Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
File:                     3_xJGVpDnVudcRKzNgFe7iyUTYk.mft (raw, json)
Hash identifier:          /TDNkquQFl730vx/imGwl7ka1o0hJBqtCPyNwP2l25s=
Subject key identifier:   FF:EB:F1:62:84:85:AE:8B:46:3D:7B:58:DD:A3:C3:C8:F3:AE:83:6B
Authority key identifier: DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
Certificate issuer:       /CN=dffc49195a439d5b9d7112b336015eee2c944d89
Certificate serial:       01962ECF73C66E249129CD933AA4CA306B97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:09 +0000
Files and hashes:         1: 3_xJGVpDnVudcRKzNgFe7iyUTYk.crl (hash: m6zFgxjJuAExHs4/3x2BpHDR5Kkpf/zoGEDeqbRR0uA=)
                          2: 3o2OhEX8D-C9sW1xo7_jlOmD_j0.roa (hash: k3QEknU5rjZnXpONxqfvLO581xpn3+pyaYB6EDwI7ck=)
                          3: 7vdY6fKyJL6xOTEWHPQznWg1cuQ.roa (hash: LAvqsJ06fMyPoV983D+eGZunyZuIfO7UCXuYbTjEljc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:73:c6:6e:24:91:29:cd:93:3a:a4:ca:30:6b:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dffc49195a439d5b9d7112b336015eee2c944d89
        Validity
            Not Before: Apr 13 11:01:09 2025 GMT
            Not After : Apr 14 11:01:09 2025 GMT
        Subject: CN=ffebf1628485ae8b463d7b58dda3c3c8f3ae836b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d7:39:4a:59:60:c1:df:08:e6:72:85:1e:5e:
                    3e:66:ed:28:50:86:1c:23:de:1d:7b:59:fa:3e:ab:
                    7e:b2:16:b6:ce:0c:72:5e:f0:23:27:50:f6:17:67:
                    67:f2:83:be:ce:7a:16:58:b9:8c:c8:00:a2:b6:37:
                    40:b1:fe:b2:54:79:51:00:42:a1:3c:53:74:f5:55:
                    76:5f:35:a8:d7:14:ef:75:ac:d7:c5:d0:4b:20:ee:
                    68:b3:32:cd:f8:54:9b:6b:13:95:26:06:0e:e8:43:
                    c6:3a:c7:f7:31:25:af:a9:48:80:ae:fc:b9:f2:87:
                    00:56:17:62:28:98:e3:de:b1:26:a6:1f:e5:bf:2e:
                    39:fa:b7:ed:71:7a:90:fb:7a:ae:b3:51:13:99:9a:
                    81:ff:31:cf:13:92:78:0b:3f:ea:ec:a2:a9:2e:88:
                    d7:57:48:f4:a0:e4:7a:22:05:62:70:c7:fa:8c:cb:
                    cd:db:49:9b:99:01:14:f7:1a:4e:b6:0d:90:ec:3f:
                    a5:72:98:90:9f:be:1e:b2:7a:5f:e3:37:47:a9:03:
                    0f:07:10:fe:a2:f1:08:96:1f:c9:97:40:fb:4a:43:
                    df:cd:05:28:1d:c2:65:d1:ec:16:37:fe:3a:92:1a:
                    74:c2:d1:41:a4:c3:8d:c2:27:8e:5e:1d:de:98:b4:
                    20:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:EB:F1:62:84:85:AE:8B:46:3D:7B:58:DD:A3:C3:C8:F3:AE:83:6B
            X509v3 Authority Key Identifier:
                keyid:DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:af:71:26:7a:35:e8:f1:98:d7:3b:7b:b6:ac:6e:66:47:ac:
         e8:da:35:8a:a1:cc:48:43:ca:bb:9e:33:38:1a:c5:60:9c:1d:
         f6:4f:99:1d:32:c4:fc:e6:76:4c:b9:8d:f9:e7:08:d9:8c:a3:
         35:80:ac:35:7a:6f:66:b7:ae:66:34:e1:54:1b:f8:3c:10:6b:
         70:1e:9b:5d:a9:9f:a6:d8:30:84:d5:6b:52:0e:0f:55:c7:42:
         08:4e:22:71:0a:a3:94:cc:61:0a:f7:0e:7c:a8:45:9b:e1:c0:
         de:6f:49:99:da:96:76:ea:7b:ba:47:c1:70:82:a7:c2:c2:09:
         8a:55:ea:02:07:37:fc:88:32:4b:a5:16:fc:31:2b:21:58:44:
         d5:8b:f2:40:f2:d5:e3:b1:7f:09:60:67:a4:a7:51:a1:58:d8:
         e8:b5:10:1d:d8:8a:ac:bb:54:a5:d1:8b:ee:61:2a:f0:75:ff:
         86:eb:07:79:c5:40:6e:f5:29:0e:3b:34:23:29:cb:c3:bb:8b:
         97:e9:86:7f:2f:9b:ff:60:c9:60:c8:2e:ae:f2:02:4c:90:63:
         dd:dc:bc:e7:c7:68:8d:01:70:15:e0:76:ed:3d:02:e9:dc:f1:
         c4:3f:0c:fd:fd:49:ae:4e:34:c0:c3:b1:75:a3:5a:1c:14:ce:
         f3:9f:e8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----