Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft
File:                     3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft (raw, json)
Hash identifier:          wefQKQ6vPXoyqU4a1mkwCfQCE0bNhWNQeFXa/8N5XcU=
Subject key identifier:   7B:4D:12:E3:D9:8F:26:3C:0A:B9:5E:20:5F:12:87:45:74:E8:D1:06
Authority key identifier: DD:0B:83:6F:D7:00:3F:83:16:04:A0:3F:23:44:7A:7F:2F:49:07:B3
Certificate issuer:       /CN=dd0b836fd7003f831604a03f23447a7f2f4907b3
Certificate serial:       01962E98A361C2D8742D4FA368D79D96F7E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3QuDb9cAP4MWBKA_I0R6fy9JB7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft
Manifest number:          0610
Signing time:             Sun 13 Apr 2025 10:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:17 +0000
Files and hashes:         1: 3QuDb9cAP4MWBKA_I0R6fy9JB7M.crl (hash: L8mHGmh+OmTm6nEQtX+DYfK7zvKoxkQDrRZWsRmHX6I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a3:61:c2:d8:74:2d:4f:a3:68:d7:9d:96:f7:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd0b836fd7003f831604a03f23447a7f2f4907b3
        Validity
            Not Before: Apr 13 10:01:17 2025 GMT
            Not After : Apr 14 10:01:17 2025 GMT
        Subject: CN=7b4d12e3d98f263c0ab95e205f12874574e8d106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d5:2f:b4:15:bb:8c:89:88:06:46:d8:3d:7a:
                    b0:a7:23:ba:b2:4d:b1:26:87:4a:a4:3a:c0:15:66:
                    f7:04:6c:ff:b2:a2:ca:23:fd:39:bb:86:a7:e1:16:
                    c2:a4:6f:c1:e1:d8:b1:cc:b1:3f:1f:ae:76:d4:0c:
                    24:1e:8e:d6:ac:7b:5d:26:75:4d:5a:6e:3d:d5:bf:
                    30:54:ef:d5:0a:b3:87:96:43:02:16:de:8c:6a:ea:
                    66:22:50:e8:49:f3:9d:8b:da:64:7b:8d:3a:3f:04:
                    28:e2:82:d1:c8:01:1d:0e:fd:e7:dc:bc:8b:f4:98:
                    35:0a:1f:c9:90:f3:18:2b:93:a3:53:d7:4f:48:8e:
                    c1:3f:55:bf:ca:2e:11:2e:5f:2a:a7:67:a3:6f:ca:
                    d0:a7:04:4f:08:16:e1:5a:50:23:b2:89:e4:c4:2c:
                    cf:4d:41:54:20:63:8d:74:b0:03:d7:d0:ab:6e:eb:
                    c0:93:a6:5d:02:4b:79:c8:c5:77:c6:f2:85:6e:3f:
                    c1:af:ef:a6:6f:41:25:ea:16:23:c3:33:a6:68:18:
                    23:17:b0:d3:a0:8b:29:b1:6d:be:c1:03:a2:6b:6c:
                    9e:a8:ab:4a:47:52:fe:58:7f:01:ed:1b:03:0a:cd:
                    5e:28:d3:8a:97:c3:05:74:c9:a8:09:7a:46:67:b8:
                    13:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4D:12:E3:D9:8F:26:3C:0A:B9:5E:20:5F:12:87:45:74:E8:D1:06
            X509v3 Authority Key Identifier:
                keyid:DD:0B:83:6F:D7:00:3F:83:16:04:A0:3F:23:44:7A:7F:2F:49:07:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QuDb9cAP4MWBKA_I0R6fy9JB7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/963c2c-0993-4621-8b20-da032353b79f/1/3QuDb9cAP4MWBKA_I0R6fy9JB7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:30:b1:13:d7:7d:7c:57:14:be:65:6a:8c:6a:8d:86:11:54:
         6c:52:d3:52:b3:1f:e6:06:45:57:6f:cc:36:ba:be:8d:f3:23:
         f2:7e:92:55:1c:3c:e4:6b:d3:3b:43:3b:c8:43:11:a8:85:b0:
         be:ee:a6:13:9c:9e:1b:ef:e8:16:41:2c:5e:b8:77:2d:58:14:
         b0:ea:bf:6c:e3:d0:e8:e3:a7:ff:ec:ba:67:b0:d4:2e:11:44:
         c3:ef:bb:9a:95:bf:07:e3:f1:fe:4e:da:9b:a7:c8:5b:12:43:
         7a:d2:40:93:6c:83:0f:39:82:3d:90:0f:34:a0:59:74:45:62:
         ca:a6:fb:36:db:c3:f0:27:23:8f:68:43:97:ba:ef:56:ab:4e:
         95:33:3b:c4:b1:bf:1a:4d:d9:1a:a0:aa:91:68:66:d6:b4:bc:
         3a:33:08:ce:35:e5:6e:a6:57:6f:9f:d1:ff:a9:49:f5:58:59:
         34:1b:a5:fe:88:bc:6c:4e:43:08:76:96:f0:35:67:87:30:be:
         f6:c4:d3:ec:8c:8b:cc:ee:b2:46:b0:df:74:bd:08:6c:16:49:
         bc:8f:03:98:e1:4a:80:7a:6f:5c:50:7f:c3:01:d4:f3:2d:bd:
         71:ff:8d:54:be:53:55:fc:a8:58:df:26:33:2c:8b:79:2e:ef:
         b7:89:47:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----