Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
File:                     3A3qTqJUbXoBmk74JDtetjVlyEc.mft (raw, json)
Hash identifier:          BPpF9IE8SjczndfkUU8Y7IWqdj7mY7LJNiwutfWAQEo=
Subject key identifier:   73:FF:C0:A5:D8:A2:B4:15:38:56:EB:3F:43:9C:31:8B:E3:76:CE:4F
Authority key identifier: DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47
Certificate issuer:       /CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
Certificate serial:       01962F0736A107EDCB04B7140ACB307672E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft
Manifest number:          147E
Signing time:             Sun 13 Apr 2025 12:02:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:03 +0000
Files and hashes:         1: 3A3qTqJUbXoBmk74JDtetjVlyEc.crl (hash: 12Y6PK3hQViXcnSdEYEd3zTkjqvcRwWUl3sYMLsq6Vk=)
                          2: KC65iLduV38Y-_4YeZcOkvub1x0.roa (hash: 59wDbBZd77QyRnr9wiaIVyjbp4l+GRhLfxwyuRW0y1U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:36:a1:07:ed:cb:04:b7:14:0a:cb:30:76:72:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc0dea4ea2546d7a019a4ef8243b5eb63565c847
        Validity
            Not Before: Apr 13 12:02:03 2025 GMT
            Not After : Apr 14 12:02:03 2025 GMT
        Subject: CN=73ffc0a5d8a2b4153856eb3f439c318be376ce4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:23:8b:67:a7:4c:d4:bb:28:6e:77:4a:66:3d:
                    1f:93:2d:db:ab:d0:ac:99:00:5f:26:47:dc:0f:21:
                    ee:35:4d:b9:04:14:75:cd:f0:10:a9:76:80:d9:94:
                    89:8d:9c:ed:b7:38:0f:9b:da:df:33:36:d5:e2:29:
                    f5:af:dc:12:a2:09:7f:85:bc:e4:5f:ed:aa:c3:f9:
                    af:c7:a5:88:0d:85:d6:e1:94:42:fc:0a:07:08:00:
                    59:c9:ca:d9:eb:6a:36:9d:33:b3:1d:b9:a2:29:e7:
                    15:4e:95:51:f0:1a:20:29:da:75:94:45:68:7e:74:
                    b6:e6:85:22:49:2d:f8:d3:8c:c6:74:2d:3c:a3:2d:
                    0b:e4:76:eb:f2:71:79:57:a8:74:e9:8b:26:9c:c6:
                    e9:5a:ce:98:6b:63:39:aa:62:26:31:5f:7e:6c:d5:
                    25:12:2b:c0:ae:5a:46:ef:d3:ce:9d:f5:78:ca:c3:
                    93:2e:e9:e3:cf:92:70:dc:17:22:eb:4e:53:31:ee:
                    0e:e6:0a:df:01:db:b8:6e:62:1e:7d:34:e5:f7:ae:
                    a3:ad:97:8d:d1:95:4d:69:b0:69:f8:ea:7c:53:f9:
                    39:3b:8e:67:77:45:8b:71:16:2d:b4:84:84:5b:c1:
                    de:64:80:6c:e6:37:f9:11:53:f1:9c:0f:10:72:1a:
                    ff:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:FF:C0:A5:D8:A2:B4:15:38:56:EB:3F:43:9C:31:8B:E3:76:CE:4F
            X509v3 Authority Key Identifier:
                keyid:DC:0D:EA:4E:A2:54:6D:7A:01:9A:4E:F8:24:3B:5E:B6:35:65:C8:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A3qTqJUbXoBmk74JDtetjVlyEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/35a6e5-3364-4a74-964c-3d4b283f322d/1/3A3qTqJUbXoBmk74JDtetjVlyEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:0a:38:b8:18:e1:98:97:a5:c4:bc:b1:20:80:08:68:40:bf:
         a4:a4:99:78:ef:df:e1:33:15:38:c0:28:c5:d8:1c:7a:61:8d:
         9f:65:e0:bf:f0:41:93:6e:83:b8:0a:62:f4:50:99:fe:f1:04:
         cf:1f:9d:17:b0:2b:71:eb:1a:84:42:76:3f:f8:00:72:c3:6a:
         4c:74:f1:f4:97:41:de:9b:3d:a3:a5:46:32:54:7e:8b:08:94:
         cd:2c:96:a1:88:5c:6a:8c:7e:99:ef:43:c7:7f:a8:32:18:a3:
         25:eb:ad:70:b3:da:1c:69:21:ee:5b:67:5c:56:2c:b5:50:01:
         a1:79:6c:27:92:72:4f:a9:df:10:ee:e3:bc:2a:df:01:36:1c:
         44:4a:84:92:b2:12:88:17:c9:ec:f8:b2:5f:e2:7c:b4:83:0b:
         a3:27:e1:fa:97:18:aa:ca:48:2f:7e:57:88:fd:7b:de:ce:d9:
         b4:47:6c:24:a2:f1:6b:2b:0a:b0:ff:81:fb:4d:77:02:16:8d:
         f0:b7:85:8d:a1:f4:f7:95:94:6d:d7:4f:e8:42:3c:7f:05:b5:
         3b:d0:c9:e9:30:cc:f7:ae:f3:32:ac:1c:31:19:08:4f:0d:4f:
         37:67:e3:cf:17:f7:2b:86:4d:a6:bc:7a:c5:2e:ce:10:a2:d8:
         50:49:67:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----