Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
File:                     34CJqp4dXBKrrUOnAVEdocZfn6Y.mft (raw, json)
Hash identifier:          Y+ZCUjm4suAsC1WSXvHIeiLwk9nIaxqKXgJ60gR59VI=
Subject key identifier:   69:3A:8A:37:75:33:8B:77:04:3C:EA:D0:9B:02:EE:D0:9E:48:52:14
Authority key identifier: DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
Certificate issuer:       /CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
Certificate serial:       01962F3DC1EDE18760B1FD6ACB757A35C67E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
Manifest number:          0DF8
Signing time:             Sun 13 Apr 2025 13:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:38 +0000
Files and hashes:         1: 34CJqp4dXBKrrUOnAVEdocZfn6Y.crl (hash: c1q3mJhemKfX8h8jVD+XO/JkFC69mbsakPFvatYa+GU=)
                          2: b-VOh1iyKHVcDysv8XYced0xnLo.roa (hash: 0b/hMsK4rsISxKd+Kzt0DOFihl9RrwFHAkmEpylmN4I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c1:ed:e1:87:60:b1:fd:6a:cb:75:7a:35:c6:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
        Validity
            Not Before: Apr 13 13:01:38 2025 GMT
            Not After : Apr 14 13:01:38 2025 GMT
        Subject: CN=693a8a3775338b77043cead09b02eed09e485214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:26:81:50:09:95:e2:f4:c8:ec:34:dc:85:cc:
                    50:4b:7b:98:28:e0:fb:95:52:e7:aa:42:9f:50:71:
                    a1:6f:71:b4:f9:c2:91:88:a2:07:14:08:6b:9b:9f:
                    11:53:0b:0c:38:03:b5:63:4c:da:37:fe:e6:3b:52:
                    8f:93:be:97:5f:f7:f6:37:49:82:4a:8d:6b:69:b8:
                    32:06:87:0b:42:e6:55:d7:11:6e:d5:b2:3a:9b:5f:
                    6a:51:98:c3:7b:4c:5f:19:8d:fe:5a:d6:29:a4:01:
                    65:0f:a2:d4:a7:73:dc:38:79:e6:77:5b:62:d6:ea:
                    de:dc:86:d4:e4:2e:37:62:eb:09:d1:bf:3c:18:c3:
                    17:7f:b9:85:ac:13:cd:3b:24:4c:e5:71:a4:1f:12:
                    54:50:51:af:b4:9d:b3:0d:11:f4:01:bd:e6:9e:26:
                    70:fb:2f:a6:8c:c3:d7:e3:4f:57:c1:f8:2c:a8:d2:
                    8f:27:22:c9:aa:eb:da:55:e4:b1:59:f7:d3:54:95:
                    02:4b:08:2b:ea:db:d1:74:3f:d3:cb:7a:f5:24:e8:
                    14:ed:9c:48:3c:5e:55:35:ae:b9:dd:49:92:29:ac:
                    ed:81:53:87:b1:ff:ca:ce:67:b4:d5:57:c5:3d:ea:
                    db:b8:bb:3a:93:bf:55:37:7e:a9:5b:a0:6c:ad:df:
                    b6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3A:8A:37:75:33:8B:77:04:3C:EA:D0:9B:02:EE:D0:9E:48:52:14
            X509v3 Authority Key Identifier:
                keyid:DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:29:bd:f4:da:b5:7f:df:bf:25:02:b3:3b:0a:ab:eb:0e:93:
         51:42:2a:78:6a:d0:23:61:13:42:79:93:b9:80:88:7f:91:f9:
         b5:ec:42:f6:3f:34:e0:4b:28:5d:3b:d0:5a:d8:8e:2d:cc:fb:
         d5:df:0b:5b:dd:87:27:91:f4:d3:dd:e3:4d:af:46:f5:91:d2:
         7b:96:fa:3b:66:cc:74:72:3e:57:08:5a:e9:3c:62:42:2e:2b:
         9d:87:33:78:04:34:da:f8:d4:d9:2a:73:b7:09:91:fa:b6:eb:
         df:8e:f2:d1:05:ef:51:5d:ed:c0:c8:83:ea:e4:3d:1b:5d:ea:
         38:ba:15:cc:0a:3e:c8:95:3b:b7:59:eb:f2:db:16:dc:fa:e7:
         59:7d:0e:60:cb:8b:a6:eb:99:b9:c6:28:38:67:a9:94:24:01:
         06:2c:ff:d6:2d:34:38:25:a4:6a:4c:5f:18:aa:a2:62:7e:d9:
         3b:1d:89:08:9d:0a:e6:ef:2f:c9:8f:67:ca:49:b8:c2:d2:53:
         5a:0d:e9:d2:c8:2b:34:c8:97:ea:60:09:30:81:77:c3:d6:22:
         44:04:5d:c9:98:b2:24:d3:04:8f:a0:0c:4d:fa:96:48:d8:8b:
         71:db:1e:34:64:62:05:f7:55:f3:b4:27:cf:b5:15:ed:3d:35:
         69:10:9a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----