Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
File:                     3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft (raw, json)
Hash identifier:          QikzhDHr49J6LTaPlVbt4/VCIDBm/YcAwQcJ7tv+A1Y=
Subject key identifier:   C6:57:8C:25:91:6D:07:2A:1B:17:57:E7:22:7B:82:B8:F8:2F:96:A4
Authority key identifier: DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90
Certificate issuer:       /CN=de3d81211f492edf029a22cc66c20a3b94583590
Certificate serial:       01962ECF6692D4476C21A4F5A21A708BB7BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft
Manifest number:          0DA6
Signing time:             Sun 13 Apr 2025 11:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:06 +0000
Files and hashes:         1: 3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl (hash: cJMCbq2tS7V1Vr2OZxPQk2TUisqv8a+8zPdEcl9pRNk=)
                          2: fUsIKiUBSF-4suxe2Rd_oxkjZw4.roa (hash: le+dLHnCy+Cz7KtAkD9h+I9evtnw4iklRaF6GSYCuDI=)
                          3: zjT9E01ejzN9o9WTP5eEJ7zrKQg.roa (hash: J1U+yahxYD0pmAirQjo+cOhpxuPTsvVXdeiXTgQsbo8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:66:92:d4:47:6c:21:a4:f5:a2:1a:70:8b:b7:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de3d81211f492edf029a22cc66c20a3b94583590
        Validity
            Not Before: Apr 13 11:01:06 2025 GMT
            Not After : Apr 14 11:01:06 2025 GMT
        Subject: CN=c6578c25916d072a1b1757e7227b82b8f82f96a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:30:d9:63:5a:2b:74:d7:33:f3:8c:5a:aa:87:
                    f2:b0:f9:65:96:7e:80:48:c2:b1:86:4a:34:78:1d:
                    ac:98:81:ad:54:b8:1f:22:e0:1a:dc:90:e5:ed:53:
                    1c:c1:ba:50:01:ad:17:ce:dd:0f:e3:6a:46:37:a3:
                    1e:0f:03:f8:a6:9c:cc:fb:d3:12:8c:c5:fe:c2:65:
                    cc:04:be:d0:21:76:69:6d:d4:42:e0:87:81:29:ec:
                    c0:72:f8:c6:e5:f1:19:1c:9a:1d:f9:83:2b:78:18:
                    b3:b5:d2:f1:6e:ba:38:18:a4:6f:8a:a4:43:7d:6b:
                    a9:9e:55:a2:31:b1:c9:01:8c:3e:cd:a5:a2:05:3e:
                    49:b4:24:ae:32:43:07:ff:a2:c1:30:b4:d7:c5:d0:
                    8b:21:34:e5:81:49:1a:b1:18:b4:bd:d7:e0:d1:dc:
                    18:43:74:6f:93:db:86:b0:55:96:70:b7:a9:7d:09:
                    14:2f:93:e2:45:04:cb:71:72:ad:9e:0e:c2:24:9d:
                    bf:e7:f4:b1:b0:25:fb:6b:87:00:3b:7b:73:44:01:
                    ca:f7:91:66:e9:02:f0:ce:11:d4:e1:f0:d8:d6:77:
                    02:18:ba:ee:71:ea:07:7f:ac:dd:60:bd:23:81:10:
                    f4:11:44:c4:bc:a9:dd:8f:17:c7:b7:a7:38:1f:2b:
                    a7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:57:8C:25:91:6D:07:2A:1B:17:57:E7:22:7B:82:B8:F8:2F:96:A4
            X509v3 Authority Key Identifier:
                keyid:DE:3D:81:21:1F:49:2E:DF:02:9A:22:CC:66:C2:0A:3B:94:58:35:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3j2BIR9JLt8CmiLMZsIKO5RYNZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/26fcba-78ae-4d38-acaf-31428b050fd7/1/3j2BIR9JLt8CmiLMZsIKO5RYNZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:97:ac:14:bd:49:e3:45:da:d2:43:e4:dd:5e:dc:b9:c8:ad:
         02:ed:7a:5d:23:8c:d9:09:6d:88:5a:1b:8b:cd:1e:e1:96:c8:
         34:b4:b5:44:49:3c:a4:3e:72:f3:0f:10:9b:68:14:28:b8:7d:
         7f:63:4c:93:65:6e:9a:c4:99:a6:a7:08:19:ec:30:44:4a:19:
         08:9d:6f:c2:d4:b4:c4:bd:32:e8:b2:78:eb:ae:8f:ed:84:4c:
         23:24:7c:95:1c:76:cc:a2:24:0a:7e:a9:f9:12:93:bc:78:2e:
         bb:af:0a:9f:8b:31:b8:b9:75:8c:12:a6:30:51:e3:e7:04:64:
         10:5d:7e:4c:c0:13:4b:58:4e:46:8c:71:9d:7d:17:45:4e:23:
         1f:3c:b3:68:18:e4:b0:cd:8d:a9:b2:3c:77:52:13:b1:68:00:
         ae:85:99:95:72:54:4e:a1:9e:dd:2a:c5:1a:0c:88:98:a1:0f:
         73:b1:cc:5c:91:45:67:a4:72:63:e9:1b:4b:33:eb:cc:5b:14:
         d3:e1:b7:bf:1d:a9:ad:d0:b1:8d:9a:b6:be:02:4e:d7:96:b8:
         74:61:db:23:05:43:00:8b:2d:4f:f9:0c:38:6d:52:90:6c:a8:
         c7:51:6f:fd:ec:40:63:5f:22:67:5c:e4:d5:74:82:35:05:5a:
         9d:4c:48:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----