Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
File:                     Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft (raw, json)
Hash identifier:          L/lMvM8hQ2HwfZ3klQ8DaXMgP4lI11Y8SKLmbxoOUwE=
Subject key identifier:   3C:48:06:7F:40:C4:35:A1:82:E9:BC:63:79:49:B6:AC:12:CB:C2:75
Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
Certificate issuer:       /CN=21df245ead9980d2b39533782f65d7566d0462d1
Certificate serial:       01962F072DC4E5AEC44B81E177A171D2650F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
Manifest number:          0E42
Signing time:             Sun 13 Apr 2025 12:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:01 +0000
Files and hashes:         1: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl (hash: 4qiHedB0eImYgAfx6bHiGkndZi5LB7hRVYVhDjKBhLQ=)
                          2: ju7OLwWOvoLnlAHiuO4kBTFVzwY.roa (hash: e9FAsffXnl64K8Cv3+KjxTUevpgUYG3UY/wewoBEVBQ=)
                          3: nbL7-TNKQqJ1-yJVoHEn9a5u6DU.roa (hash: tfXwKToKmsCep/7a6KKpGiz+Hfu7rsnL13FXZOQiKEU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:2d:c4:e5:ae:c4:4b:81:e1:77:a1:71:d2:65:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1
        Validity
            Not Before: Apr 13 12:02:01 2025 GMT
            Not After : Apr 14 12:02:01 2025 GMT
        Subject: CN=3c48067f40c435a182e9bc637949b6ac12cbc275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c7:7c:0c:5a:6f:45:cd:5c:2b:b8:fe:17:ea:
                    1c:87:1e:ba:db:6b:08:c5:63:4e:1f:59:ca:09:c0:
                    bb:d0:e7:d2:38:5a:54:51:22:dc:48:a9:22:74:1e:
                    0d:b4:5d:e9:92:95:1b:b9:0d:f2:08:ce:8a:a2:df:
                    24:c7:a7:39:54:5d:09:da:bc:7b:cb:4e:d3:b7:57:
                    79:49:71:12:b5:11:51:01:f3:76:b4:29:a2:2b:50:
                    16:98:54:eb:f3:34:f0:e5:6a:1d:78:64:07:e8:5b:
                    e7:98:b0:d0:7c:9b:50:ea:01:ca:0e:a4:98:06:30:
                    a8:26:88:f6:33:15:84:26:68:eb:e6:2f:aa:4b:8b:
                    11:b4:af:80:bc:56:97:1a:57:ad:07:a6:e6:ab:f1:
                    6b:dc:3d:ac:42:49:49:c7:36:c7:3c:b8:59:bb:77:
                    2c:e9:17:11:69:19:9b:2c:51:24:03:38:b7:7b:c2:
                    cf:b3:3d:1f:c8:4e:de:9a:00:8b:d9:6d:86:c2:98:
                    62:c6:6a:6f:b0:ae:3d:59:c7:24:b8:1d:e8:ce:0a:
                    a6:08:d9:3f:29:e8:8a:b8:34:9c:36:8f:c9:6f:0b:
                    64:97:11:ca:7a:ae:d9:db:07:0a:aa:f2:13:79:28:
                    a1:af:d6:f0:83:64:94:8d:90:3e:b8:0e:3b:d7:19:
                    66:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:48:06:7F:40:C4:35:A1:82:E9:BC:63:79:49:B6:AC:12:CB:C2:75
            X509v3 Authority Key Identifier:
                keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:51:ff:62:0e:2b:e2:50:74:5f:02:88:c5:3b:1e:d0:70:e2:
         89:3b:b0:41:c3:88:1c:38:d6:4e:6e:64:44:be:cf:64:43:ef:
         54:33:43:66:74:e3:6b:00:35:c4:49:96:52:91:dc:35:58:ba:
         2c:0c:a9:7d:17:a9:1a:d6:9c:1a:c8:ff:94:f7:b4:f8:85:a1:
         b6:69:5b:62:2e:9a:7b:40:70:53:4b:25:37:4b:7d:f4:70:4b:
         5e:f7:9c:7a:d4:e5:93:88:2a:b3:f5:a3:b1:d7:cb:4f:39:10:
         e9:5d:7b:dd:f4:35:1f:0c:2e:76:2f:0e:c3:7b:e3:52:6d:48:
         fb:7c:d9:3f:a5:b1:a0:f6:82:ec:df:c3:22:46:62:a5:90:ac:
         3e:a1:e2:83:89:2b:ef:68:51:97:40:9b:3d:7d:5d:5d:f5:de:
         bc:d1:41:b2:f4:9f:a7:36:a4:11:13:91:86:e6:6e:de:81:2e:
         62:12:76:fd:b1:90:b6:ad:47:41:38:86:69:1d:0f:23:3a:8e:
         c9:71:07:79:c4:b6:0f:8e:aa:c5:83:20:de:13:87:fc:23:a1:
         ff:9c:fd:26:8a:38:2c:a1:70:ab:4c:b5:c2:cb:85:40:c5:c5:
         97:21:3b:c4:47:60:e3:eb:b7:ed:14:3a:6d:14:1f:5e:7f:30:
         1a:8c:81:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----