Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
File:                     rr3q1PHRyN2pbRzReJ2d0-I78VM.mft (raw, json)
Hash identifier:          ugKVtRVQdjKDXJZMgmb2r1uyism/Sa+KeTBiyOwaLaI=
Subject key identifier:   76:3B:6E:80:6B:51:69:D0:17:8D:B0:C2:08:C7:0E:CA:5C:AF:11:23
Authority key identifier: AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
Certificate issuer:       /CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Certificate serial:       01962E988EC9420268D28B16F7A3F5BD977F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
Manifest number:          0BD1
Signing time:             Sun 13 Apr 2025 10:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:12 +0000
Files and hashes:         1: QrB38IR31JfmSrfp5ttgTReGTWo.roa (hash: tObzEsfYNmXi9X+/o+rGLlyYSek2LoSQ9N7PVMYEfqA=)
                          2: n3iPjhImnBjarzP2Rj2tOx0dNiE.roa (hash: lUEC9I8tI5NUjUJh9guJCH2H+g0KkZWinekNZT2+2Io=)
                          3: rr3q1PHRyN2pbRzReJ2d0-I78VM.crl (hash: yubYVESzuHAPpVcywCBDKcDe8Cgckt0B3AkGMg0ag/I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:8e:c9:42:02:68:d2:8b:16:f7:a3:f5:bd:97:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
        Validity
            Not Before: Apr 13 10:01:12 2025 GMT
            Not After : Apr 14 10:01:12 2025 GMT
        Subject: CN=763b6e806b5169d0178db0c208c70eca5caf1123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f2:de:7c:5c:27:63:b2:8e:59:c0:ab:8c:b6:
                    08:7a:8b:2b:8b:6f:a0:7d:52:5f:e6:ca:71:f7:59:
                    a1:84:20:7d:ca:8b:92:ff:52:0a:91:9b:60:37:14:
                    d1:a7:5b:57:94:b4:fa:a7:0e:5f:c2:dc:e5:17:1a:
                    ed:c0:d0:4e:8d:3d:de:6b:8a:4f:ec:2f:59:86:98:
                    73:75:47:7c:52:5b:97:61:57:e1:d8:b6:bd:9c:c4:
                    6f:f4:86:b7:e3:41:0b:4d:8a:af:4e:fe:e4:8d:21:
                    7c:42:f0:e5:17:62:d0:46:16:60:30:08:91:59:06:
                    83:f9:b5:9a:44:f8:da:b2:47:9f:6f:7e:cc:ca:94:
                    33:24:f2:3b:09:c9:8d:55:83:b4:4a:73:a3:c4:53:
                    a6:1e:88:ec:cb:97:c5:ad:fd:3a:32:bf:a3:71:1b:
                    f0:fe:dc:45:40:07:a4:7d:02:b6:05:56:53:c8:90:
                    59:b0:0d:90:d2:47:6a:19:57:60:d9:2e:73:b1:b7:
                    b4:82:2e:61:4c:0f:17:6c:d6:cf:54:ee:f1:2b:7a:
                    db:ff:ed:b6:fe:a4:21:65:fa:b3:dc:5a:29:7a:8e:
                    b5:f9:f2:0c:b5:e3:a9:a7:d5:dd:58:b7:33:3c:11:
                    bb:ae:7d:4f:52:6a:79:9b:e0:2e:48:dc:1c:92:bf:
                    b3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3B:6E:80:6B:51:69:D0:17:8D:B0:C2:08:C7:0E:CA:5C:AF:11:23
            X509v3 Authority Key Identifier:
                keyid:AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:f4:f0:a5:dc:69:46:86:f2:88:a4:91:42:35:a8:74:fc:dd:
         79:f6:ea:86:7a:de:a3:4d:8d:0b:a7:c5:1c:10:ee:3e:0b:8a:
         40:ba:35:3a:4c:98:db:6b:1b:b0:fb:01:af:11:88:0a:3f:0f:
         a3:9e:85:78:13:1f:bc:45:d9:67:a0:53:58:dd:6d:9f:65:11:
         0c:71:be:57:31:b0:ab:40:b0:61:26:6b:37:56:73:f8:ad:6d:
         2b:3a:5a:90:e3:a8:a5:f2:de:83:a7:cd:54:76:1b:19:e0:a9:
         c6:f2:3f:e9:2e:1b:7c:08:9d:bc:83:6c:72:dd:f7:c2:ed:53:
         4a:2d:43:82:4f:a1:2d:1d:2f:5a:65:6b:54:a5:29:a1:bb:bf:
         e9:9f:79:09:a1:28:5f:41:36:fd:a1:3c:45:f0:57:c6:40:ae:
         11:84:c6:64:e7:c5:dc:a2:cc:b6:da:1b:86:53:5d:1e:b7:20:
         50:87:83:53:78:6a:43:37:ae:8a:7a:b5:db:69:47:ef:6d:66:
         52:ba:26:4f:81:1e:21:69:0a:3a:26:da:75:94:6c:75:e2:d7:
         02:4d:fe:a0:c5:e1:b7:fd:d9:8e:e4:d9:11:9c:19:45:a7:da:
         e9:9d:a0:0f:28:34:eb:1a:b2:95:11:e2:e9:c2:2c:ab:84:81:
         5e:f4:51:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----