Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
File:                     3ImcKGZO6BlKZASORsYMbl8ZDFM.mft (raw, json)
Hash identifier:          V48LTlekIMzPuo+URup/kEirwLZ7nAaiFgLXfHOCrMU=
Subject key identifier:   C7:A7:3D:D5:B9:F5:54:B6:06:29:BF:A1:3C:E8:81:59:40:F3:50:16
Authority key identifier: DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53
Certificate issuer:       /CN=dc899c28664ee8194a64048e46c60c6e5f190c53
Certificate serial:       01962DF425451A99CEBDAD5995CD41842F30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 07:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:37 +0000
Files and hashes:         1: 3ImcKGZO6BlKZASORsYMbl8ZDFM.crl (hash: DOhvomr85SjT54vaj848HWYeCkhoM3qvPkuP8CRO8q4=)
                          2: I2pncAJfzNdJmYYh59kVF5OSpUs.roa (hash: lHfLeGadLKnQRU2ejGfcyZ67n8h62UJ2WQIx9Gm+axg=)
                          3: MnzrFfyCM6_m24BkwXpZ_Rso1RQ.roa (hash: XgLOcASonVn7TWXy+ktIGTPZ2UgFdKpsifVTE/uxOB0=)
                          4: UJU_wGK_nKOpS66Lv-qw5sHx6Yc.roa (hash: DVPLZ7QtHdhq6Tawu/C5Hzz46ZghvtTkOTNBcz5aL5M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:25:45:1a:99:ce:bd:ad:59:95:cd:41:84:2f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc899c28664ee8194a64048e46c60c6e5f190c53
        Validity
            Not Before: Apr 13 07:01:37 2025 GMT
            Not After : Apr 14 07:01:37 2025 GMT
        Subject: CN=c7a73dd5b9f554b60629bfa13ce8815940f35016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cf:c5:97:52:5c:cd:85:5c:ce:ee:61:fe:14:
                    e5:69:c8:f3:2b:f7:a1:ea:61:e1:c4:eb:4b:62:06:
                    63:53:27:05:5b:60:b4:cc:7c:cd:6d:12:1f:d2:04:
                    09:0e:b9:ee:e2:a5:3b:82:87:a2:f1:a9:e7:6d:d7:
                    e2:b4:e5:89:14:b9:c4:9d:a6:af:39:c2:8e:3d:c8:
                    bb:2d:c0:bb:09:b6:e7:c8:37:78:d6:7b:24:dc:8a:
                    6b:28:24:08:de:21:16:34:24:75:42:fe:e7:d2:29:
                    79:7b:12:8e:ea:e3:8f:c8:35:3f:9b:5b:de:21:bf:
                    96:59:91:55:15:b6:16:14:66:03:75:91:f7:e8:20:
                    e4:c0:c3:c2:38:84:95:f0:47:9a:51:bf:a2:d5:25:
                    37:61:07:22:04:38:9d:79:85:4d:bf:28:8d:5e:20:
                    5e:9b:41:bc:d9:d2:c9:fd:ac:72:49:ca:ed:9d:5b:
                    8e:10:58:5a:33:90:27:d4:bf:a9:fb:4a:ae:fd:42:
                    aa:a3:77:e1:6e:8b:16:bd:9b:2d:bf:35:38:f0:0a:
                    9a:04:ad:5a:8b:ae:d9:f2:25:63:95:29:e1:1b:49:
                    f9:00:0a:83:ed:c9:54:b0:0f:4a:94:dc:09:67:05:
                    98:18:b7:1c:26:3d:f3:db:60:22:f7:a3:84:f7:54:
                    12:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A7:3D:D5:B9:F5:54:B6:06:29:BF:A1:3C:E8:81:59:40:F3:50:16
            X509v3 Authority Key Identifier:
                keyid:DC:89:9C:28:66:4E:E8:19:4A:64:04:8E:46:C6:0C:6E:5F:19:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ImcKGZO6BlKZASORsYMbl8ZDFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/56d6a8-0752-4cbd-8845-52fe10513129/1/3ImcKGZO6BlKZASORsYMbl8ZDFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e2:49:5a:4c:e6:5f:8c:c7:bb:e8:52:ad:c2:84:13:23:77:
         e9:22:3a:90:82:65:8e:1d:fd:cf:6c:92:40:29:43:1c:3f:48:
         d7:36:ac:bc:67:3f:1d:4c:b9:71:40:00:85:b5:72:fd:3b:9f:
         63:29:48:91:62:f2:89:b0:f9:02:69:6e:d3:a8:70:b1:3c:c0:
         02:80:7d:a2:91:6c:e7:b0:ef:8e:32:87:67:95:25:de:6e:6f:
         32:7d:4f:be:d5:c0:bf:e3:b1:06:d6:93:84:46:d0:0c:5a:53:
         b6:f7:16:e0:85:8b:b6:c1:40:19:b4:59:2b:09:bd:f2:73:33:
         24:c8:2b:3a:d8:2e:ff:f5:ac:7c:85:b9:bb:97:bf:67:77:92:
         79:9d:3f:44:27:bc:6b:c7:26:cc:aa:a7:4d:f9:cc:1c:cc:3c:
         c6:e9:80:eb:61:c0:dd:25:76:b6:4d:9a:e5:17:8b:9c:5f:19:
         e6:52:38:a0:fa:ea:64:16:57:a2:93:6f:17:72:f2:8a:d5:fe:
         47:4e:f5:bf:0e:4e:b2:41:b9:a3:db:45:ba:d4:26:d7:f5:6a:
         e6:56:f0:76:97:53:cd:4a:fc:38:f1:b1:3b:02:79:f0:75:ee:
         16:1d:a4:52:7e:be:cc:a6:59:a3:3f:3f:85:db:df:e7:79:32:
         37:b5:86:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----