Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
File:                     3vg4UDz7wFKD_erdRkSke_14P84.mft (raw, json)
Hash identifier:          HsPXgaW6wlbIc4BfR9jng0RGEUE0umTpkcg39o2aYFQ=
Subject key identifier:   1B:3C:5E:23:53:ED:E9:23:24:0D:0B:75:89:5F:20:EB:19:9A:C6:E8
Authority key identifier: DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE
Certificate issuer:       /CN=def838503cfbc05283fdeadd4644a47bfd783fce
Certificate serial:       01962DF3F44A78C5FCEBDAF61826DFA0A36E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
Manifest number:          0713
Signing time:             Sun 13 Apr 2025 07:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:24 +0000
Files and hashes:         1: 3vg4UDz7wFKD_erdRkSke_14P84.crl (hash: Gat7Aa2j0yWs4QlLI2HJNDEUjA4hUMbGMlf9UVRJ6iA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f4:4a:78:c5:fc:eb:da:f6:18:26:df:a0:a3:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=def838503cfbc05283fdeadd4644a47bfd783fce
        Validity
            Not Before: Apr 13 07:01:24 2025 GMT
            Not After : Apr 14 07:01:24 2025 GMT
        Subject: CN=1b3c5e2353ede923240d0b75895f20eb199ac6e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:27:93:b8:d5:53:8c:5d:7e:95:16:c3:09:d5:
                    0b:64:30:70:a7:e4:04:f8:95:52:cc:37:45:9a:50:
                    63:a4:9a:ad:d4:05:a4:2a:23:02:be:07:04:5d:17:
                    51:67:83:5a:2f:74:5d:1e:e3:28:c7:5a:23:7f:b1:
                    81:d5:33:7b:8f:33:38:d1:fe:d5:db:42:66:b9:e6:
                    9a:1e:d3:7c:c1:1e:68:04:22:a2:a4:c2:eb:a9:26:
                    eb:07:7c:a7:7d:46:b8:95:b9:d1:8f:d0:24:b8:87:
                    4f:d4:dc:e7:31:e5:7e:ee:1d:6c:7f:dc:70:b4:e9:
                    48:e7:b6:4a:fe:12:71:c2:7e:27:77:03:bc:52:fa:
                    6b:fd:d1:28:d2:fc:cd:19:21:d0:45:c6:3c:53:de:
                    76:65:9f:c1:19:f4:2a:c8:5e:59:f2:45:52:3a:ba:
                    da:46:1a:5a:0b:01:e9:3e:eb:ac:49:9b:c5:55:61:
                    fa:ee:44:b0:5e:b1:a9:80:c9:8e:fd:66:59:3f:ed:
                    5c:96:19:f4:f0:e8:2e:44:40:80:79:ca:54:f6:d0:
                    b2:c2:0f:c6:2f:86:32:eb:46:17:f5:4f:65:47:52:
                    80:9e:0b:d8:76:88:da:a9:4f:b7:30:f2:87:bb:64:
                    3e:25:27:0e:a1:37:7d:13:05:48:37:8a:b4:cc:a5:
                    a9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3C:5E:23:53:ED:E9:23:24:0D:0B:75:89:5F:20:EB:19:9A:C6:E8
            X509v3 Authority Key Identifier:
                keyid:DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:88:e9:f5:65:79:12:9f:1e:e3:77:d0:3c:70:da:3f:b8:10:
         62:ec:38:38:00:80:60:9f:51:86:10:06:c2:c5:8a:f5:1a:9a:
         24:44:32:ad:45:8b:f5:82:b9:6d:a6:71:07:11:c2:cb:e5:02:
         ec:1f:d4:ee:65:3d:73:a6:47:d5:f2:97:f6:aa:f6:38:7c:23:
         a0:cd:85:a8:20:24:56:25:0b:4e:84:ea:8a:4d:18:1b:bd:e7:
         cb:b4:b9:26:df:1c:08:9c:36:3f:72:0f:9b:0c:25:e9:4f:a6:
         2a:ff:d2:11:db:10:3a:c9:35:6f:c2:ea:98:ff:17:3a:53:9d:
         5d:03:ce:74:70:84:64:e9:1d:be:8b:01:0d:15:68:a9:12:1e:
         68:cf:07:1d:c7:13:78:5f:9d:6c:c8:5c:7b:e1:b4:40:7e:e4:
         29:e5:ac:e1:d2:cf:93:34:37:2f:a2:05:35:5b:b0:ec:31:bd:
         83:37:1b:19:68:87:45:27:24:8d:d7:8f:e7:99:c1:64:c0:59:
         40:f7:a9:00:d8:ac:d5:5f:f9:1d:d6:fd:49:43:df:27:c4:ce:
         40:37:9b:ab:c0:89:44:6d:68:4d:4b:42:26:f3:02:56:95:2a:
         b7:f3:77:3d:9f:2a:0e:37:63:86:3a:69:4a:9f:1e:ef:64:9a:
         10:42:44:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----