Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.mft
File:                     RDNmA3i76zplxtyp7Qp3b70gRhA.mft (raw, json)
Hash identifier:          DioK/Xd7dH/msnVXM1j9snDAuwCY2kKZkVMqz7FocYQ=
Subject key identifier:   3B:7F:24:43:77:6D:85:A5:4D:FB:29:BE:D6:B2:A3:FC:6A:C7:D4:63
Authority key identifier: 44:33:66:03:78:BB:EB:3A:65:C6:DC:A9:ED:0A:77:6F:BD:20:46:10
Certificate issuer:       /CN=4433660378bbeb3a65c6dca9ed0a776fbd204610
Certificate serial:       01962F749F045D33C54EE95B276BD49710AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RDNmA3i76zplxtyp7Qp3b70gRhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.mft
Manifest number:          0227
Signing time:             Sun 13 Apr 2025 14:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:34 +0000
Files and hashes:         1: RDNmA3i76zplxtyp7Qp3b70gRhA.crl (hash: mpSrSxQqxxVlbeUUW9F3J+Kyj6AFpPYbo4BQZM628EY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:9f:04:5d:33:c5:4e:e9:5b:27:6b:d4:97:10:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4433660378bbeb3a65c6dca9ed0a776fbd204610
        Validity
            Not Before: Apr 13 14:01:34 2025 GMT
            Not After : Apr 14 14:01:34 2025 GMT
        Subject: CN=3b7f2443776d85a54dfb29bed6b2a3fc6ac7d463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1c:e8:13:ec:ca:c3:79:2c:e7:da:22:b9:57:
                    70:9a:00:dd:cc:dc:5d:1b:a4:ea:ee:39:ed:38:ae:
                    31:f0:51:39:cb:10:40:05:48:9f:3d:7e:79:8d:4e:
                    cf:eb:f9:6a:32:c1:09:c5:88:7d:d6:9e:3d:1a:13:
                    8c:ae:d8:69:ee:c6:c5:6e:d8:06:25:35:db:b2:6e:
                    96:95:b9:77:99:4c:25:e4:68:2e:50:7a:64:5d:9d:
                    0b:9b:32:16:3d:c2:25:81:5b:8b:40:5f:da:83:6d:
                    16:9d:ba:4e:59:f8:3d:b4:53:7c:72:26:4f:ca:2f:
                    79:7f:94:70:08:7c:79:62:db:1f:d7:63:fa:bc:bb:
                    62:02:4a:da:73:08:50:07:7a:55:8c:a5:bf:4a:76:
                    33:00:0e:8f:be:db:70:eb:76:b6:84:72:e7:8a:e4:
                    f5:2e:24:fc:cb:24:b2:15:a8:2d:f0:14:36:71:76:
                    35:c6:44:28:b1:e8:0d:eb:63:34:ae:8b:a6:b3:43:
                    fd:c8:79:a7:cc:ce:c6:85:06:3c:07:bc:9b:21:1b:
                    17:66:d5:11:39:ad:e2:78:bd:08:b3:5c:d9:26:b9:
                    09:4d:d1:b6:ed:b9:4a:64:b9:01:c6:c6:38:e3:40:
                    ef:11:8e:90:50:f0:85:e3:89:7e:e7:7d:be:7c:06:
                    25:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:7F:24:43:77:6D:85:A5:4D:FB:29:BE:D6:B2:A3:FC:6A:C7:D4:63
            X509v3 Authority Key Identifier:
                keyid:44:33:66:03:78:BB:EB:3A:65:C6:DC:A9:ED:0A:77:6F:BD:20:46:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDNmA3i76zplxtyp7Qp3b70gRhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/029fc6-77d3-44d1-b8c8-e07f0ac78530/1/RDNmA3i76zplxtyp7Qp3b70gRhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:cd:f3:1f:6d:6a:e8:e2:44:1f:a6:6d:b7:59:6b:39:a4:39:
         13:68:5d:2c:06:3c:51:df:bb:6b:2d:21:30:56:7b:f7:b5:9d:
         50:1d:bb:10:81:3e:17:23:a0:15:86:2b:4c:fa:0c:23:1a:8d:
         6d:8f:97:e8:93:e9:25:c4:6f:31:0a:73:c2:d4:29:a2:f6:af:
         1f:0e:28:b3:f0:1a:f6:4a:29:6c:00:a9:82:ab:43:5f:08:0a:
         02:ac:08:dd:ba:7c:c5:89:61:92:3a:af:af:84:cf:0e:f0:f6:
         7c:c2:3b:bf:ab:aa:c6:60:67:24:d9:93:f5:1b:a7:0d:9e:e7:
         cd:28:c9:d9:04:f8:73:c9:72:20:cf:91:0f:84:a9:87:51:a1:
         ee:5a:50:d8:bf:31:19:e8:9d:a2:80:57:29:79:93:e6:a4:4b:
         1b:92:64:38:b4:8f:05:c5:e5:0e:8e:7d:b1:57:69:b4:fc:84:
         15:a9:c5:fc:f8:b7:a1:2e:c7:b4:30:2c:30:1b:ed:07:d2:81:
         ff:3d:90:91:c9:54:09:e2:a9:1c:9c:3e:85:b0:7c:19:92:2b:
         12:98:73:e2:e9:97:cf:bb:ca:e4:f2:c6:29:e9:b0:53:f6:b3:
         42:2c:30:e2:ec:2d:79:4f:87:fd:b9:76:32:5e:3f:3c:3c:33:
         26:31:0b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----