Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
File:                     sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft (raw, json)
Hash identifier:          CDw7nqDmFePhU07bKRd1Y0aV+kVTIpglpMkk2FLTC9E=
Subject key identifier:   09:83:CF:90:0B:DE:5E:EC:87:C4:8A:77:F5:2B:9D:51:F1:89:B0:46
Authority key identifier: B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B
Certificate issuer:       /CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
Certificate serial:       01962F3DD43ED1E7917050376845292EAFF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft
Manifest number:          01E3
Signing time:             Sun 13 Apr 2025 13:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:43 +0000
Files and hashes:         1: cutf0Yk4GqOLANVUSKcxrSdUxug.roa (hash: Q8Q4U3gD48zecWRmDv6Pw0MZwpRvb60BHrR0/Xs/Hmo=)
                          2: sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl (hash: UOGC0MSBAfG8zKJsjdnqlAjBmmxICSKWF1xstVNyueA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d4:3e:d1:e7:91:70:50:37:68:45:29:2e:af:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b11157c98f26279fc3eed2dab3cf118372bdbe1b
        Validity
            Not Before: Apr 13 13:01:43 2025 GMT
            Not After : Apr 14 13:01:43 2025 GMT
        Subject: CN=0983cf900bde5eec87c48a77f52b9d51f189b046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:58:5e:ef:ba:b8:11:45:ba:62:c2:f0:9e:ba:
                    c4:78:e1:24:0f:c2:97:a1:e2:a9:ca:9d:a2:d6:ad:
                    af:a0:4f:a0:35:c6:6e:4f:5f:e1:8d:6e:37:a0:34:
                    ac:ef:3c:1a:d5:ad:d7:1d:5c:82:bc:69:b2:5f:5e:
                    11:26:9d:d3:aa:80:d0:5f:a8:d7:b9:c9:ef:c1:e4:
                    53:68:2e:c3:f1:3b:23:bc:c5:25:02:4f:ac:d4:17:
                    dc:3e:b7:69:04:12:50:30:a9:72:a0:76:c6:05:1e:
                    43:56:54:77:8b:56:f2:f6:92:dd:70:41:dc:f6:ee:
                    52:e7:ee:b3:b3:a7:f2:7d:55:f7:58:ca:da:f8:11:
                    64:7c:78:67:d8:0b:91:6b:af:70:e6:65:5b:79:e0:
                    71:d4:4b:6e:67:dc:ce:a7:ee:ba:81:b4:b4:e9:c3:
                    20:92:e5:84:b2:af:3f:aa:d8:84:2f:2b:aa:f2:87:
                    c1:62:57:b2:46:a1:59:89:e4:08:94:01:9d:5c:c2:
                    a9:85:86:36:f5:50:f5:15:86:12:5d:e4:a3:b2:49:
                    04:d7:ff:0b:75:a2:0d:31:a1:53:30:f9:d1:de:53:
                    7c:66:3e:6a:41:8f:b0:9a:7f:4a:a5:da:31:f3:12:
                    eb:25:07:08:24:1b:6b:9c:d2:4d:12:09:e8:2d:7e:
                    39:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:83:CF:90:0B:DE:5E:EC:87:C4:8A:77:F5:2B:9D:51:F1:89:B0:46
            X509v3 Authority Key Identifier:
                keyid:B1:11:57:C9:8F:26:27:9F:C3:EE:D2:DA:B3:CF:11:83:72:BD:BE:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRFXyY8mJ5_D7tLas88Rg3K9vhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/521a74-ebc9-4267-b046-e0acacc10ef5/1/sRFXyY8mJ5_D7tLas88Rg3K9vhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:a8:a7:cd:94:1d:97:10:14:e3:37:cf:18:11:db:cf:e2:75:
         83:28:15:9e:f7:93:20:a2:50:a4:e4:b9:6a:5c:84:14:b7:41:
         ff:e6:c8:66:07:42:08:82:4f:8d:95:59:25:1f:fb:32:95:ab:
         c7:5f:d0:aa:03:02:2a:52:29:3e:8d:9c:b2:0d:57:ff:7a:a5:
         ec:3d:97:2b:0e:4b:2f:93:17:f5:1c:10:e6:f6:12:6d:b7:0e:
         cf:5e:2e:c9:be:93:5a:86:d3:47:9c:b3:53:a3:6f:76:74:26:
         f2:c4:34:91:fb:e2:18:8e:8b:e6:53:2f:2b:c8:8d:d2:7b:14:
         4e:63:b6:fa:e4:21:84:ab:30:4b:41:87:b2:33:8c:6b:fc:43:
         84:52:97:d1:05:2e:a9:44:f8:67:56:85:79:76:44:91:91:ed:
         12:55:09:3d:b0:7f:93:07:93:47:13:51:b0:fd:b0:e5:53:fc:
         14:e4:6f:f9:5f:b5:8e:96:07:ef:11:0b:61:2e:5e:8c:29:66:
         57:21:6c:45:e1:a3:2b:d1:a3:eb:5f:a4:a8:01:e2:18:f3:9d:
         b8:ec:98:ee:e6:72:0e:1e:96:6f:3f:ab:7b:89:d9:92:d0:ea:
         65:ce:aa:3e:45:5f:cf:4b:f8:0c:c0:b2:0d:1b:c3:c4:26:95:
         10:6b:4d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----