Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
File:                     1P3VliZ9VvfOVuv67IajJwj-3gA.mft (raw, json)
Hash identifier:          D8AH5aDZT5Au3GYMN0XvPJOqZRK7vqfFViVplPhS8uI=
Subject key identifier:   B2:86:58:D0:40:C3:A0:95:F9:9D:ED:06:BC:31:F6:E4:85:13:4D:91
Authority key identifier: D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
Certificate issuer:       /CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Certificate serial:       01962E61E48CD3FDB72748E998AEB38A629E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 09:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:29 +0000
Files and hashes:         1: 1P3VliZ9VvfOVuv67IajJwj-3gA.crl (hash: MIjHFN2/yJluVXs2xLHy4M7dONsm4BtbMxmyAM3uNlo=)
                          2: kXAoycjFnk5ToJYqqTkBxzOraGU.roa (hash: +7rp8yWmgsLGmzgq1w+1h/kN+7iJKvOfloIbj12Qykg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e4:8c:d3:fd:b7:27:48:e9:98:ae:b3:8a:62:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
        Validity
            Not Before: Apr 13 09:01:29 2025 GMT
            Not After : Apr 14 09:01:29 2025 GMT
        Subject: CN=b28658d040c3a095f99ded06bc31f6e485134d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c7:37:4f:9f:9f:2a:8e:24:52:07:a9:16:72:
                    21:9f:9c:3e:75:38:51:06:6b:d6:e4:2e:e5:cf:2c:
                    3c:9d:f4:31:80:78:b9:7d:9d:6f:2b:9a:2f:c4:e3:
                    03:6f:dd:59:66:76:4a:31:bd:dc:bf:37:8e:20:31:
                    91:ca:be:1a:dd:e6:63:8f:36:01:43:c7:e9:c2:c0:
                    2a:a6:31:ac:b0:3f:a7:4f:b1:d5:cf:f6:7a:37:94:
                    7d:ce:7e:b7:12:23:13:db:be:54:88:b0:2a:03:6b:
                    e0:0d:ac:93:2f:06:04:1a:4c:11:b3:40:c2:19:03:
                    63:90:fb:8b:2a:92:bb:d6:31:2f:74:18:28:b3:e6:
                    f0:90:54:26:cd:c8:e7:f4:84:20:60:1a:b8:7c:01:
                    25:ec:2f:65:4e:8d:6f:4c:04:de:b6:53:ab:08:e8:
                    ae:de:65:7f:cb:95:28:00:c1:2f:70:c6:05:65:4a:
                    c9:dc:68:2b:87:83:89:7a:8c:25:c7:54:41:ed:7e:
                    d5:c4:3a:07:3e:cf:6a:4c:6d:27:3d:49:40:28:f6:
                    88:ed:37:5b:05:4d:22:f1:e0:da:1e:b1:4b:2b:0e:
                    72:4a:d4:3f:92:e7:34:b9:4d:97:0a:a2:0b:93:84:
                    12:84:82:f4:e2:4e:94:d9:24:73:16:a5:d3:d2:40:
                    ed:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:86:58:D0:40:C3:A0:95:F9:9D:ED:06:BC:31:F6:E4:85:13:4D:91
            X509v3 Authority Key Identifier:
                keyid:D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:0e:07:3c:08:d6:3a:46:df:74:67:0c:5b:41:7e:48:58:3a:
         b5:6b:99:d2:32:28:85:f5:eb:59:97:fe:e8:14:52:04:09:dc:
         18:1c:63:f6:d2:96:80:50:19:df:70:34:65:b0:44:ab:97:fd:
         a1:ba:cf:f0:1e:4c:24:f1:b8:81:cf:2a:b9:1d:44:d6:87:2c:
         71:fd:31:f1:24:dd:c6:f2:d6:d6:6b:f8:be:79:85:56:ae:6f:
         94:0d:69:d0:bc:a0:9d:53:0b:68:c2:2d:08:16:e7:8f:36:77:
         e4:1b:8d:e7:0a:1d:8f:7b:70:d8:c3:73:e1:51:6a:41:75:50:
         e1:9b:4a:1a:c2:a1:c7:7b:3f:8d:33:78:a4:6b:e8:b5:93:94:
         4e:0e:7c:1e:69:50:0b:ed:df:2f:b9:e7:26:13:51:f7:c9:66:
         3c:d6:63:56:ea:55:24:cf:46:d3:d7:fa:7c:2e:1e:60:53:7e:
         0e:d9:fd:ec:f6:1e:d5:19:c0:dd:40:5d:ac:f9:f5:97:51:0e:
         23:4b:e8:73:65:6c:8b:2a:02:80:bf:a0:bf:fc:e7:c0:36:95:
         a2:b9:5e:7c:66:08:84:40:df:3d:fa:bc:f7:fa:8d:c2:1d:31:
         d5:3f:94:b4:a8:e5:89:45:81:ce:8f:c1:3c:9b:5d:ba:f5:eb:
         a9:19:94:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----