Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
File:                     3mPrYxm6RU05dkWUXOVDlXb6x0E.mft (raw, json)
Hash identifier:          s8z1+ZrOd95WdR1/E4YY85wS438+35/+e9wUmLY5aqI=
Subject key identifier:   CA:FB:6E:A8:17:62:E3:47:A7:C0:C4:DC:6D:6F:EE:E2:6C:EC:7A:01
Authority key identifier: DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
Certificate issuer:       /CN=de63eb6319ba454d397645945ce5439576fac741
Certificate serial:       01962E2ACC8FE6B9E92FAB384DB075321FD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:18 +0000
Files and hashes:         1: 3mPrYxm6RU05dkWUXOVDlXb6x0E.crl (hash: 7BoNtefIICw+TtEjKPc91RQKXKP25JODNseaSjSoQy0=)
                          2: L9b4ducPYyR6qc5uaeOni9YJQHA.roa (hash: vaOymUj3eUPmbh7xiKllx8KgzftTh5qvMK+aeen3RXg=)
                          3: kpbrBAbvkEz7iwjj9qvNJnx2KAI.roa (hash: EaUeR1cKI29E16jF0XdNnwUwftG+vurlmN50dR3srjM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:cc:8f:e6:b9:e9:2f:ab:38:4d:b0:75:32:1f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de63eb6319ba454d397645945ce5439576fac741
        Validity
            Not Before: Apr 13 08:01:18 2025 GMT
            Not After : Apr 14 08:01:18 2025 GMT
        Subject: CN=cafb6ea81762e347a7c0c4dc6d6feee26cec7a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:07:13:08:c6:54:e0:15:19:5e:24:b1:68:47:
                    c7:b0:13:ee:1d:4b:84:06:6b:56:09:ef:95:4f:53:
                    d3:56:6e:e2:55:18:54:d9:2a:e0:c7:44:82:eb:02:
                    32:2b:d5:e6:dd:7d:45:70:36:f4:e3:e7:aa:43:1f:
                    80:3b:3b:48:0b:86:67:34:20:16:a8:1f:65:35:36:
                    b3:8b:54:c3:62:6e:e7:5a:9b:9c:f7:c3:26:cb:18:
                    e8:af:a6:cd:f9:5d:8a:72:2c:a0:f1:1f:ea:66:c1:
                    a0:bb:b6:52:ae:51:7a:ce:8a:10:62:78:d3:8e:3e:
                    b4:f5:c5:68:7e:86:bf:e5:7d:ac:1d:76:6c:8b:62:
                    30:7b:6c:de:68:e9:01:98:01:28:16:14:33:c1:84:
                    ca:56:9c:71:19:c3:f1:e5:9e:d0:fa:e6:cd:9c:e0:
                    47:5a:85:27:6d:82:a6:14:80:98:65:ff:f4:59:3c:
                    c3:7f:53:94:9a:39:f6:89:d7:bf:c5:61:42:3c:3e:
                    2e:38:06:b6:8f:44:8b:c1:3c:c7:3e:8a:80:7e:c7:
                    c0:38:97:eb:6f:10:cf:9d:dc:77:fa:ed:f0:c5:9b:
                    bd:db:de:29:79:cf:8a:23:cc:bc:69:18:e3:03:9b:
                    39:72:91:d3:57:dc:c1:2b:eb:9d:78:0e:9f:b0:e9:
                    58:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:FB:6E:A8:17:62:E3:47:A7:C0:C4:DC:6D:6F:EE:E2:6C:EC:7A:01
            X509v3 Authority Key Identifier:
                keyid:DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:44:1f:7b:df:18:a6:54:53:80:9d:48:d4:f2:7e:5e:0a:77:
         dd:91:98:20:fd:ee:86:f1:35:d6:70:06:10:a8:ae:65:96:03:
         8e:75:59:24:1d:e7:f5:2d:2f:58:34:2b:e6:92:9c:48:f6:a8:
         c0:da:8b:6c:cc:8f:39:2b:8e:ab:71:56:71:15:3d:39:4e:d2:
         58:25:b0:66:42:d5:7e:de:14:f4:31:1d:e4:ca:a0:3a:52:4c:
         90:23:d5:33:c6:1d:0f:91:e4:97:96:4e:71:7f:66:65:45:e2:
         45:66:da:55:d3:a6:87:57:56:bb:fe:12:a7:f4:93:a7:06:17:
         b1:b1:19:e1:96:ff:00:ac:ab:9f:97:1e:04:a7:25:4f:c9:73:
         76:6e:51:7c:bb:56:0c:bd:9d:43:3c:fe:07:8f:00:c0:12:53:
         c7:23:f3:20:bf:37:a7:d0:40:38:96:a6:44:4f:ae:4e:03:2f:
         14:c7:87:8b:19:98:e9:38:d4:3e:06:91:3d:fa:f6:3f:e7:67:
         82:73:13:f7:85:d3:70:81:68:cd:0e:34:c2:53:09:f3:04:0f:
         cd:f9:dd:c2:ec:45:8d:2e:c1:0c:26:11:6a:9e:53:ba:4c:c9:
         17:80:0e:ef:2a:69:a6:59:16:be:8e:72:cd:21:75:32:a9:e2:
         4d:71:ec:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----