Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
File:                     3QtmPEXXvCck0WhIUIdYHhREj7Y.mft (raw, json)
Hash identifier:          eOQUOOI+Tl/6qsLR+p5UXjUc9xpPulbUA85MR2ojX4Y=
Subject key identifier:   08:BD:AB:2D:35:CA:B7:69:B5:30:16:68:29:35:27:F5:2A:08:DD:68
Authority key identifier: DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
Certificate issuer:       /CN=dd0b663c45d7bc2724d168485087581e14448fb6
Certificate serial:       01962F747DD3BD5F99455918CB8F3F46F995
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:25 +0000
Files and hashes:         1: 3QtmPEXXvCck0WhIUIdYHhREj7Y.crl (hash: G29b9JzGnR/SGK2Qd7GfZ+7eib9tpKVMYtf+OaDNXrs=)
                          2: I9GqI9GxRbg5gyNw2oYeQXtgJJg.roa (hash: IdZbo1C2DnUJiJSpOjjTPKnvp3frNBJygc4FMjTeWHU=)
                          3: OJHrSjDn0A0xOyeisC7fOP_zy4g.roa (hash: 4mrlovUy+cBI29r4SEJkRQxz3HoEwjM6nDvfGvlxWBU=)
                          4: ie70DJhDrGYxNNPSAG6BpAZrtxY.roa (hash: HiOIeBO8KrrORXl70BQK8AAzSZ8zCob2hQpjThQB7t8=)
                          5: tr4Wz-5rQhPo47mTFs_LgvHDl8s.roa (hash: PZGVkTuh77FvBlVCnDa38AVdteMzJ1COvOQXzBoIS0k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7d:d3:bd:5f:99:45:59:18:cb:8f:3f:46:f9:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd0b663c45d7bc2724d168485087581e14448fb6
        Validity
            Not Before: Apr 13 14:01:25 2025 GMT
            Not After : Apr 14 14:01:25 2025 GMT
        Subject: CN=08bdab2d35cab769b5301668293527f52a08dd68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:46:66:f8:5a:52:6a:de:5a:7e:4d:52:44:12:
                    de:66:20:7e:9e:f5:65:fd:be:e0:9c:57:0f:1d:cd:
                    5a:18:5d:96:24:54:d1:7c:f2:da:9b:d3:14:88:c3:
                    d6:d6:b5:8a:33:01:89:8f:b4:50:ce:b4:6d:77:35:
                    2c:de:36:a1:10:9c:9c:2e:1e:83:86:12:0f:78:85:
                    64:6a:7f:be:d7:04:fc:3c:10:ba:c8:8d:b2:50:74:
                    a3:88:a1:cf:7f:8e:b5:d9:2b:24:cf:f4:6d:99:f1:
                    7c:97:dc:a5:4a:4a:d4:e8:c8:3c:9a:80:cb:6e:f2:
                    f9:44:2f:15:90:15:4c:0d:9b:8f:df:85:e1:57:ba:
                    fa:c7:49:79:ba:ea:c2:f4:fb:c8:33:11:99:1a:d2:
                    46:5a:18:a4:5a:86:e3:8b:9c:c9:9b:38:8c:2e:68:
                    eb:d0:aa:74:1a:8f:17:69:c1:56:bb:a3:3c:6a:f6:
                    aa:2e:9b:00:85:43:c1:ca:1c:47:c6:83:0d:39:97:
                    60:3f:dc:35:0f:e2:5f:49:62:26:92:11:4c:ea:89:
                    20:27:be:c8:18:c3:29:38:af:2f:7c:e3:3e:ef:fb:
                    c5:9b:32:bb:7c:2d:51:f0:ee:79:92:90:7d:2f:f1:
                    f4:06:eb:06:e6:3f:43:4a:10:c8:b9:85:c5:73:a4:
                    53:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:BD:AB:2D:35:CA:B7:69:B5:30:16:68:29:35:27:F5:2A:08:DD:68
            X509v3 Authority Key Identifier:
                keyid:DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:65:7d:7e:f1:05:f1:0d:2b:50:5e:e9:af:03:ef:6f:cf:7a:
         03:32:55:7c:ea:7b:8c:f9:62:40:8b:8c:c1:45:53:c1:1b:8f:
         6e:2f:9a:52:5d:d2:d0:85:50:99:09:d5:0a:68:59:6d:a7:d7:
         0e:91:c3:01:bd:d2:35:c3:e5:d7:36:ac:80:b3:f5:5b:88:cd:
         82:81:f4:4d:4e:99:67:86:0e:ae:9f:69:51:25:85:c4:2c:44:
         4c:53:7f:8b:05:56:52:20:40:e3:b3:6d:5d:56:51:7e:8e:34:
         0f:68:75:49:c1:23:ee:99:d5:29:2d:31:b0:57:83:5e:26:93:
         4e:5e:d4:64:17:fe:65:ca:b1:ed:62:a7:66:47:7f:06:9a:78:
         b9:fe:34:69:c9:91:f0:f9:ad:26:ca:52:0b:b1:b6:fc:63:a0:
         4f:41:9a:11:ce:79:7c:69:7e:73:17:23:f3:21:66:ae:31:e8:
         d4:8a:d8:56:b5:0d:6a:32:c6:f8:48:d2:68:e2:9b:24:4b:85:
         66:a5:f8:74:00:a5:db:21:71:47:81:e1:db:62:87:5b:f9:3f:
         18:4d:86:a7:6b:be:38:a4:c1:72:0f:8a:7d:06:06:1b:1b:eb:
         22:d7:c6:d9:66:f1:14:dc:31:33:e0:92:23:88:7f:a5:af:74:
         a8:fd:f8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----