Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
File:                     3plxFn-T_DSzvEebsh_2LTvzyYQ.mft (raw, json)
Hash identifier:          L91f9da4htENth31D9v/CJeM/Ss1JEF/5SX8AogtTY8=
Subject key identifier:   92:49:48:0B:70:06:EC:E5:BA:58:70:7F:8A:86:F6:F3:E1:13:F0:0D
Authority key identifier: DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84
Certificate issuer:       /CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
Certificate serial:       01962DF40D9B958F76BCA2439775F9512323
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft
Manifest number:          EB
Signing time:             Sun 13 Apr 2025 07:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:30 +0000
Files and hashes:         1: 3plxFn-T_DSzvEebsh_2LTvzyYQ.crl (hash: 6qFM0vuy41xtmcn+ZmNOtR8fUjil0eZuRyRasYDiih4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:0d:9b:95:8f:76:bc:a2:43:97:75:f9:51:23:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de9971167f93fc34b3bc479bb21ff62d3bf3c984
        Validity
            Not Before: Apr 13 07:01:30 2025 GMT
            Not After : Apr 14 07:01:30 2025 GMT
        Subject: CN=9249480b7006ece5ba58707f8a86f6f3e113f00d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d0:14:12:8d:cd:70:1e:01:78:1c:a8:bf:35:
                    f7:86:36:2a:5b:7f:88:12:d0:3a:b8:e9:d8:83:58:
                    c8:b9:35:8e:b3:39:e9:ee:1f:0d:25:6a:83:7e:38:
                    2a:c0:13:98:d6:a7:3d:82:a9:a4:a8:35:f5:22:cf:
                    d6:63:ff:1d:5b:8d:41:4e:0f:d6:b7:33:dc:d6:92:
                    f5:56:d5:79:37:56:2a:4d:6e:64:8f:01:1c:c1:b3:
                    32:4a:dc:76:89:7d:40:02:ad:56:12:a5:57:b6:97:
                    33:bb:77:e1:3a:61:45:25:cb:dc:98:d5:35:dd:89:
                    06:af:b3:37:3a:89:0e:b0:90:2c:d1:8f:be:e7:7d:
                    00:2f:d3:12:c4:4b:8d:3c:17:33:50:83:6b:7e:41:
                    4f:05:0e:61:12:47:6b:af:26:dc:f3:01:26:f8:72:
                    4a:a6:eb:68:97:b3:57:7d:cb:28:f8:4d:4e:88:2d:
                    6a:8a:45:0f:81:b8:38:6a:32:cf:98:7b:c1:a8:f3:
                    1f:59:52:53:0a:37:b9:fa:10:1e:c5:31:c2:48:ee:
                    12:03:2d:99:c0:f6:ea:c7:11:fd:de:2a:d1:22:16:
                    58:f1:1c:a6:50:47:e9:86:24:f2:46:51:d4:70:2e:
                    c8:83:ed:fc:26:db:49:ab:85:e0:00:cc:04:f6:7f:
                    34:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:49:48:0B:70:06:EC:E5:BA:58:70:7F:8A:86:F6:F3:E1:13:F0:0D
            X509v3 Authority Key Identifier:
                keyid:DE:99:71:16:7F:93:FC:34:B3:BC:47:9B:B2:1F:F6:2D:3B:F3:C9:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3plxFn-T_DSzvEebsh_2LTvzyYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d9be40-cd42-4a6c-9d4e-1dfbd1efd5d4/1/3plxFn-T_DSzvEebsh_2LTvzyYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:26:55:36:a9:82:98:75:0a:0d:6f:f8:57:9a:21:06:29:4e:
         f3:e6:da:d4:de:63:f9:8f:db:68:37:a0:89:66:c5:59:b0:0b:
         a4:45:91:f5:ce:72:6d:62:94:ba:64:b5:04:5a:02:df:fc:07:
         23:cd:56:98:f5:fa:4c:95:aa:bd:86:6c:86:3d:fe:12:3b:98:
         71:71:24:64:f9:5f:00:61:ee:0f:e2:82:ec:ed:f8:bc:28:44:
         6b:fa:60:85:fb:7a:59:f5:64:b6:5c:b9:4e:6b:3f:5b:75:2e:
         9d:76:c1:37:a6:2a:1d:08:70:4e:11:d9:7c:72:8a:9a:66:91:
         83:6c:ba:80:51:17:c8:64:98:c4:d7:3a:3d:1e:ee:36:2b:4f:
         5e:5d:51:0f:90:5e:ec:82:41:a9:d1:8f:44:18:22:46:db:dc:
         23:8d:23:14:6d:e0:1e:37:f9:7f:eb:31:f3:c7:bd:42:be:c1:
         4b:9e:b2:36:b2:40:d8:a9:d9:2b:38:2a:5b:ad:d2:0e:ac:0a:
         33:be:c0:2a:1a:82:0c:95:95:6e:61:96:1c:61:f0:ac:88:e9:
         62:3b:ab:03:84:98:0c:93:55:65:27:85:8f:0a:6d:f0:49:7b:
         88:7f:10:06:e9:81:ad:0a:18:62:fc:85:d5:b5:29:5a:5d:42:
         d1:8e:79:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----