Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
File:                     0Xrp3J9DomnrCszzSI6GH0_w6J4.mft (raw, json)
Hash identifier:          neOKCpiMq06K6QxQPxkIAVSL78Yyuxk/7Dl+ln19nTI=
Subject key identifier:   29:CF:50:52:C1:E4:5D:11:04:15:5B:57:85:BA:66:5A:DB:68:19:EA
Authority key identifier: D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E
Certificate issuer:       /CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
Certificate serial:       01962DF4660F425136F95857BD65443D1616
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft
Manifest number:          046E
Signing time:             Sun 13 Apr 2025 07:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:53 +0000
Files and hashes:         1: 0Xrp3J9DomnrCszzSI6GH0_w6J4.crl (hash: GeKWJ+yxwItHL2H3AztBG+Aavund9ZqUjdX9wr/ejHI=)
                          2: 3e96O0zql-DJprCN832OErRtWhY.roa (hash: YxeaSNUi71632qJZwGZv8Hu3idvAcvJX148wv4xYwpc=)
                          3: 6W_cfm-J8Jm0OpvUv8VEPziXvqU.roa (hash: ntUZRyHP+6WOiJkOEZN4Fuk1A/G3+Q9sIm3AVgN1jow=)
                          4: 7iPtEMlcS-95zv2l-9LcExzrIMU.roa (hash: wBjPWZtqDlytdLWUUgzq4RIZY24YAMcvhX1x0tSKKDI=)
                          5: w4HlqPi1OFmgM8LH-X3G7-isDzc.roa (hash: L9SAWLXqlEKX0McJ5PDoHev7KlGzu28LLCwZ81A7uqI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:66:0f:42:51:36:f9:58:57:bd:65:44:3d:16:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d17ae9dc9f43a269eb0accf3488e861f4ff0e89e
        Validity
            Not Before: Apr 13 07:01:53 2025 GMT
            Not After : Apr 14 07:01:53 2025 GMT
        Subject: CN=29cf5052c1e45d1104155b5785ba665adb6819ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:61:7c:22:6b:e4:14:e3:4c:58:ef:c0:d3:d7:
                    f0:86:37:89:eb:c8:ad:3a:29:75:d5:b4:99:92:a2:
                    66:3d:f1:4b:c6:ed:d4:0f:91:a0:fa:e9:0a:d5:b7:
                    66:b1:a6:67:f2:aa:9c:21:32:8b:73:35:c4:01:01:
                    ae:01:9a:75:d3:80:15:5a:5e:ae:f3:8a:c6:68:51:
                    74:0d:2b:d4:ee:1b:15:ea:36:c5:03:d7:3e:62:3b:
                    f3:14:95:3b:01:e4:ec:0d:c7:73:41:1e:e1:f2:2a:
                    d3:24:bf:ed:8c:3f:4a:1c:45:3c:17:96:4c:18:96:
                    a7:6f:16:50:a1:23:af:0a:35:9e:09:44:8c:7f:b7:
                    3b:b2:0a:48:6d:36:c9:af:b3:d6:25:6b:e1:4b:0c:
                    74:ae:24:d2:19:33:ed:a4:27:a2:17:a8:2e:6c:1d:
                    1f:e3:3b:9b:f4:33:3d:bc:75:ba:a3:b0:fd:14:ce:
                    f8:33:4f:5c:1b:d1:8a:b0:d5:f7:dc:0f:94:13:a1:
                    63:c1:c1:7d:d7:63:4d:80:b6:7b:7f:7b:50:f9:4e:
                    78:e2:35:94:0f:27:1c:d8:82:8d:2b:8b:4a:52:8a:
                    1d:a8:69:cb:91:47:07:c5:bf:ed:6a:e1:36:26:6d:
                    f6:6c:9d:34:0b:e0:5e:79:4b:46:9a:c7:c4:29:41:
                    03:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CF:50:52:C1:E4:5D:11:04:15:5B:57:85:BA:66:5A:DB:68:19:EA
            X509v3 Authority Key Identifier:
                keyid:D1:7A:E9:DC:9F:43:A2:69:EB:0A:CC:F3:48:8E:86:1F:4F:F0:E8:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xrp3J9DomnrCszzSI6GH0_w6J4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c8dce-8356-4422-be85-fda4e8a5b46e/1/0Xrp3J9DomnrCszzSI6GH0_w6J4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:88:16:97:01:dc:f1:68:f2:c0:2f:da:04:a2:1a:24:e9:2d:
         25:5b:20:fa:d0:ba:da:7b:b8:a4:d8:e6:58:c2:9a:ca:c0:fe:
         7e:bb:7b:6f:e0:d0:b5:26:8f:3f:af:70:ca:07:72:2c:c8:e2:
         ad:13:4c:6c:1c:04:0b:7d:91:98:a2:e6:3c:e4:71:9b:42:b2:
         17:75:fb:d2:d2:b6:8e:12:39:54:69:43:97:41:9e:08:40:9b:
         43:25:71:6f:3b:b7:ad:4d:77:7d:7f:ff:34:19:3b:13:f9:b5:
         9f:d2:60:6d:80:94:36:a4:0a:55:7b:4b:e4:ed:65:55:66:c3:
         18:d1:5e:ff:2e:ee:6f:55:dd:65:cd:9e:6a:cc:4b:2f:52:01:
         66:6a:14:b2:3f:0c:ca:06:58:e2:9e:1c:2d:d9:27:dc:58:20:
         a3:ea:06:9f:40:1e:23:2a:c4:91:89:29:be:0f:52:64:e5:ea:
         68:d4:7a:54:19:18:41:93:95:e8:f5:76:c2:be:ff:a7:37:96:
         ae:31:7a:ea:4c:86:e6:00:fe:9b:2b:e1:f9:93:b3:7d:63:91:
         2c:1d:90:c5:83:08:83:1b:3f:4f:7c:da:d7:32:a9:b7:82:b9:
         49:d3:71:c0:84:9f:e3:3a:58:cd:8e:bc:37:7b:f8:27:34:49:
         a4:e3:ec:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----