Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
File:                     3MpSIZb9CbrnOba9IyLl65DaT7k.mft (raw, json)
Hash identifier:          0dWOjsk0w2Q2tPmW8X4aosQp/ozu2WCT2kd17w6eXw4=
Subject key identifier:   1B:BC:D4:D5:B8:87:13:AD:88:BF:3A:EF:F6:28:77:9F:AA:FE:C6:7A
Authority key identifier: DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9
Certificate issuer:       /CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
Certificate serial:       01962DF3BE420709C709CF5E5E1DE88A688C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft
Manifest number:          0EA5
Signing time:             Sun 13 Apr 2025 07:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:10 +0000
Files and hashes:         1: 3MpSIZb9CbrnOba9IyLl65DaT7k.crl (hash: WESXVaFFqEiRlFZu94T/TSngvwi946OuZA/RJBIS+3s=)
                          2: 6f05f7w22zRcUpz28tjM6XCdsYk.roa (hash: kl4KaLs8etslFAKNgVQw6su1C8PWL6O+HJhYp1T4Tak=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:be:42:07:09:c7:09:cf:5e:5e:1d:e8:8a:68:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcca522196fd09bae739b6bd2322e5eb90da4fb9
        Validity
            Not Before: Apr 13 07:01:10 2025 GMT
            Not After : Apr 14 07:01:10 2025 GMT
        Subject: CN=1bbcd4d5b88713ad88bf3aeff628779faafec67a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9c:d1:51:75:93:f6:0c:0c:22:4a:77:a0:ef:
                    2f:2a:cb:1b:28:43:71:62:71:5f:07:3f:58:9a:7d:
                    5b:15:5a:06:05:02:18:99:1f:40:3c:23:14:07:76:
                    80:95:c9:62:23:e0:0d:df:c3:22:22:be:a0:ac:95:
                    4e:03:2b:e2:9e:09:47:bd:75:31:f0:e7:47:7a:f9:
                    87:cf:ed:a8:49:d0:01:e2:f8:aa:18:c9:d8:03:05:
                    45:51:be:0e:0c:13:08:7e:f3:1a:23:4f:22:06:92:
                    b9:70:d7:14:e3:4d:d3:a0:82:04:20:2e:b7:4c:ed:
                    14:ef:ad:02:b2:ab:d6:e3:bd:76:9f:2e:78:6f:ed:
                    5f:9a:2f:14:0a:22:66:c7:3b:56:b8:5d:07:e7:7c:
                    94:7f:52:06:84:fe:a7:8c:58:9e:50:c8:e9:7b:c5:
                    28:a9:1b:87:86:fa:82:35:d9:3b:fb:c9:07:ac:3d:
                    e7:ef:0c:6c:97:4d:47:b4:19:9c:3e:62:6b:81:44:
                    1c:3d:9d:a6:43:20:04:3e:ec:66:01:ca:86:33:62:
                    52:b9:90:e4:29:75:dd:12:65:ad:c8:5b:99:6b:b5:
                    bd:e2:cd:91:a9:9a:49:53:42:7b:84:3c:2c:a4:ab:
                    71:c7:78:56:1e:c0:50:0f:a6:64:19:57:15:dc:7c:
                    e2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BC:D4:D5:B8:87:13:AD:88:BF:3A:EF:F6:28:77:9F:AA:FE:C6:7A
            X509v3 Authority Key Identifier:
                keyid:DC:CA:52:21:96:FD:09:BA:E7:39:B6:BD:23:22:E5:EB:90:DA:4F:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MpSIZb9CbrnOba9IyLl65DaT7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/649af0-132c-4533-9fbc-3b250ae18936/1/3MpSIZb9CbrnOba9IyLl65DaT7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:d9:1b:09:cc:0c:8b:9b:38:47:54:fc:83:91:60:4e:db:c7:
         bd:f9:34:bd:fe:e7:d7:67:fe:30:0c:a3:02:5f:ae:f4:f6:88:
         23:6a:31:10:dd:1a:d4:a7:19:22:a9:0c:6c:46:f5:6c:2e:ef:
         81:a4:b4:8c:d8:5c:ca:23:f8:2b:d8:8a:f8:f2:7d:9a:66:e6:
         ab:c6:38:03:7a:07:3d:23:4f:0c:50:f8:cb:e5:61:1e:4a:4d:
         45:f3:c1:29:5b:c2:e5:c4:a7:a7:b5:d6:9c:2e:2e:40:61:9a:
         33:67:58:26:c6:4b:f2:b1:8f:9b:77:d4:9b:c6:1a:51:11:94:
         39:28:03:89:9c:ad:9b:5b:00:a7:99:4d:49:6c:a3:28:a7:57:
         25:a2:a9:47:9c:61:58:53:94:a5:66:2c:1a:55:03:87:b0:2f:
         fb:c6:c4:42:7d:26:87:72:5b:a5:2e:17:4d:3f:2a:50:41:a7:
         83:d1:dc:f5:3f:0f:d7:dd:5f:80:54:fe:5b:cf:a2:96:ac:0c:
         ba:91:6b:a7:bd:ae:52:95:07:43:76:24:ab:b9:95:2f:be:36:
         9d:0d:98:29:89:95:6d:10:c5:f3:ba:7c:25:33:26:b9:ee:c1:
         32:44:ea:0f:dd:7f:f5:60:40:c0:c8:5d:5d:0f:20:ed:49:a0:
         ac:70:1c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----