Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
File:                     3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft (raw, json)
Hash identifier:          hMErMWWHy2QlzggwcycH9EcHyxG+VW4cVbuv1fBwn04=
Subject key identifier:   BB:89:60:0C:BC:91:3C:BB:43:8B:22:7F:13:8B:BE:28:D6:69:8E:A3
Authority key identifier: DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6
Certificate issuer:       /CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6
Certificate serial:       01962E2ACEF5F2F269E395EF702D19029731
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft
Manifest number:          0BF8
Signing time:             Sun 13 Apr 2025 08:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:19 +0000
Files and hashes:         1: 3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl (hash: t4Pdqi4QYhn+X2FfDKwS2WQIj4p9vU9+ez9Rj3epFlc=)
                          2: vmqKHuLzrPkqklGr2oHlX4A5H1s.roa (hash: HWx6FXZlLIKlHVfqDThyZuNv2Ccv+hNVkaueWiNq1XE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ce:f5:f2:f2:69:e3:95:ef:70:2d:19:02:97:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de5e6c2330911bc1dc8c83d411ef6b1208b3bbd6
        Validity
            Not Before: Apr 13 08:01:19 2025 GMT
            Not After : Apr 14 08:01:19 2025 GMT
        Subject: CN=bb89600cbc913cbb438b227f138bbe28d6698ea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d1:7f:02:7e:af:43:f4:ac:b0:85:d5:5d:d7:
                    c5:21:30:5b:0a:4a:a0:73:57:76:1f:bd:36:29:60:
                    b1:8b:ad:34:58:d2:e1:82:ad:8b:18:88:04:7d:ea:
                    fd:20:a9:f5:a8:99:e6:10:e3:1f:69:7b:4a:14:b1:
                    77:df:08:b4:66:f8:c6:31:9a:79:59:87:ff:6f:47:
                    e6:55:b5:34:38:98:53:1d:4c:c8:ff:e4:84:65:7a:
                    7f:95:d2:19:30:3d:4f:81:db:73:50:6b:b6:57:ac:
                    44:5f:cc:a7:4b:0d:b6:30:00:6a:71:98:e7:23:f4:
                    5e:96:4f:07:70:80:23:48:9f:80:70:5e:4a:d8:bc:
                    ef:8d:36:97:ae:1b:2e:6c:fd:0f:e0:7f:82:c5:be:
                    05:57:64:c9:9e:b2:6e:90:48:de:2b:a8:20:85:fa:
                    53:67:ad:04:42:60:1a:14:c4:c9:ed:ec:24:1b:3a:
                    0b:56:3b:87:26:89:6d:ed:52:5a:da:15:28:73:ac:
                    dd:09:7d:d8:85:ec:2c:ac:3a:f3:ed:ef:03:c1:ed:
                    b3:11:dd:25:b4:de:0b:f7:62:79:5e:d7:77:a5:ee:
                    46:f1:e0:53:89:79:2f:35:81:f4:c4:ab:d1:85:4c:
                    1f:1f:c8:34:8a:1a:79:54:37:a2:04:74:63:72:6c:
                    b2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:89:60:0C:BC:91:3C:BB:43:8B:22:7F:13:8B:BE:28:D6:69:8E:A3
            X509v3 Authority Key Identifier:
                keyid:DE:5E:6C:23:30:91:1B:C1:DC:8C:83:D4:11:EF:6B:12:08:B3:BB:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l5sIzCRG8HcjIPUEe9rEgizu9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de9d72-fcd4-4c7c-89ca-de4ba786f872/1/3l5sIzCRG8HcjIPUEe9rEgizu9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:78:a4:12:7c:20:80:af:e4:16:e6:32:e2:07:ea:0d:58:52:
         b6:07:57:c2:be:4a:63:b7:65:1e:a6:dc:ef:bf:4a:ba:44:07:
         19:ed:b6:6b:d7:33:76:a8:69:45:23:5a:88:47:65:4f:19:46:
         ce:10:39:c3:ce:9e:a5:60:4b:d6:60:e5:55:f8:5b:c6:fa:d3:
         2d:ed:c0:ea:d0:f2:b0:46:78:d6:4b:49:dd:c5:89:cc:a8:4a:
         b8:5a:b6:f7:a9:43:58:7a:3e:04:83:cd:08:b2:03:ae:93:bc:
         6f:a3:46:99:0b:5b:6b:23:e3:f1:4b:fc:54:5a:63:00:89:7e:
         2f:c5:f0:96:f8:aa:16:0e:52:6c:83:b6:5a:9e:08:0f:41:0e:
         39:65:9f:a1:88:64:6e:b3:eb:d9:51:93:9c:24:b3:a9:62:26:
         bc:d9:0d:1d:01:22:bf:bd:c1:e2:37:61:56:7d:89:4a:f5:c6:
         c7:85:d7:15:b1:b3:77:ad:3c:7a:99:af:b6:d7:e4:39:b4:0f:
         de:1c:38:ba:a7:eb:e9:1a:f1:a0:d1:4d:ad:0c:c8:0c:4b:e6:
         58:d0:48:2b:f8:8d:15:88:d6:d4:f8:b7:a4:02:15:a0:cd:28:
         e2:99:a9:5e:6a:9e:b1:14:10:14:16:b4:d3:52:19:2f:4a:7f:
         26:76:81:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----