Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7570f8-c2a8-4dd4-9ef2-f69d7397458e/1/3ySnzbcPLOjN3aURtEWeA0_375s.mft
File:                     3ySnzbcPLOjN3aURtEWeA0_375s.mft (raw, json)
Hash identifier:          AN95dDMsI08BnQExw1qP9W/VzI0ehAYz4aSRV7znFoE=
Subject key identifier:   4D:DE:F1:93:F9:7B:27:1B:9C:26:A9:58:A9:36:06:93:43:11:7F:83
Authority key identifier: DF:24:A7:CD:B7:0F:2C:E8:CD:DD:A5:11:B4:45:9E:03:4F:F7:EF:9B
Certificate issuer:       /CN=df24a7cdb70f2ce8cddda511b4459e034ff7ef9b
Certificate serial:       01962F064886EE95868590B2A6F750339A10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ySnzbcPLOjN3aURtEWeA0_375s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/7570f8-c2a8-4dd4-9ef2-f69d7397458e/1/3ySnzbcPLOjN3aURtEWeA0_375s.mft
Manifest number:          0C95
Signing time:             Sun 13 Apr 2025 12:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:02 +0000
Files and hashes:         1: 3ySnzbcPLOjN3aURtEWeA0_375s.crl (hash: /Oit0/GvghimLwpIpQkTqk+5fpy71iZVr9MoKPjt0io=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:48:86:ee:95:86:85:90:b2:a6:f7:50:33:9a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df24a7cdb70f2ce8cddda511b4459e034ff7ef9b
        Validity
            Not Before: Apr 13 12:01:02 2025 GMT
            Not After : Apr 14 12:01:02 2025 GMT
        Subject: CN=4ddef193f97b271b9c26a958a936069343117f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b0:7b:e3:f0:fb:37:3e:1e:f2:19:bf:09:84:
                    54:0b:dc:c9:75:f8:53:4a:4a:19:26:80:24:1b:97:
                    85:c9:b5:20:64:91:0e:4f:18:62:1a:9f:70:13:71:
                    2d:a6:0f:44:c5:d7:91:7e:bf:7a:0f:36:a9:a8:7b:
                    d1:e4:d6:19:c7:dd:ad:74:64:ee:43:12:7c:9f:05:
                    49:0b:bc:33:bc:14:b2:9c:cc:24:2f:7c:95:f0:4f:
                    a5:a3:58:cc:d3:af:05:c1:0a:95:a9:18:b7:8a:14:
                    b2:40:cc:2a:4e:49:8b:00:8c:86:8e:13:3f:f8:76:
                    ed:91:7b:30:88:ca:c3:1a:ee:bf:44:3e:8d:73:41:
                    d1:82:58:25:39:7f:08:6f:2f:83:8e:47:3b:5a:31:
                    e7:71:96:97:e4:f6:24:1f:b7:10:70:43:83:64:cd:
                    d1:f8:01:e2:40:9f:8d:01:e9:e5:7a:12:13:38:4d:
                    fb:07:ac:0a:80:97:56:57:05:48:c8:07:01:6b:d5:
                    44:d2:1b:08:36:16:06:4c:4b:2b:f4:43:09:db:48:
                    4a:cd:ed:57:85:9d:82:78:ce:97:93:56:ad:5f:c8:
                    89:e5:6c:46:11:50:a9:8b:4d:c0:72:9c:9f:94:b9:
                    64:00:99:db:f3:df:0a:d2:42:0a:28:e8:f2:c9:c4:
                    8b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DE:F1:93:F9:7B:27:1B:9C:26:A9:58:A9:36:06:93:43:11:7F:83
            X509v3 Authority Key Identifier:
                keyid:DF:24:A7:CD:B7:0F:2C:E8:CD:DD:A5:11:B4:45:9E:03:4F:F7:EF:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ySnzbcPLOjN3aURtEWeA0_375s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7570f8-c2a8-4dd4-9ef2-f69d7397458e/1/3ySnzbcPLOjN3aURtEWeA0_375s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7570f8-c2a8-4dd4-9ef2-f69d7397458e/1/3ySnzbcPLOjN3aURtEWeA0_375s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:36:1e:2c:d3:77:24:9b:dd:10:13:76:87:65:8d:7d:09:fd:
         b1:42:52:22:c6:37:b1:9c:d7:b6:da:09:c7:b3:32:76:41:85:
         3e:08:ae:29:37:90:1a:74:a9:3b:3a:fb:59:b7:a2:42:c1:13:
         f3:75:24:5e:55:c3:a7:be:01:34:6f:c0:de:fc:10:53:ef:6b:
         ca:ad:91:ca:9f:a2:7f:1b:7f:0d:49:fa:aa:82:bc:c9:41:1a:
         f2:21:af:3a:fa:2d:01:23:78:34:e1:4b:38:66:59:7a:ca:0e:
         9e:ef:02:13:93:03:6b:a8:b7:7e:f6:2b:da:aa:f6:26:94:3c:
         06:54:46:f0:cc:cf:52:06:41:fd:65:e4:c6:1f:e4:08:9c:c4:
         14:07:07:b2:c5:15:68:9e:31:a3:2f:bb:4a:4d:d5:8e:e5:cf:
         6f:f9:df:a6:9e:8b:90:58:f1:45:33:bb:6d:00:02:35:36:54:
         2c:d8:23:6c:57:b0:13:a6:ac:b0:52:77:78:4f:d7:71:c1:09:
         19:a1:30:68:6f:aa:a7:90:bb:ee:e6:9f:cf:f0:22:72:07:91:
         1b:1d:9c:cc:04:c1:98:76:c5:63:f5:ee:5d:27:c2:86:5d:f5:
         71:aa:d5:e4:07:11:38:7f:c4:79:7c:2b:8d:8c:5a:bf:fc:93:
         da:b2:5f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----