Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
File:                     0-2n3wX226CeOefUvex7rg7_urA.mft (raw, json)
Hash identifier:          5KJlcWXkKFTH6z8y3YhGAuyTe+pqZMB8n1gStKVyllQ=
Subject key identifier:   E1:6F:0B:87:4E:90:43:CA:D4:20:92:F5:60:E9:10:0A:E7:BF:58:21
Authority key identifier: D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0
Certificate issuer:       /CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
Certificate serial:       01962F7451BF1F5B85315B42CA4C0564D259
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft
Manifest number:          01F3
Signing time:             Sun 13 Apr 2025 14:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:14 +0000
Files and hashes:         1: 0-2n3wX226CeOefUvex7rg7_urA.crl (hash: DiLrP+SiK3yFLZdib9p6xRhVJAqALjgNQCPDa4vJ/co=)
                          2: mFUkKUV2j8Fct1DGbVQJTzcA0ig.roa (hash: bNr/zF64vk+SVTrKPbIdCfqu6Sowa5lS9V4LG/Ns2g0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:51:bf:1f:5b:85:31:5b:42:ca:4c:05:64:d2:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3eda7df05f6dba09e39e7d4bdec7bae0effbab0
        Validity
            Not Before: Apr 13 14:01:14 2025 GMT
            Not After : Apr 14 14:01:14 2025 GMT
        Subject: CN=e16f0b874e9043cad42092f560e9100ae7bf5821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:41:1e:7b:4c:81:df:8e:9e:ad:15:3a:75:8e:
                    4c:c9:e5:ba:a6:a1:05:82:fc:5e:b5:1e:32:75:2c:
                    f3:51:82:ed:6d:6a:05:3e:48:38:01:5f:9b:06:92:
                    bd:07:88:d3:39:4b:d5:33:53:cc:de:78:86:67:ae:
                    95:21:95:d5:1e:79:31:d1:60:1c:7e:72:41:69:6a:
                    5a:91:42:21:0f:9f:3c:a8:b5:b3:65:8d:43:4e:f5:
                    f2:88:5a:e0:b2:16:b0:2c:ec:cb:4f:39:46:ad:a9:
                    65:69:50:1e:0b:85:3f:11:fc:6e:0b:c8:a6:28:1d:
                    98:46:88:22:67:fc:20:f4:e7:8d:ae:af:e1:83:f6:
                    ee:2a:73:be:35:13:e6:b5:25:4f:46:c9:3a:d2:c1:
                    33:7f:e8:9d:cd:c6:59:48:cd:94:56:95:9d:bd:64:
                    b3:61:0b:bf:ab:cb:ea:04:58:a6:43:00:5e:aa:3f:
                    9e:06:c1:59:2a:1b:0e:be:6b:a8:24:a4:31:51:93:
                    b4:c8:14:a7:36:a0:2f:65:14:5a:ae:62:f2:7b:6c:
                    61:7f:a4:31:37:85:56:3c:9d:60:e9:da:e6:d2:e4:
                    5c:b3:f9:50:ca:ab:ab:52:64:39:4b:b3:91:81:27:
                    4f:61:7f:5d:62:90:79:a4:8d:81:a1:ce:a3:32:ff:
                    78:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:6F:0B:87:4E:90:43:CA:D4:20:92:F5:60:E9:10:0A:E7:BF:58:21
            X509v3 Authority Key Identifier:
                keyid:D3:ED:A7:DF:05:F6:DB:A0:9E:39:E7:D4:BD:EC:7B:AE:0E:FF:BA:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-2n3wX226CeOefUvex7rg7_urA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/dc64f4-cfba-4efd-b4ed-676bedb17473/1/0-2n3wX226CeOefUvex7rg7_urA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:c6:6b:0b:ad:59:be:db:7c:f6:19:25:d2:24:77:c7:1f:52:
         37:ea:d8:a3:d4:43:ca:ab:95:44:e9:cd:0a:ec:f3:64:fc:d0:
         64:46:44:9d:0b:32:80:c5:8a:55:4b:1e:f0:01:b8:c1:fb:a0:
         91:20:32:5b:8e:8e:aa:e4:96:63:75:55:0d:95:71:28:6d:57:
         56:e6:0f:11:4b:27:d1:15:50:da:7c:66:26:ba:08:92:b1:ca:
         5e:13:77:86:c6:2f:2d:97:d5:09:45:8b:d7:74:83:6b:4e:11:
         8a:7f:60:6e:55:e9:a0:d1:fd:9f:4e:a3:d1:6b:01:1c:6f:40:
         85:23:d0:62:e6:25:21:c9:4e:e3:b6:d3:7c:c1:99:ea:56:80:
         a9:7b:db:38:43:83:93:a2:6a:7e:ec:10:ba:63:8c:26:4e:fd:
         66:48:eb:d4:db:3f:75:09:21:87:04:05:9c:b2:a1:a4:ee:9d:
         d4:68:4b:58:68:6e:1b:05:1f:24:c8:b4:64:6a:1f:59:26:f5:
         84:77:98:dd:67:17:21:07:a9:cc:16:ed:3a:60:5e:e4:2e:d6:
         b8:94:64:89:38:58:5b:7f:6c:60:7d:a0:d8:bd:18:8f:03:48:
         47:75:5a:b6:43:a7:3c:76:93:69:bc:6c:30:d9:67:c5:51:02:
         c0:aa:1e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----