Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.mft
File:                     MT3NGHEiZlBFhpdnM8ofkvYmH14.mft (raw, json)
Hash identifier:          eA2O3AF2m+T55v6EZWZ8rwIe3wwSPB1Xmsb3FzvfbSo=
Subject key identifier:   F4:50:B9:5E:AF:ED:4F:14:2F:04:43:A9:75:CD:D2:A5:5D:20:60:D0
Authority key identifier: 31:3D:CD:18:71:22:66:50:45:86:97:67:33:CA:1F:92:F6:26:1F:5E
Certificate issuer:       /CN=313dcd18712266504586976733ca1f92f6261f5e
Certificate serial:       01962E990222F61BBA229BE7B34BC033F392
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MT3NGHEiZlBFhpdnM8ofkvYmH14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.mft
Manifest number:          1315
Signing time:             Sun 13 Apr 2025 10:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:41 +0000
Files and hashes:         1: MT3NGHEiZlBFhpdnM8ofkvYmH14.crl (hash: YUIopG9oSRQLz+eXOe3kFMJBQydVEFhfa2QKTbH7ehU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:02:22:f6:1b:ba:22:9b:e7:b3:4b:c0:33:f3:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=313dcd18712266504586976733ca1f92f6261f5e
        Validity
            Not Before: Apr 13 10:01:41 2025 GMT
            Not After : Apr 14 10:01:41 2025 GMT
        Subject: CN=f450b95eafed4f142f0443a975cdd2a55d2060d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:17:23:b6:e9:62:1a:0d:72:e5:72:09:99:9b:
                    ab:89:a7:d8:94:cd:68:1d:3a:1c:44:1a:60:ae:07:
                    49:d4:3d:34:8f:5c:60:a3:8b:9e:ac:4c:48:7f:9f:
                    bf:6f:c7:4a:50:2d:b2:e4:c7:a2:7c:22:dc:a5:a5:
                    63:cc:c2:3d:bb:f0:cb:45:ee:1d:e9:52:ec:97:cd:
                    b1:e7:1a:b8:9e:b2:59:b3:3c:61:79:1d:de:e3:af:
                    9f:75:7c:15:21:b0:86:5b:b7:26:f2:41:13:df:5e:
                    5d:7c:88:e2:fb:59:13:31:c0:32:6a:a5:a2:09:c2:
                    c5:51:0f:5c:3f:e6:4f:46:ef:78:50:d3:e4:5f:4b:
                    85:e6:8c:10:00:37:a9:82:3c:4e:6e:f7:a8:70:e8:
                    57:c1:a1:6a:76:db:11:87:5b:29:40:d1:fe:85:94:
                    4f:0e:cf:23:c1:f5:f3:b5:e2:e7:79:1c:3e:98:b0:
                    94:77:c4:76:a0:d8:60:29:02:0c:5d:a7:c3:d1:c3:
                    33:af:be:0a:f9:83:4f:88:0c:ee:64:9b:b5:5e:b0:
                    ff:e5:5e:0b:ab:0e:21:d8:6e:e3:3e:d4:24:5e:14:
                    54:36:4b:4c:94:2d:6e:b6:2c:44:ee:b2:65:69:25:
                    72:d1:3c:96:91:55:79:2b:b6:fa:2f:0d:79:0d:54:
                    72:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:50:B9:5E:AF:ED:4F:14:2F:04:43:A9:75:CD:D2:A5:5D:20:60:D0
            X509v3 Authority Key Identifier:
                keyid:31:3D:CD:18:71:22:66:50:45:86:97:67:33:CA:1F:92:F6:26:1F:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MT3NGHEiZlBFhpdnM8ofkvYmH14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b9ecf9-3ba8-47e4-8954-c415a68af0dd/1/MT3NGHEiZlBFhpdnM8ofkvYmH14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:97:4c:8b:a8:a5:28:fc:36:3f:f6:d0:00:d6:18:c0:bf:c2:
         8b:a7:0f:a4:8d:84:ca:7b:30:bf:e4:2b:a9:82:70:53:25:c4:
         a2:a8:e1:31:c0:96:4e:93:b3:41:15:f0:16:64:c4:3b:ce:9a:
         e7:69:9b:13:49:77:c2:ff:6b:b8:8f:d8:1e:7f:95:d6:53:16:
         16:b2:15:32:14:4a:d2:5a:f2:fc:19:b1:c2:01:37:2d:c9:d9:
         56:72:a2:18:e4:dd:d7:8e:4e:13:63:36:a4:24:d7:f5:22:3b:
         2e:3e:18:ce:04:50:04:79:d3:24:b5:64:f9:90:74:80:fd:17:
         fd:12:64:3e:78:c8:fe:74:07:e7:bd:f7:b9:9f:57:5e:cb:14:
         1e:4e:80:0f:50:98:bc:4d:5b:32:2c:6c:3c:22:6a:20:0d:ba:
         91:e2:a4:0f:a6:cb:89:2c:90:05:ec:5d:76:a5:e6:6e:0d:a7:
         85:b0:5c:4b:66:37:cb:c8:e9:c8:23:02:d0:c1:12:67:b6:64:
         41:af:90:a6:03:f2:61:81:2c:3a:7e:92:69:bb:bd:03:19:1e:
         8a:f8:84:8e:d2:9f:74:45:86:1b:af:04:c3:3f:b4:2d:aa:6e:
         27:30:7a:de:a1:c3:9e:3c:80:6c:46:83:74:2d:cc:1a:50:e8:
         f0:dc:fa:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----