Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
File:                     3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft (raw, json)
Hash identifier:          iJI/dxktsuRDiiSnzeIKCzZMi2LHbqtdxM9q7bf3jxI=
Subject key identifier:   A7:F0:93:4E:2E:CA:F9:AE:5D:1E:CE:2C:DC:22:F7:90:8B:F0:EA:B8
Authority key identifier: DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95
Certificate issuer:       /CN=de0ccd2391fa32c0ade297c5fc883090b3991395
Certificate serial:       01962F06C878AE3EEFA0AF32E705F3152B72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:35 +0000
Files and hashes:         1: 3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl (hash: MSrFiJcrmlqzJji3yfHxrfV6rR08ocsFgHDrRUhvKSA=)
                          2: 6GNxdzK9UE9bHySiQzQ4c2EkGfY.roa (hash: xWTUJszNKd3dbNHz1f2JomMkK2hd4V6IPZrJaK6VjKg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c8:78:ae:3e:ef:a0:af:32:e7:05:f3:15:2b:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de0ccd2391fa32c0ade297c5fc883090b3991395
        Validity
            Not Before: Apr 13 12:01:35 2025 GMT
            Not After : Apr 14 12:01:35 2025 GMT
        Subject: CN=a7f0934e2ecaf9ae5d1ece2cdc22f7908bf0eab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ed:b9:79:74:00:d8:ce:5a:9f:28:88:e4:c6:
                    a1:02:72:c8:8b:1a:df:68:f7:c7:70:73:c8:fe:bf:
                    af:81:a3:d7:e9:5e:b7:3b:38:3a:79:85:92:87:17:
                    fb:6b:80:92:e7:b6:f4:8b:e7:05:ce:77:62:92:2c:
                    05:c7:d1:95:75:3d:fd:3e:f5:30:21:0f:74:d0:8c:
                    cb:a1:07:49:16:7d:84:a7:ea:db:42:30:61:90:a7:
                    2e:3d:b9:e7:11:ae:91:f8:92:d6:94:68:aa:d9:eb:
                    59:70:d7:4d:2f:59:33:91:f2:16:2e:50:24:53:18:
                    79:8d:79:43:2a:fb:c7:76:d1:b0:55:2e:19:29:2d:
                    9c:dd:d3:05:9e:cc:4b:57:1f:d6:f5:91:1e:b5:ec:
                    29:db:f0:3e:7b:21:0b:10:a5:ee:08:43:54:8f:7a:
                    89:14:47:bf:7e:3f:b5:4e:bf:64:5c:21:4e:36:45:
                    ff:72:f4:a1:34:cb:62:03:12:ae:b9:f3:17:1d:e1:
                    67:79:dc:f7:c9:aa:4e:7a:e2:57:8f:1e:ce:e5:28:
                    85:0b:f5:59:b2:18:33:f2:28:7e:c1:64:58:bd:a3:
                    8a:d0:eb:6f:00:07:f9:b3:40:56:8b:ac:30:9b:7b:
                    22:e2:b7:29:ba:30:d1:d9:1b:ef:2f:f6:ee:05:33:
                    a3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F0:93:4E:2E:CA:F9:AE:5D:1E:CE:2C:DC:22:F7:90:8B:F0:EA:B8
            X509v3 Authority Key Identifier:
                keyid:DE:0C:CD:23:91:FA:32:C0:AD:E2:97:C5:FC:88:30:90:B3:99:13:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gzNI5H6MsCt4pfF_IgwkLOZE5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/352487-a0c8-4d91-8e9d-67c1a63c5150/1/3gzNI5H6MsCt4pfF_IgwkLOZE5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:4a:ca:3b:e3:f9:07:20:0d:6b:0d:44:04:cf:ee:af:ae:2f:
         a6:ea:12:dd:26:4c:f1:3b:f4:32:ad:e0:f8:28:0c:ba:2d:e2:
         70:b8:ea:0e:79:bd:12:ae:5a:85:b8:49:1b:0d:70:f5:2b:6e:
         07:15:97:f4:4a:75:cd:89:9b:fc:f2:53:5f:d6:97:20:d8:fe:
         1d:ad:9b:72:30:0e:08:80:69:3f:52:3c:49:22:ed:13:a6:22:
         2f:46:49:26:ba:00:9c:e1:99:75:c3:ec:1a:13:48:af:e6:6e:
         8c:64:16:4f:4b:31:65:4d:90:a7:3d:6c:e2:af:de:53:11:38:
         20:28:37:0c:c5:2a:44:51:91:41:e4:09:83:8d:4c:de:d2:1f:
         28:59:6c:6c:b5:f1:64:2e:ba:16:51:16:db:d8:a9:52:13:23:
         ee:1b:23:81:51:f8:a2:31:90:62:54:c7:f5:9a:21:2f:0f:f5:
         20:42:df:c7:e4:a7:24:c9:0a:b1:a4:da:d2:f0:db:a2:c2:e9:
         c1:7c:6c:68:e2:07:a4:eb:ac:8e:24:7b:2f:49:34:24:b4:e4:
         fd:e1:05:7f:bb:80:b9:65:97:b1:6e:68:3b:ba:91:60:1e:50:
         99:eb:69:dc:31:fa:92:b3:da:c6:20:34:86:38:96:67:6b:75:
         f7:7f:48:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----