Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
File:                     itN6mTOwUsLxLvG48U108F_dthE.mft (raw, json)
Hash identifier:          CLfPNerCHNpnJmg+ZQO2/PnwSJHjPpdO5xSuCPbq+Us=
Subject key identifier:   DC:80:39:01:C9:F7:13:71:96:46:AF:09:E2:52:04:10:D2:03:70:6C
Authority key identifier: 8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11
Certificate issuer:       /CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
Certificate serial:       01962E99AD3BEB8844B48C87A570D77C1C3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:02:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:25 +0000
Files and hashes:         1: JwgRDJiJNlMDAQ-P-K-E7oLdVEE.roa (hash: eWvYggxPbmUrtkETleY+0mXFUMuKDGQl8Ca4V2dhuzo=)
                          2: RE9aFykceNUyqQ5Yh55JiiN859A.roa (hash: h9rNiKJSEqsRDhT3jZgfTnHK3ITCLzU3oznaGDO3rok=)
                          3: itN6mTOwUsLxLvG48U108F_dthE.crl (hash: lPbZv7UrO1TXUfMGfyTzfCmnXko9f6H7XXniFkjDTkE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:ad:3b:eb:88:44:b4:8c:87:a5:70:d7:7c:1c:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad37a9933b052c2f12ef1b8f14d74f05fddb611
        Validity
            Not Before: Apr 13 10:02:25 2025 GMT
            Not After : Apr 14 10:02:25 2025 GMT
        Subject: CN=dc803901c9f713719646af09e2520410d203706c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ab:04:01:ad:ac:0a:61:f1:66:2d:5c:cc:02:
                    07:e4:07:cb:8d:14:3c:13:22:cb:42:4f:22:0c:36:
                    6c:63:cc:61:79:4a:53:e0:fc:b2:d0:b5:79:37:1d:
                    e3:0e:36:ad:a8:eb:c7:9f:a1:cf:0f:6c:af:7f:b3:
                    df:8b:b7:4d:37:bb:7a:9e:32:d1:b7:f2:01:2e:d9:
                    08:d2:6f:d0:a9:b2:03:5f:8d:cb:c2:5c:8e:18:86:
                    59:0a:9c:aa:10:fe:c5:11:4d:71:b3:e7:d1:0d:f2:
                    fc:cd:4c:b1:dd:61:75:3c:d6:65:02:c2:02:51:d3:
                    86:70:dd:3a:12:d4:92:f2:d9:cd:70:45:c7:75:66:
                    f3:7a:68:42:9e:f8:c7:fb:d7:ea:28:90:09:65:d7:
                    a2:f7:7a:63:eb:ee:f9:e4:13:5c:b4:03:a5:89:31:
                    88:d8:da:26:d0:64:3e:c0:d5:a1:cc:43:77:d2:7d:
                    36:28:67:d9:2a:e0:db:0a:f6:45:25:47:13:83:80:
                    e3:bb:27:35:31:d3:f2:dd:e5:f7:42:30:e9:d9:19:
                    b7:02:0e:c9:f5:ab:e7:20:e1:bc:04:a6:d7:06:cf:
                    c0:69:22:59:50:ea:e8:58:9f:2d:a9:0e:67:a4:64:
                    35:6e:c3:50:e1:1a:64:c0:5a:0a:39:b5:03:78:35:
                    ee:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:80:39:01:C9:F7:13:71:96:46:AF:09:E2:52:04:10:D2:03:70:6C
            X509v3 Authority Key Identifier:
                keyid:8A:D3:7A:99:33:B0:52:C2:F1:2E:F1:B8:F1:4D:74:F0:5F:DD:B6:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itN6mTOwUsLxLvG48U108F_dthE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3e3126-3f4f-48e9-abef-5cb11a368d10/1/itN6mTOwUsLxLvG48U108F_dthE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:23:0d:05:8d:65:78:70:2b:5d:76:3e:7b:f5:82:a7:01:eb:
         5c:e9:57:9f:96:99:36:a0:52:8f:1c:b6:f4:75:86:90:9f:91:
         b4:1f:f3:9b:9c:eb:04:f2:f4:23:74:49:07:4d:45:b0:2c:84:
         8a:5b:20:cf:99:3d:7d:72:31:31:ad:b9:22:c3:62:4b:e3:97:
         d9:13:0f:2e:6b:62:08:86:a3:14:ae:2f:bd:7d:6e:d9:e4:d7:
         9b:50:eb:c3:26:e7:f8:7f:46:0a:77:cf:4b:2d:22:ea:74:62:
         2c:72:69:4d:ce:bb:ab:e0:8c:8f:e2:a1:e8:13:53:c1:36:d5:
         7f:a0:3a:38:98:dd:a3:0f:89:b2:f5:fb:17:f3:8f:bc:30:49:
         f0:f0:15:f9:9a:11:22:ff:61:90:0f:b4:4a:b5:28:0a:0c:7a:
         9b:34:ee:f0:30:46:ff:3e:58:67:6c:33:b5:36:bc:40:f6:ac:
         7f:81:e9:a6:12:fb:bf:13:06:9f:b8:f6:5f:ab:66:e8:5c:3a:
         77:36:9b:67:da:fc:59:50:3b:4b:3d:e6:70:ad:b8:f7:94:ee:
         b8:fe:1e:8d:df:8f:4b:2a:19:2c:99:e4:83:81:40:45:c3:56:
         d2:24:2b:da:d6:45:d5:22:b6:36:74:3c:79:72:64:4b:96:c2:
         aa:b6:ec:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----