Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
File:                     493Ty2SL60JR1HzEtlvNZLCajUs.mft (raw, json)
Hash identifier:          +oIW56du248CLqoKSpPbmHFOV+n+MG5sSzycTTNMrBo=
Subject key identifier:   D9:F5:EA:A8:FB:34:C5:26:5B:23:D4:28:2F:E8:33:12:9D:82:44:C4
Authority key identifier: E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
Certificate issuer:       /CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Certificate serial:       01962F06FB9A0B9276353A6263118CE8966E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
Manifest number:          0D52
Signing time:             Sun 13 Apr 2025 12:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:48 +0000
Files and hashes:         1: 493Ty2SL60JR1HzEtlvNZLCajUs.crl (hash: tOt8UTujlCz/ppD+XhTLeSg/66uuqAxELYsQE55OCdA=)
                          2: VaNHYKd7fkf8MUmIAFzRDiRSuAg.roa (hash: kArqpkPgXwbWfVfsCGeziL2LJL/J3oK8UFUA3DsKS6g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fb:9a:0b:92:76:35:3a:62:63:11:8c:e8:96:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
        Validity
            Not Before: Apr 13 12:01:48 2025 GMT
            Not After : Apr 14 12:01:48 2025 GMT
        Subject: CN=d9f5eaa8fb34c5265b23d4282fe833129d8244c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b0:dd:8b:ba:ad:6f:1f:a6:b2:3a:df:35:37:
                    53:3a:0d:b0:70:4f:d0:d5:f6:aa:e6:68:21:34:a1:
                    2c:f9:22:a1:f3:57:20:61:40:0a:19:94:92:1d:60:
                    1d:1e:4f:e5:7b:41:04:60:fc:14:42:a3:ae:65:52:
                    63:72:8e:29:f7:fc:5f:fd:5b:09:fc:2c:be:c7:99:
                    65:11:8f:65:89:04:db:7b:46:00:92:58:57:34:5c:
                    c5:d7:16:bf:08:73:58:55:03:1a:23:5c:74:c8:71:
                    05:2b:f7:13:c9:35:1b:a0:3d:56:c1:2c:0f:e1:60:
                    3c:27:22:f9:71:ae:b7:c6:90:29:1f:48:43:2c:80:
                    d9:19:c1:16:6b:1e:d3:38:97:ad:fc:36:53:af:29:
                    8c:82:35:02:00:5f:c3:d6:47:ff:9e:99:92:77:4e:
                    9b:18:8d:59:92:05:8a:d4:1d:d0:a1:92:0d:a8:53:
                    91:20:b2:18:6a:54:82:d0:70:fb:40:d4:39:4d:9a:
                    d1:50:e5:34:5c:b8:da:1a:77:89:4a:fc:7d:3f:b9:
                    88:ec:e7:3f:8e:37:46:e5:70:4b:dd:8c:36:28:f2:
                    36:76:ac:5e:54:e5:fe:a0:4a:e0:7d:58:d9:9b:52:
                    e8:f7:6f:6a:db:33:9c:e4:2e:20:24:62:e5:fb:c7:
                    03:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F5:EA:A8:FB:34:C5:26:5B:23:D4:28:2F:E8:33:12:9D:82:44:C4
            X509v3 Authority Key Identifier:
                keyid:E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:92:ac:17:c2:3c:89:8c:d5:bc:42:20:4b:2b:4b:a7:93:01:
         7f:68:0a:a7:8e:42:f2:f4:1c:d9:c1:13:b3:c6:e6:55:15:e3:
         a3:fa:fb:f3:3a:b4:d5:95:d8:83:9e:4c:96:c0:60:04:e1:4a:
         ce:65:e0:3b:47:7c:78:00:e4:1b:fe:08:c3:7c:63:7f:0c:70:
         12:03:86:64:cf:e1:c6:a2:c7:45:fa:9f:8c:84:d3:2d:5b:83:
         91:4d:b6:b5:f3:27:d2:1f:38:d4:a2:09:e4:96:e1:02:91:69:
         3a:cd:03:27:47:d7:33:a3:2e:33:e1:ab:5b:83:d9:8b:25:34:
         23:19:5d:f6:35:e0:ae:c6:2f:b0:0a:fc:a3:97:15:24:32:21:
         af:31:4f:fe:8b:4d:e5:b2:5a:b7:f0:80:51:c9:7d:16:01:a5:
         fb:1f:d1:25:4a:50:5f:f8:10:ea:17:f5:22:89:e6:3f:c8:22:
         ac:bc:75:34:41:0a:c5:60:4c:76:b2:ff:06:14:c4:32:7e:c2:
         7c:b8:c2:82:6a:0b:1c:bd:f8:34:a8:72:1b:45:13:9a:32:1d:
         4f:0c:fa:c3:b3:0d:33:07:02:68:5e:61:2d:47:db:c3:2e:8a:
         68:c6:76:02:91:a7:ad:ce:2c:52:ce:25:24:e9:48:62:6e:88:
         ab:a6:e5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----