Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
File:                     3itcv5Z6A0nYiXBLtNYfpSajHW8.mft (raw, json)
Hash identifier:          Kf08hLzdeBncThKN0tKYhhbN9XN+k3Gjc8UrhOZMPi4=
Subject key identifier:   16:3A:61:27:0A:8A:13:E5:2A:E4:BD:B1:79:9F:13:D4:1A:42:F5:D2
Authority key identifier: DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F
Certificate issuer:       /CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
Certificate serial:       01962FAB346E6A93FC6A9A01945524381474
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft
Manifest number:          142A
Signing time:             Sun 13 Apr 2025 15:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:11 +0000
Files and hashes:         1: 3itcv5Z6A0nYiXBLtNYfpSajHW8.crl (hash: 1HlD5N/6/sOlgysjLhCxDPvVRuXhOft0GHtDh5W1/uQ=)
                          2: RmRTHkNLraqOOzazgFQdU_YCKkM.roa (hash: 5SoXabo2aLivwm4lm+kA69S7S7+v67Nc52d80muCgcE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:34:6e:6a:93:fc:6a:9a:01:94:55:24:38:14:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de2b5cbf967a0349d889704bb4d61fa526a31d6f
        Validity
            Not Before: Apr 13 15:01:11 2025 GMT
            Not After : Apr 14 15:01:11 2025 GMT
        Subject: CN=163a61270a8a13e52ae4bdb1799f13d41a42f5d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:70:ec:23:9e:af:24:49:f4:91:17:ea:d6:07:
                    fc:e0:68:1d:98:ec:f6:56:30:c6:ca:a2:bf:c4:31:
                    6c:9a:92:6f:77:9b:da:6a:ae:64:72:f2:20:a7:37:
                    7c:3a:f3:43:4e:06:a1:7a:53:cc:7f:3e:59:31:c1:
                    07:b1:16:90:39:db:69:b1:98:c2:32:d6:83:83:7f:
                    7c:d7:9c:9d:b0:4a:d7:e2:11:e9:be:99:e4:40:87:
                    17:99:f1:b2:0c:77:30:6a:72:03:27:43:22:eb:d1:
                    17:64:ea:8e:ca:7c:17:79:63:47:c7:d9:08:09:0e:
                    9b:99:5e:21:bc:34:ae:7c:db:90:7c:81:38:37:8e:
                    e2:7a:e0:bc:1b:26:64:cc:40:d1:84:68:38:64:af:
                    65:34:0d:77:0a:11:a1:cc:6c:f1:92:b1:3b:bf:7b:
                    d9:3a:93:2c:07:49:d2:a6:44:8d:6c:f4:10:82:e3:
                    a2:42:a1:df:f1:3a:a9:b5:e7:03:01:ea:e9:0c:6c:
                    f3:59:07:05:a4:0d:a2:1b:f1:dc:f2:a1:f6:76:2c:
                    cb:be:4d:b3:bd:44:bb:6e:e0:34:a6:81:27:c3:52:
                    a2:c6:30:4d:a1:56:c7:c2:d5:9f:42:94:8a:65:10:
                    ac:d0:4f:a0:44:f4:a9:c7:8c:54:84:a9:86:1c:68:
                    43:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3A:61:27:0A:8A:13:E5:2A:E4:BD:B1:79:9F:13:D4:1A:42:F5:D2
            X509v3 Authority Key Identifier:
                keyid:DE:2B:5C:BF:96:7A:03:49:D8:89:70:4B:B4:D6:1F:A5:26:A3:1D:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3itcv5Z6A0nYiXBLtNYfpSajHW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/646e7d-4f46-407c-bdd0-fd72d962df27/1/3itcv5Z6A0nYiXBLtNYfpSajHW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:36:3b:db:60:96:54:f7:ac:78:d6:57:2f:cb:94:2a:f1:74:
         19:90:af:ff:80:92:d1:9c:63:4c:5c:2b:ff:59:dc:7f:be:92:
         bc:8e:74:e5:c6:44:aa:0b:a1:0c:d2:b9:70:e8:a3:0e:07:8a:
         ad:59:93:4e:48:28:cd:e9:d2:6f:b9:cb:b4:1b:5e:27:6a:7d:
         79:11:dc:c6:e1:7f:7c:f3:d4:ce:72:fa:85:06:15:5d:f7:08:
         4f:a0:ff:ee:8d:d2:08:3f:98:58:0d:30:47:7d:37:24:21:db:
         8b:26:eb:6d:ac:c2:18:cc:8b:60:7c:28:25:6d:82:ea:b9:d5:
         45:f4:c9:41:59:c5:31:37:f2:b6:b0:a0:13:37:f5:b7:38:79:
         e6:95:28:4a:4f:98:d7:a3:30:0c:39:e8:a6:ec:ba:ad:49:8a:
         8c:97:92:c9:0c:ae:0d:bb:f0:0c:20:ee:dd:31:06:db:0b:51:
         cf:62:b2:8a:eb:10:e4:b1:03:e7:42:00:50:03:3a:3b:4e:ae:
         f6:98:22:68:99:65:29:e9:2c:f3:f1:04:a7:0d:a8:08:19:1b:
         95:dd:cb:f4:87:f7:86:70:53:e2:22:0a:d0:1f:a0:83:62:1c:
         c2:a6:91:db:87:8b:23:9d:65:8a:3e:01:dc:5f:5d:5f:e9:da:
         b2:d2:1a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----