Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
File:                     3g2da2l8ochlcMJWhi5oWLR5nIU.mft (raw, json)
Hash identifier:          PYquZxXpfrQmBGtXKlwJfFVcLUSokubR6MkTrPBdTqw=
Subject key identifier:   D4:81:12:9F:D0:69:60:FE:A1:B6:50:32:B7:E6:50:F0:F9:FF:40:21
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Certificate issuer:       /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial:       01962E2B1CFB89EECA9CE27EBFB4D138775E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 08:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:39 +0000
Files and hashes:         1: 3g2da2l8ochlcMJWhi5oWLR5nIU.crl (hash: uum8fseXOek2oGUSzmrKfg3IjZPUV4lRIf1ezsAqgfY=)
                          2: CURhnBTebRtFbuqIF-dFXdwxOsI.roa (hash: N2c5XcgW+AQpVpLwLHbjy6S9Vm1RjK7GXpDlAsFZpfk=)
                          3: EUX35BVNkJsUjFXuBk75OVm9PCc.roa (hash: K2j+jUDEk3zskvvRatSmoYAxHWdNXJq7sEJx+OMyHQQ=)
                          4: EpSf_xGsxic86z10zbwqzKmasW8.roa (hash: eSnnnz/WKP7V/MJyjND4ey6FBA8RQok1qLjk+ng6oW4=)
                          5: P2rbCazRzAecS6cq7qBlJh3ulhk.roa (hash: eS1swdw4PwPA3JuCzPIM9DRGgb8q7vXujdInn+mWiHc=)
                          6: mld6HE3RapKTIrTK3ARnJwX6Nfo.roa (hash: QckW2u4tae0vEXpqjOByW8q7ybuT0MKIf8YyQZ8Ec7k=)
                          7: pX4EUgeDNNWi24hGb7Vs1LSwVFU.roa (hash: 8qojOgWb70IVU0ElW5/Sut6REATPavh52G81zhsEHj4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1c:fb:89:ee:ca:9c:e2:7e:bf:b4:d1:38:77:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
        Validity
            Not Before: Apr 13 08:01:39 2025 GMT
            Not After : Apr 14 08:01:39 2025 GMT
        Subject: CN=d481129fd06960fea1b65032b7e650f0f9ff4021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0c:ba:c2:9f:a8:b0:3b:75:22:3b:fe:65:58:
                    41:b9:41:6d:92:5d:10:5c:2e:9f:5c:16:1a:0c:26:
                    43:f8:f2:19:d1:a5:81:bf:99:6f:4b:d7:27:67:0c:
                    0f:38:7f:d9:fc:87:94:6d:ad:dc:57:46:c5:71:a1:
                    f7:11:05:32:14:a3:dc:29:2d:c5:39:d6:5c:55:ca:
                    95:84:36:fe:b9:3a:ef:ab:67:ee:ff:5c:ba:bd:8b:
                    a6:fd:04:5e:9c:85:f5:ff:78:ac:8c:6d:16:21:d2:
                    42:0a:ca:fb:d3:6d:12:49:bb:8f:2c:2e:a4:fc:b2:
                    03:56:64:73:c9:ad:fb:1c:fc:0e:81:3d:9e:9c:f6:
                    03:84:2e:3e:9c:d8:c3:66:92:4b:2c:a8:8f:59:6e:
                    27:af:3b:52:96:8d:4c:36:93:92:7a:ef:8f:7d:1e:
                    e1:42:cf:16:c4:ff:64:41:64:9c:ed:c2:bf:f6:5f:
                    6e:44:c1:f5:f9:60:88:af:35:64:6b:11:c0:f6:d3:
                    bb:8d:c4:af:05:80:22:2c:84:6f:27:6b:07:b7:21:
                    c1:c9:6f:2c:64:16:1e:fe:e4:15:0b:e8:70:65:e2:
                    f0:ea:1e:6e:24:3e:f2:8a:3c:0a:f2:65:2d:31:30:
                    bf:2d:3a:90:fa:f9:ed:37:9d:41:60:b3:71:8b:3f:
                    8e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:81:12:9F:D0:69:60:FE:A1:B6:50:32:B7:E6:50:F0:F9:FF:40:21
            X509v3 Authority Key Identifier:
                keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:f6:0b:8d:83:c2:48:66:20:59:f3:06:51:30:21:11:9f:81:
         fb:cf:40:ba:ec:d3:c7:cb:1f:2c:11:a6:00:3f:59:61:fa:88:
         fe:1d:3f:37:61:05:91:1c:95:ea:1b:d9:e7:fd:9d:f3:1f:77:
         42:af:9e:e3:49:b5:f7:0e:d5:6f:d1:d6:e7:85:41:2c:95:59:
         cb:bd:84:40:36:52:8d:cc:5f:54:c6:3a:e6:5a:9f:d7:bb:d4:
         98:22:0c:10:5d:8e:c9:b6:8a:63:82:bd:fc:4d:80:07:c5:b6:
         bd:7b:da:d2:2e:20:cc:c8:b0:e9:8e:b3:8d:8d:fb:5b:45:ae:
         41:6f:ce:2e:7e:83:03:c5:13:83:39:c6:25:dc:b0:bd:8a:30:
         ca:c9:98:66:d4:64:2a:58:3c:24:4f:35:25:7c:70:af:20:82:
         22:da:07:8a:35:60:dc:37:72:ac:d5:16:8c:07:26:84:2d:7d:
         4b:a6:30:ad:c5:bc:61:04:8d:20:67:67:80:ae:b2:cd:75:35:
         2e:a9:59:25:f7:26:fb:3d:a5:90:16:eb:1d:fe:8b:02:a9:dd:
         8d:54:8e:be:f5:36:0e:43:cd:5c:f2:6d:55:d0:35:32:b3:4f:
         b5:90:9b:49:39:20:b1:70:18:bf:f9:b5:8b:7a:9c:56:07:35:
         48:d2:71:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----