Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
File:                     mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft (raw, json)
Hash identifier:          nWKgtD44Eoe5jKBe3OcEjVIn51zA6PSwyl/6RjvK3FQ=
Subject key identifier:   B5:DD:19:2D:D8:40:26:ED:72:BE:AB:AF:18:FC:EE:96:6A:61:4E:65
Authority key identifier: 9A:B3:37:43:A6:54:90:61:43:39:9F:90:37:04:80:16:82:63:8E:7C
Certificate issuer:       /CN=9ab33743a654906143399f903704801682638e7c
Certificate serial:       01962F06A50AC7149DFF6AA270AD93E1248B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft
Manifest number:          04DD
Signing time:             Sun 13 Apr 2025 12:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:26 +0000
Files and hashes:         1: 3VmfP8KA-NBUgCmN_EBLD_bkrJM.roa (hash: zeljN5weUyK9rltGdxQOysVkNhdNKTjMQQFNwn07hgw=)
                          2: mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl (hash: rsL2Sf4GssEf9Mp2Z3Q9hliwINxCrT5wC1CpNPMW0VM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a5:0a:c7:14:9d:ff:6a:a2:70:ad:93:e1:24:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ab33743a654906143399f903704801682638e7c
        Validity
            Not Before: Apr 13 12:01:26 2025 GMT
            Not After : Apr 14 12:01:26 2025 GMT
        Subject: CN=b5dd192dd84026ed72beabaf18fcee966a614e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6b:2f:82:2b:01:c1:49:ee:ff:67:0c:24:1d:
                    55:f7:42:26:57:a7:0b:ac:06:87:81:53:b4:32:d5:
                    7f:2b:f2:9d:99:a1:a0:fc:c4:62:5f:af:85:25:66:
                    12:58:93:c1:86:7a:9e:9a:f9:75:6e:f7:9e:5c:16:
                    db:3d:07:1d:8b:5f:bc:d1:c1:31:84:7a:cc:0b:13:
                    6e:7a:a8:d0:2d:51:7a:c7:27:56:d7:ee:0a:29:8b:
                    59:48:34:d5:63:fa:27:a5:4f:5f:49:15:2f:fe:9e:
                    e8:03:1f:11:10:8c:fa:ca:12:d2:49:5d:90:8e:f7:
                    4d:f5:c8:69:bd:46:b8:17:ca:25:0e:ce:b3:10:37:
                    a7:de:e1:2a:c8:13:d0:43:ad:f5:59:e7:70:b9:47:
                    64:71:2a:e3:10:30:54:18:8e:4b:2b:04:95:ec:28:
                    44:8c:eb:34:40:db:da:53:79:b5:ec:b3:64:e1:57:
                    ba:70:b2:05:00:b6:a9:7c:da:ac:2d:cf:f0:ea:e6:
                    b8:0f:5b:4d:48:c8:78:e1:7d:0a:e1:f3:20:f1:72:
                    7f:27:d5:2a:d4:c7:c4:86:6e:e3:e1:15:af:ff:61:
                    ef:47:16:f5:b1:e9:3d:12:60:3a:af:92:44:1b:be:
                    52:79:cc:46:fb:3f:4c:b8:c7:1d:52:98:a6:75:e5:
                    9e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DD:19:2D:D8:40:26:ED:72:BE:AB:AF:18:FC:EE:96:6A:61:4E:65
            X509v3 Authority Key Identifier:
                keyid:9A:B3:37:43:A6:54:90:61:43:39:9F:90:37:04:80:16:82:63:8E:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/b67944-6389-4108-8628-d8f93536af63/1/mrM3Q6ZUkGFDOZ-QNwSAFoJjjnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:46:77:f5:5a:62:5d:81:ca:9a:80:31:63:20:c3:6d:9b:90:
         41:11:16:57:77:99:ba:5c:33:d9:56:60:ee:32:cb:37:4f:38:
         e0:6d:4e:62:c3:56:86:3e:9e:5d:be:1b:4c:ef:72:ce:0d:2c:
         bb:f4:54:ee:ff:c3:67:1d:bd:58:3c:57:9a:c2:7b:1b:05:54:
         88:53:31:01:a3:eb:58:4e:91:0a:69:c9:16:41:5a:cb:a8:84:
         00:94:09:11:a8:00:ce:d6:0d:1a:8f:31:90:2c:2a:2f:5a:8c:
         73:64:ef:97:52:ab:c4:f9:46:cc:57:6e:25:b6:1c:a0:78:60:
         d8:b0:38:6e:97:90:08:f9:be:a8:21:02:89:a4:6d:39:f0:3e:
         d5:cb:a8:52:17:29:ed:1f:dd:fc:30:5f:31:4d:1a:93:53:1a:
         d3:75:fb:09:03:d5:1a:60:f3:67:51:af:26:c8:9c:94:49:5e:
         13:45:a1:5e:20:7e:4d:0f:1b:45:b7:b5:24:ac:9c:fe:1a:40:
         a8:23:1f:25:25:b0:63:44:a5:0b:9b:8e:ec:05:99:5b:93:b0:
         8f:fb:26:a1:cb:7f:1a:79:6d:ce:c4:20:9b:5d:6c:e4:e8:5e:
         94:4d:93:dc:30:74:89:c2:51:14:4e:dc:cf:be:fa:15:6c:f3:
         39:60:ad:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----