Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
File:                     3KRrH82StH9PVfrQOMlYE0Cp03A.mft (raw, json)
Hash identifier:          36Hb/zSDCKjNWV8CM38N4w+2q04SGxom1XJGG35+HaU=
Subject key identifier:   51:25:B3:32:59:A9:25:5D:47:2F:1A:8D:A6:A4:CC:EF:E3:9D:B9:D2
Authority key identifier: DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70
Certificate issuer:       /CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
Certificate serial:       01962F072C428055082925A87411CFBFC1A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft
Manifest number:          14F5
Signing time:             Sun 13 Apr 2025 12:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:01 +0000
Files and hashes:         1: 3KRrH82StH9PVfrQOMlYE0Cp03A.crl (hash: zhOT6IsdZuLR36mzieMYlWjmYfoSht/Y502tZfKulA0=)
                          2: XeTdM9cnm-nj4Gui4gyEqLrQLaw.roa (hash: byMWJNOsSPMVajbPUM5liOZkm9+BQbQeZEZJwK73A2Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:2c:42:80:55:08:29:25:a8:74:11:cf:bf:c1:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dca46b1fcd92b47f4f55fad038c9581340a9d370
        Validity
            Not Before: Apr 13 12:02:01 2025 GMT
            Not After : Apr 14 12:02:01 2025 GMT
        Subject: CN=5125b33259a9255d472f1a8da6a4ccefe39db9d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:34:2e:6a:b4:35:33:6a:e1:27:c9:e3:27:31:
                    f2:dc:f7:28:40:9f:b5:01:db:0c:d5:c6:8a:6c:9f:
                    fd:49:1c:1d:8f:c6:86:5a:ad:f8:3f:44:3b:ab:c6:
                    9f:63:ce:d6:a4:d8:23:24:03:31:14:c7:62:5d:7c:
                    1a:32:ef:0e:45:04:4a:37:b3:d5:42:27:7d:3a:57:
                    2d:5a:ec:69:d7:fc:d2:a0:53:99:ab:5c:95:24:bd:
                    02:8f:49:a4:bf:28:e3:4a:79:45:59:e3:e7:ad:ee:
                    09:c0:1e:b2:b5:30:19:78:57:59:27:63:59:15:90:
                    20:5e:ef:19:cf:ec:02:e7:9d:49:cd:d8:1e:d1:f8:
                    c9:7a:5a:b9:b1:46:63:63:e7:92:fd:3f:d8:af:c3:
                    b4:96:70:c9:c4:7e:24:ad:cd:21:13:c8:b9:a2:23:
                    69:17:6b:00:98:16:00:0b:c0:3a:49:d6:19:d9:46:
                    ab:18:5c:0e:29:62:4f:15:ec:0c:0a:7b:37:12:49:
                    4a:62:a4:56:0b:b2:8b:11:0a:00:5b:cd:72:57:96:
                    6e:84:ad:9b:05:f7:23:6f:54:00:86:c0:c5:94:85:
                    3e:33:86:9d:b7:a4:03:39:06:19:d7:70:a5:49:4d:
                    60:03:be:49:28:c5:ef:3b:89:bb:a1:31:e8:5e:ba:
                    82:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:25:B3:32:59:A9:25:5D:47:2F:1A:8D:A6:A4:CC:EF:E3:9D:B9:D2
            X509v3 Authority Key Identifier:
                keyid:DC:A4:6B:1F:CD:92:B4:7F:4F:55:FA:D0:38:C9:58:13:40:A9:D3:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3KRrH82StH9PVfrQOMlYE0Cp03A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/90ab8e-e573-41c4-a1bb-c6d2b8d1f566/1/3KRrH82StH9PVfrQOMlYE0Cp03A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:b5:3e:3f:87:86:fe:54:4d:a4:7e:b2:6d:69:7a:8f:67:5d:
         96:3c:8c:cb:60:ed:40:23:1c:18:45:8f:2b:5f:bd:29:7d:c8:
         a8:50:ef:64:bc:7d:09:4a:44:eb:65:3b:f3:b6:23:40:8f:e9:
         07:69:b0:49:52:31:5f:73:0c:54:a6:2f:d8:15:d0:4a:4e:3a:
         e0:d8:0e:72:37:f6:e2:76:3f:5e:16:1b:95:4a:4f:98:98:8c:
         b0:d5:43:29:bf:83:9b:87:28:76:13:18:97:f9:47:69:f1:46:
         22:86:ab:d9:45:b0:47:39:b9:88:03:1b:b4:13:26:1c:82:7c:
         0f:3c:c2:3e:53:07:a1:d8:3e:f7:13:b0:14:b4:30:9e:3d:79:
         58:8e:4c:c4:b1:b7:73:29:8b:e4:2d:54:bb:08:e4:36:18:16:
         30:27:37:ea:9c:c7:8d:00:06:bb:74:00:4b:eb:ad:24:e2:42:
         f4:06:78:5f:e5:b2:20:b7:a1:77:7e:e4:ed:e3:94:ed:ba:5a:
         d0:ee:d8:5f:5d:5f:1a:c0:12:59:8a:7c:8e:2e:ea:c4:f1:50:
         e1:39:62:8e:db:0b:ec:75:03:c4:db:b3:46:ac:ec:ed:84:1f:
         8e:2f:02:4c:5d:1d:8a:17:34:59:27:ce:fa:68:8e:0b:6e:6e:
         22:66:53:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----