Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
File:                     3sDxT6yN2zSANygAdsw2YU2jBew.mft (raw, json)
Hash identifier:          EqoYptfvfH0G+tRelxxCEKC5AjQotpM+0iBm3vwqYig=
Subject key identifier:   CA:C7:22:75:E6:D6:3C:F7:98:7A:EA:62:CE:AF:F9:F0:16:77:92:25
Authority key identifier: DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
Certificate issuer:       /CN=dec0f14fac8ddb348037280076cc36614da305ec
Certificate serial:       01962DF4160E6E9B39214757B9AA12352399
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:33 +0000
Files and hashes:         1: 3sDxT6yN2zSANygAdsw2YU2jBew.crl (hash: I18qnnH5yQSXYadCM89OjS2K68kG0q9FHGjTIrv/FCU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:16:0e:6e:9b:39:21:47:57:b9:aa:12:35:23:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dec0f14fac8ddb348037280076cc36614da305ec
        Validity
            Not Before: Apr 13 07:01:33 2025 GMT
            Not After : Apr 14 07:01:33 2025 GMT
        Subject: CN=cac72275e6d63cf7987aea62ceaff9f016779225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:20:e4:79:be:54:87:14:d8:53:f0:cf:de:76:
                    b9:85:76:27:9e:a6:9f:44:a9:05:bb:84:43:88:d0:
                    9b:bb:dc:85:45:ac:f8:73:ac:81:e6:38:21:f3:5e:
                    85:1e:7f:90:a3:83:63:75:14:6e:50:69:57:8e:cb:
                    b6:6f:cd:d4:cb:d4:7f:82:d0:b7:cb:52:c2:20:8a:
                    b3:e2:97:43:52:b3:6b:78:89:57:45:3e:2e:8e:75:
                    5e:2d:2d:27:7c:6c:9c:8e:d9:43:cf:1c:5a:93:05:
                    7e:7e:02:5b:17:b0:2e:f5:cf:34:46:9a:96:7a:03:
                    da:82:d8:39:cc:84:78:43:4c:1b:4e:3c:3b:c4:0d:
                    15:6a:e1:59:d7:3f:44:87:20:f8:5f:b8:bd:06:38:
                    fb:cc:fa:2f:1b:f2:68:3b:be:fc:80:63:80:df:79:
                    80:27:00:6c:d3:6e:b8:5b:ef:4a:01:1c:3e:b5:e0:
                    23:09:96:b4:fb:3d:9e:f5:fd:ed:0f:d9:47:2a:bb:
                    6f:3b:84:f2:06:f8:8c:41:e0:f6:99:51:99:7f:c4:
                    c7:81:15:b9:1a:7c:d1:52:6a:3f:5a:0a:05:48:cf:
                    e4:5a:6d:9c:95:d2:1f:8e:5a:3f:34:81:45:c2:c3:
                    3b:86:1a:6b:39:cc:bf:5e:31:76:8e:04:e5:9b:ce:
                    cf:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C7:22:75:E6:D6:3C:F7:98:7A:EA:62:CE:AF:F9:F0:16:77:92:25
            X509v3 Authority Key Identifier:
                keyid:DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:82:72:30:92:6a:8c:a2:cd:e0:35:d2:fc:40:05:4b:c5:cd:
         6d:20:4a:2e:fb:7d:49:a5:86:01:49:80:a7:3b:70:4c:a6:b4:
         a7:d4:f6:59:fa:85:44:35:ed:00:a3:28:18:bc:54:d3:a7:43:
         8f:b8:3e:04:1f:aa:9a:b1:ed:3a:32:ef:8e:17:00:b6:95:3b:
         36:a4:94:e4:c6:55:73:9c:a0:f3:bd:27:42:bf:b9:8b:d4:54:
         78:c8:c7:37:84:aa:b6:0b:93:d6:e4:3e:28:bd:dd:f9:7e:84:
         25:c1:12:3d:c3:40:15:01:ea:42:22:f5:e5:cd:e5:27:af:1d:
         cf:8b:9e:0d:0b:15:02:3a:2e:62:b3:6c:d2:db:a8:32:01:c2:
         22:b6:2d:33:77:c2:e6:64:bb:31:94:65:c0:34:00:24:05:fe:
         a8:bd:dd:9b:cc:b9:36:06:56:19:7a:b5:56:fe:a8:c3:c4:a8:
         21:41:bc:e3:81:33:55:89:54:27:36:6a:c3:c3:05:ba:75:0a:
         64:57:af:b2:d9:31:5d:e4:0e:64:67:5d:81:11:c7:95:7f:79:
         0b:de:0f:07:28:e7:0d:5f:57:86:64:59:9d:d9:1a:1c:69:1e:
         05:f2:fb:7f:31:c6:7d:0f:e9:9d:d6:f6:ca:79:34:49:b3:d4:
         bc:3e:8d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----