:59:1d:b1:87:a0:70:88:e7:d2:6a:4f:
                    ce:79:dc:71:b8:25:c2:66:9b:af:0c:8f:79:1c:ef:
                    16:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AC:61:68:B6:E8:7A:8F:18:08:EA:76:84:D6:43:FE:75:A2:33:DD
            X509v3 Authority Key Identifier:
                keyid:2B:78:CD:CA:16:16:C3:C6:B5:F1:91:FC:33:A9:34:78:9B:12:C0:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3jNyhYWw8a18ZH8M6k0eJsSwGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7c49c-b6d0-45de-bfba-3eaa034a8978/1/K3jNyhYWw8a18ZH8M6k0eJsSwGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:da:fe:79:f1:67:09:90:f6:8a:43:7a:10:66:cf:d2:1b:c4:
         70:20:f4:1c:33:da:34:bf:40:ca:fb:ef:54:77:44:3c:36:e1:
         5f:2d:68:1e:00:7c:66:ad:29:02:2c:42:40:b8:ef:05:0c:56:
         45:45:22:76:7f:ee:00:a0:31:9a:a7:d9:79:b3:d2:0c:b9:2b:
         19:bd:91:ae:c5:df:3a:3d:11:44:71:24:14:be:31:58:38:c0:
         66:b6:3c:6f:35:e3:ee:d3:0a:38:b1:f8:44:e5:18:7e:82:e1:
         c3:1c:c4:f3:24:3c:1a:f7:54:19:57:93:40:7c:73:5e:8b:02:
         8e:87:54:f3:99:d6:31:f8:69:69:8c:54:d2:73:cc:c7:f2:bb:
         14:11:81:dd:09:f8:0c:97:cd:b0:fc:46:7c:fd:ef:7f:50:90:
         54:63:66:b4:f0:2e:53:7e:e4:df:dd:40:d1:f7:ac:1c:9c:01:
         38:d4:ab:72:76:d1:e6:0f:25:a3:32:2d:0c:23:da:3d:10:2b:
         c5:8e:ce:16:dd:48:bf:a8:e8:bd:35:00:1e:4f:24:95:55:57:
         1f:d8:a5:8d:96:d1:1a:09:79:32:c2:73:ef:17:33:00:fa:5b:
         7f:72:8a:ed:5c:64:01:04:fe:01:38:c6:68:c5:d7:cf:aa:3c:
         80:cf:64:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----