Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
File:                     3KonREWCbj15XD7RjCdwDurBymI.mft (raw, json)
Hash identifier:          MgfUFIlLqZPGBmALGOcQN6zKLIRbaf3ZUQoEtqAv4vU=
Subject key identifier:   5F:DD:40:79:49:8B:50:E1:DC:CC:CE:87:78:0A:99:78:44:69:A4:6C
Authority key identifier: DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62
Certificate issuer:       /CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
Certificate serial:       01962FABA0E0234C50C587DAF77E1459E471
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft
Manifest number:          0C26
Signing time:             Sun 13 Apr 2025 15:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:38 +0000
Files and hashes:         1: 3KonREWCbj15XD7RjCdwDurBymI.crl (hash: aidx59/ywysXW4CzG9tf10Cb+WG0d3yvMy4cgLGWdQ0=)
                          2: gR7sUG_8lonr2gVlkEM1ADj5WcE.roa (hash: UjAmmUt2kVRUK4S0rWxF0FYuOfHn0p6w6/7yryAGIf8=)
                          3: x5BcxByiZpVNAIlZM7Ls67DF_VI.roa (hash: JHq7GmHRUBUB9iENpddREelx6fHNpJzwzmpidFpFMBg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:a0:e0:23:4c:50:c5:87:da:f7:7e:14:59:e4:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcaa274445826e3d795c3ed18c27700eeac1ca62
        Validity
            Not Before: Apr 13 15:01:38 2025 GMT
            Not After : Apr 14 15:01:38 2025 GMT
        Subject: CN=5fdd4079498b50e1dcccce87780a99784469a46c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7c:6a:41:e5:50:a0:90:4b:52:39:20:91:fd:
                    89:54:aa:f0:16:db:43:10:b7:74:a3:62:2a:29:10:
                    ff:08:28:40:ee:7c:ae:71:b8:80:7c:fc:71:97:5e:
                    ba:89:5a:f9:a6:51:2b:4a:96:8d:47:ec:a6:52:7d:
                    fa:4b:85:97:64:8c:cd:41:22:52:7b:7b:f9:8d:60:
                    aa:34:fa:0a:0a:a2:d7:e4:89:e4:b4:90:00:76:e1:
                    56:23:c5:de:5c:64:55:2d:6b:c9:38:96:a7:1c:b9:
                    c9:34:64:1b:a3:73:9f:11:cb:60:3e:5e:13:b1:3f:
                    fb:7d:f2:9f:4c:0f:9e:9c:67:d1:25:f9:c6:6a:83:
                    49:26:58:cc:0a:ef:84:9d:a2:10:9b:a0:17:36:db:
                    87:0e:ff:b2:dc:a1:c5:fc:cd:93:cb:2e:d2:73:bb:
                    c5:45:5f:ac:12:80:94:7f:c3:11:ba:92:b2:1a:99:
                    1a:a5:1f:bb:46:22:8c:5c:6d:77:0d:6e:ff:fa:04:
                    99:78:db:e4:fb:0e:e9:92:06:62:e8:3e:20:aa:81:
                    88:d7:bd:ca:25:45:4f:5e:db:d3:de:50:71:18:cb:
                    3a:d8:93:bf:5c:90:30:6d:74:6a:22:3e:34:e7:a1:
                    46:82:25:81:97:2c:90:0d:f0:22:4e:43:c6:d7:e0:
                    15:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:DD:40:79:49:8B:50:E1:DC:CC:CE:87:78:0A:99:78:44:69:A4:6C
            X509v3 Authority Key Identifier:
                keyid:DC:AA:27:44:45:82:6E:3D:79:5C:3E:D1:8C:27:70:0E:EA:C1:CA:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KonREWCbj15XD7RjCdwDurBymI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/188218-9ee7-40cc-8d12-9a8243e84e54/1/3KonREWCbj15XD7RjCdwDurBymI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:52:42:ff:fc:c0:f7:49:c5:5e:ec:a7:21:23:0b:a6:0f:81:
         54:f1:3e:a7:89:2b:d8:b8:12:39:bc:8f:d7:22:b1:56:87:14:
         09:00:bc:d5:6b:ea:46:78:14:e2:c1:9d:8c:64:74:3f:59:e0:
         5a:c6:08:27:b2:ba:1e:e1:2c:b8:64:dc:b3:49:f0:d7:b9:6f:
         2b:92:96:ae:3b:0e:9d:d7:24:c2:8c:b6:2d:6e:06:b6:9d:59:
         74:a8:cb:47:e7:31:a7:3d:15:ed:d5:e7:b2:53:42:50:28:67:
         9b:05:c2:e0:47:84:df:ff:b1:19:7b:1c:28:37:02:9d:fa:14:
         82:41:eb:46:f7:eb:9a:f4:01:39:5e:ab:ae:0a:dd:c7:0e:d7:
         83:99:7a:8a:0a:8f:ae:29:66:66:46:81:fd:8e:fe:f0:66:61:
         4f:f6:ed:69:2c:20:e4:2b:15:bc:a6:c3:68:14:aa:9a:39:88:
         09:d7:e7:05:17:48:33:8d:16:ce:1d:83:0d:21:3e:66:af:a7:
         75:ed:b2:45:ed:1d:c6:a2:e9:0f:00:45:54:92:3d:ac:fc:44:
         0e:13:d9:11:03:34:e1:69:7d:c8:8b:98:fe:4f:e1:13:1d:1f:
         16:24:2b:ea:f1:19:84:c6:c7:e9:d1:36:27:41:8e:5c:b8:c3:
         4b:7a:25:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----