Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
File:                     3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft (raw, json)
Hash identifier:          k9LTxdXfhrm/Nn+6AyCWNSMG2bav9Bi2WlFFP2mTpc8=
Subject key identifier:   49:DE:A4:DC:66:C9:69:F1:B7:85:83:34:4B:4B:28:9D:1D:59:2F:D2
Authority key identifier: DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17
Certificate issuer:       /CN=dec756af77dafebca10684d68556baacd7173617
Certificate serial:       01962ECFB888FF607C046249B26BB56EB61B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft
Manifest number:          0A10
Signing time:             Sun 13 Apr 2025 11:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:27 +0000
Files and hashes:         1: 3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl (hash: j/zRi/IgoAndEYGwQB7kdSMJSLDWPNZxxZijYW/pMo8=)
                          2: GTryjErQ-QvKOHELwraRwqDQoQ4.roa (hash: GN3kBbzA5jk8ZVZGy0p/hEuJ6JzyB6iMj6OE8Sf6qCo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b8:88:ff:60:7c:04:62:49:b2:6b:b5:6e:b6:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dec756af77dafebca10684d68556baacd7173617
        Validity
            Not Before: Apr 13 11:01:27 2025 GMT
            Not After : Apr 14 11:01:27 2025 GMT
        Subject: CN=49dea4dc66c969f1b78583344b4b289d1d592fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:56:5e:58:4d:08:c8:d1:da:72:db:9e:11:56:
                    32:7f:99:40:cb:91:94:18:87:b5:da:38:0c:d2:82:
                    e8:d0:70:36:d2:74:8a:0b:1e:b6:62:36:34:ba:3c:
                    4d:73:d8:a9:11:69:64:10:d5:89:cc:03:19:e9:0b:
                    8d:ff:54:97:2c:1e:5c:34:cf:c8:b7:95:cd:f3:50:
                    34:e8:03:62:2e:da:c2:39:4a:87:9d:4e:e1:ba:78:
                    75:c4:e1:25:6a:b2:8a:68:dc:22:fc:3c:9f:a8:5b:
                    d1:8a:76:3e:38:4c:86:8c:07:c1:74:5b:7c:f9:7a:
                    85:7b:1c:02:51:ff:01:c7:3e:6e:c2:4f:48:6d:12:
                    e5:05:73:43:21:af:4c:54:26:23:d8:11:d9:03:b2:
                    7e:38:39:95:84:10:de:33:d3:3e:62:aa:5d:55:02:
                    25:9d:3b:58:c0:10:d7:c5:46:4f:61:02:1f:87:2b:
                    9c:08:34:70:48:68:93:64:67:cd:bd:8b:d2:64:a3:
                    d5:88:bc:ed:ab:5c:e6:f9:03:b1:40:8f:df:96:b8:
                    c2:11:ea:8a:11:6a:92:4e:c5:e9:db:3d:64:01:f4:
                    f6:92:ee:0a:3c:d7:3d:82:e1:2a:49:b8:f9:fb:49:
                    35:db:be:50:d0:07:f0:c9:21:39:eb:14:df:69:d0:
                    b4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:DE:A4:DC:66:C9:69:F1:B7:85:83:34:4B:4B:28:9D:1D:59:2F:D2
            X509v3 Authority Key Identifier:
                keyid:DE:C7:56:AF:77:DA:FE:BC:A1:06:84:D6:85:56:BA:AC:D7:17:36:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sdWr3fa_ryhBoTWhVa6rNcXNhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/41b82b-cde0-4af6-952c-7e0c7d352671/1/3sdWr3fa_ryhBoTWhVa6rNcXNhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:e1:d4:96:e5:b6:95:f4:53:33:19:8a:43:dd:e6:3e:66:b6:
         f3:9b:f8:ec:b6:53:43:22:94:35:b5:10:db:5e:6e:8d:b4:13:
         aa:65:95:73:cb:0a:6e:18:a7:19:a8:28:73:cd:41:e7:23:1b:
         f1:ea:48:1b:53:2c:5f:73:9b:9e:47:96:d8:39:5d:5a:50:bb:
         e6:24:74:9a:1f:f5:e6:df:d1:c6:53:87:f0:45:ee:32:f5:1c:
         33:5f:3e:09:89:51:3b:ac:b0:b2:57:fc:1a:02:ad:1e:a7:91:
         3b:88:3c:94:15:e2:c5:c6:2b:42:8f:89:28:d5:45:ad:8d:a7:
         36:14:04:e6:dc:5f:34:d0:42:76:43:69:32:76:bb:59:9c:f6:
         a7:58:89:d6:8d:91:6c:26:a6:60:90:81:9d:b1:4d:20:85:5a:
         6a:32:a5:1e:c2:fa:9a:87:0a:d7:81:24:e9:3d:87:f0:c8:cf:
         37:a5:0e:56:9b:33:21:95:d4:b7:cf:8b:97:ee:66:51:b1:9f:
         fb:49:ec:d4:b9:0a:a6:5c:25:c2:05:88:88:e0:31:4c:58:b5:
         77:1b:1d:3f:18:96:52:49:9d:9c:c1:ac:80:f3:22:eb:35:a8:
         5f:f7:f0:03:cd:52:35:1c:1c:91:4e:6c:17:d0:9d:c9:d7:98:
         06:bd:db:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----