Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
File:                     3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft (raw, json)
Hash identifier:          WsnqNIS+PMHnlc2qU7JDPnoVlVrQmQ8N2E6RPJk+9QM=
Subject key identifier:   F7:F5:B6:38:32:CB:10:74:A7:86:AC:6D:DD:A4:25:70:9E:F9:BE:D5
Authority key identifier: DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17
Certificate issuer:       /CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
Certificate serial:       01962F74B1DB038A065F6A3A8957A271F873
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft
Manifest number:          0541
Signing time:             Sun 13 Apr 2025 14:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:38 +0000
Files and hashes:         1: 1tilC1_jin8srVsrV1j052DulGk.roa (hash: vyS0S5gewCJtoxpuN4POioePDrUuw5luS1kTn7wZwZE=)
                          2: 3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl (hash: ZaxOnDGr/DNOTqiU4mHYhe9a+R4ajCEK3k3pUzr5OW8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b1:db:03:8a:06:5f:6a:3a:89:57:a2:71:f8:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=deddd6e7a1feb6fb47c9a2f89918827094dbfc17
        Validity
            Not Before: Apr 13 14:01:38 2025 GMT
            Not After : Apr 14 14:01:38 2025 GMT
        Subject: CN=f7f5b63832cb1074a786ac6ddda425709ef9bed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4b:41:a2:90:78:4a:de:5c:c3:a0:40:49:5c:
                    ad:49:f5:5a:92:4c:b8:98:a4:3c:d7:61:ea:28:f2:
                    d7:c7:04:f7:c4:e0:9c:d7:43:5c:88:6f:39:6d:2b:
                    02:bd:15:61:80:f8:9b:14:da:a5:7a:0e:8f:0d:5a:
                    51:bd:2f:ee:58:eb:df:e5:34:5c:ed:64:45:85:33:
                    99:e7:f4:26:1c:d4:7b:24:80:f1:a8:d5:9c:c7:62:
                    aa:b3:61:21:77:70:ff:1b:ba:af:b2:57:a8:31:43:
                    ab:4f:cf:ba:99:71:e3:29:2c:3f:90:12:72:9d:ad:
                    b5:5f:21:7b:d1:00:79:3d:e4:89:f0:2d:df:5a:bc:
                    f7:12:cd:60:5f:df:38:3f:3d:3a:86:ef:02:01:e8:
                    8c:19:ea:f1:4a:76:2d:80:0e:ad:3d:31:f3:87:d6:
                    f7:41:10:81:c3:ba:8a:1f:60:44:6d:20:22:9b:67:
                    f8:01:87:c5:05:fd:19:3f:8a:f9:f4:b0:9f:3e:57:
                    9f:f9:8e:d2:4d:7d:7b:a0:40:f9:6f:1e:b2:40:f7:
                    5f:9d:99:e1:58:12:09:d6:69:76:33:0b:e2:d2:f3:
                    1a:e1:5a:ef:25:15:c9:74:cf:56:a5:49:a1:70:87:
                    23:31:f7:4a:d4:4b:8f:13:19:3c:61:b5:76:16:4f:
                    7d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F5:B6:38:32:CB:10:74:A7:86:AC:6D:DD:A4:25:70:9E:F9:BE:D5
            X509v3 Authority Key Identifier:
                keyid:DE:DD:D6:E7:A1:FE:B6:FB:47:C9:A2:F8:99:18:82:70:94:DB:FC:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t3W56H-tvtHyaL4mRiCcJTb_Bc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ad99a-1a0f-42e0-ae7d-f07183773b26/1/3t3W56H-tvtHyaL4mRiCcJTb_Bc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:f4:f1:7d:da:49:a7:7f:e2:b4:0c:d6:97:e6:a8:a2:45:95:
         6d:30:8a:b2:25:e9:a0:5d:46:83:5f:18:4a:47:70:e2:7f:89:
         35:fa:26:1c:a5:fa:8c:c8:2a:32:f1:28:cf:c2:c7:e6:ce:c1:
         69:cc:38:0c:19:c2:11:b9:4b:82:9f:31:80:77:ba:84:70:47:
         c3:2d:37:25:de:0d:c5:ac:ea:86:49:4e:a8:f6:35:ce:da:f2:
         e3:8e:3c:e1:2f:fa:ac:bd:c5:77:6b:00:fa:93:71:72:87:0b:
         4b:45:27:62:10:ac:eb:d4:79:4a:e9:d6:3b:0e:1d:96:c2:dc:
         8c:7a:6c:9c:90:49:51:44:c9:cf:84:43:5c:19:2a:5c:64:32:
         76:4f:3d:b6:5e:4b:a3:3b:43:68:61:2f:2a:c9:1b:82:f7:fa:
         30:06:5a:8f:2a:41:65:7a:db:7f:9e:b7:c9:72:4f:18:c2:46:
         ef:74:e8:09:f0:67:2f:df:f4:8a:84:fb:8b:09:53:bf:c2:2b:
         e9:a7:25:0a:00:c1:d5:b0:3e:ac:4b:21:c6:e2:3d:84:cf:e5:
         23:1b:5a:99:b2:1e:41:43:67:77:e6:4b:b5:63:38:40:4e:9e:
         1c:4a:04:27:f5:8d:b7:37:92:7e:2c:bb:a9:79:f1:df:4c:a5:
         ec:05:b8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----