Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
File:                     3pRhwhG_NVHFUHyTC0IExuxDsyI.mft (raw, json)
Hash identifier:          F89HkyZo7SIXjHFEQASBMwLrfkkkHlUaBpu+8xQEK1w=
Subject key identifier:   2D:CE:D4:20:93:61:FC:DE:BE:65:4D:6B:D2:F1:99:91:EB:34:B3:88
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Certificate issuer:       /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial:       01962FAB5BCD939B8F338B2229206C9F2AB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft
Manifest number:          0F89
Signing time:             Sun 13 Apr 2025 15:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:21 +0000
Files and hashes:         1: 3-CeBnshHuRaivw3WbqdE0Qd_Xs.roa (hash: QxTBnM9GZ47qowObu5DgA3PPZPI+pK+0T/E1jxfDI4A=)
                          2: 3pRhwhG_NVHFUHyTC0IExuxDsyI.crl (hash: dNQpHz9xBT7uK/KK8oVKpeGpCOsCd608imFmLsXrGg0=)
                          3: HxAxelvKfyvRBGZgYNyGH359bcw.roa (hash: 54oYSMM6V461t0pj1oiVJIo5XRCMuwwoyF2Ks6PmNo4=)
                          4: Vij9kWTTMdVr0KoR9iCmyiP1xZU.roa (hash: rcjHhBt0ZSx11oiGkYVO9itg34bAhG/5unoT9d3Y9g4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5b:cd:93:9b:8f:33:8b:22:29:20:6c:9f:2a:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
        Validity
            Not Before: Apr 13 15:01:21 2025 GMT
            Not After : Apr 14 15:01:21 2025 GMT
        Subject: CN=2dced4209361fcdebe654d6bd2f19991eb34b388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fb:91:d0:dc:f3:d2:22:42:e6:69:ce:d4:75:
                    b3:29:bd:a3:aa:68:52:af:1f:b9:32:78:36:87:49:
                    d2:7f:18:e5:d2:41:97:cc:c6:cd:59:9b:65:90:b9:
                    7b:d0:97:ca:d3:df:a5:c6:87:19:72:39:1c:5f:8d:
                    88:2d:52:56:77:bb:1b:90:82:b1:ab:0e:f8:63:75:
                    12:cf:39:d8:62:8e:9f:be:71:b8:36:1d:4f:55:91:
                    df:26:34:6b:02:e6:0b:d5:03:4d:22:4c:01:e0:1f:
                    01:2f:b2:cb:6a:bd:9a:c7:c1:95:b1:bc:b7:10:11:
                    75:4d:b9:5e:a6:08:db:fd:c5:c3:02:9d:a4:57:bc:
                    aa:c4:0e:cc:01:4e:9d:d2:02:e8:ed:c8:0a:57:2f:
                    64:97:36:5e:2f:a7:cd:da:d4:d9:41:1d:da:c3:ae:
                    53:98:44:13:de:fb:a4:b8:ec:ef:b2:a9:40:8a:e6:
                    2c:21:37:80:42:92:8b:ff:3b:2c:cd:a2:e3:1d:47:
                    e4:80:37:42:27:d1:24:e5:be:5a:24:b2:bd:b3:df:
                    ec:e5:3b:d9:1d:75:29:d5:c3:c3:55:12:85:d3:79:
                    ad:79:0b:e5:cd:84:dd:23:8d:7c:9b:53:1b:6d:17:
                    95:f4:a5:f0:ad:cd:9e:1d:10:5b:37:b4:2d:ca:46:
                    e6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CE:D4:20:93:61:FC:DE:BE:65:4D:6B:D2:F1:99:91:EB:34:B3:88
            X509v3 Authority Key Identifier:
                keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:de:fa:2d:38:27:7f:9c:ce:d7:bf:e4:77:24:6e:47:1b:f4:
         62:ef:e2:f4:d6:ca:fa:ac:a9:58:68:49:d4:32:6f:78:15:08:
         37:32:6a:47:98:98:2d:7e:77:a3:6d:cd:30:66:20:37:36:25:
         dc:79:6f:f0:81:cc:9e:b2:ab:d0:86:97:44:ab:8c:98:5c:3e:
         66:b2:48:ef:0d:b4:35:d5:5c:e4:d8:97:8e:84:e4:ec:b1:12:
         0c:77:a9:b8:14:d1:5b:e6:4b:cb:f5:e6:f8:37:27:7e:99:26:
         b3:68:46:b3:f2:97:d4:cb:a5:5e:5b:72:42:6a:69:7f:74:02:
         53:c8:c2:dc:92:83:77:7a:28:b8:49:e7:40:51:58:a9:bf:a6:
         0c:0d:f0:96:ef:7c:55:4c:ea:73:3b:71:c2:c5:0d:d7:c7:54:
         3a:13:f8:1a:9e:4e:2b:9a:cd:44:1c:9a:76:cf:6b:c2:9d:42:
         c8:f9:6f:0a:e7:b0:a3:49:67:0f:d5:a8:53:00:11:8f:1c:17:
         3e:8d:59:c2:26:f9:cb:31:20:0f:69:af:d7:e3:20:53:7e:00:
         2a:9b:e0:57:23:b7:4f:fa:d7:d5:5b:05:bb:91:d1:16:62:b8:
         ec:31:0f:b7:9b:93:d6:c8:e6:0c:3d:ee:6d:9b:02:f9:5d:a7:
         94:29:de:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----