Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
File:                     3MIAShrwMLqZ_PRR872I78U4Rqk.mft (raw, json)
Hash identifier:          UXWf3/Xv/+TjBI7CWYydAWl0C/AfFHC+LelrgX6u7i8=
Subject key identifier:   74:C2:96:D7:B6:08:13:E8:15:89:C5:C8:BA:93:41:DF:15:E8:78:F8
Authority key identifier: DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9
Certificate issuer:       /CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9
Certificate serial:       01962E9978ED0C16E75083759EE305598217
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:02:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:11 +0000
Files and hashes:         1: 3MIAShrwMLqZ_PRR872I78U4Rqk.crl (hash: lYVBeO2QpQx09dC8eHv+ssDPwzL3BVy6eqVfThttSMA=)
                          2: AL-L8asVgI-s4USXW1Jxulz_8Sg.roa (hash: UF0FyApaz9L8VccFK4e4NgnphNtboD57IyF8hP0doDc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:78:ed:0c:16:e7:50:83:75:9e:e3:05:59:82:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcc2004a1af030ba99fcf451f3bd88efc53846a9
        Validity
            Not Before: Apr 13 10:02:11 2025 GMT
            Not After : Apr 14 10:02:11 2025 GMT
        Subject: CN=74c296d7b60813e81589c5c8ba9341df15e878f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9d:88:b9:49:36:07:1a:71:1d:a4:26:1d:be:
                    e8:fb:c3:de:e0:a6:9b:14:e1:99:05:eb:84:07:8b:
                    4a:a5:a8:12:f6:ed:f0:9e:b3:c8:ad:74:f2:29:da:
                    41:8a:20:06:0b:1d:b2:ad:26:65:70:89:91:b6:36:
                    14:f3:a5:7c:4d:ce:bb:21:e0:ca:e6:3b:82:93:c2:
                    9c:bf:ca:72:da:a6:a8:26:b7:01:cd:25:44:ae:52:
                    49:1d:70:46:a6:f8:b9:9d:91:4d:48:9f:35:9d:75:
                    79:c0:35:61:a2:b2:fe:fb:6c:93:ec:b1:a4:eb:b3:
                    53:8b:a8:f1:7a:b3:1d:60:67:d4:d4:cb:14:f4:e4:
                    ef:de:f6:5c:e7:63:2f:c9:0d:d0:7d:d6:9c:6d:44:
                    71:1b:64:88:bf:5c:8f:96:38:8a:3a:35:ea:f7:37:
                    a1:7e:4d:74:55:36:1e:e8:55:a3:c8:22:2d:de:0c:
                    5a:d0:af:d0:cf:4a:98:42:a4:9a:ba:18:e9:ed:2e:
                    59:c9:50:0b:39:a8:77:42:fb:cd:d6:65:50:1b:f7:
                    51:34:a1:89:18:9a:33:3f:b2:51:61:7f:98:4a:8d:
                    85:a3:0b:cb:2e:65:11:33:7d:7d:65:3e:9f:c7:75:
                    6c:48:23:83:d9:e5:33:ed:36:4c:19:3d:1b:66:70:
                    72:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C2:96:D7:B6:08:13:E8:15:89:C5:C8:BA:93:41:DF:15:E8:78:F8
            X509v3 Authority Key Identifier:
                keyid:DC:C2:00:4A:1A:F0:30:BA:99:FC:F4:51:F3:BD:88:EF:C5:38:46:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MIAShrwMLqZ_PRR872I78U4Rqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/712b40-53ae-4953-aff5-56a33057497b/1/3MIAShrwMLqZ_PRR872I78U4Rqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:eb:fc:31:19:39:37:9e:5b:9f:e7:0c:4f:52:c4:71:fd:06:
         9d:2a:f9:a9:6d:40:b0:f1:92:ad:5e:f2:30:31:39:21:02:f8:
         09:7b:e8:c9:5a:5e:bd:36:e9:2f:30:61:dc:1a:58:1a:f9:fd:
         d3:14:cb:08:e7:d6:05:f8:03:9f:3a:65:a1:5e:0f:59:fa:59:
         9e:af:75:e5:35:0a:53:c3:1c:0e:df:80:8e:dc:b3:9c:f9:72:
         bc:0f:52:24:9d:5d:1e:62:b7:5f:ef:43:31:44:78:6f:02:b3:
         c0:29:67:75:9c:74:68:ca:5b:55:be:64:35:0a:e7:b4:09:bf:
         90:32:42:80:56:ce:22:9c:23:38:3c:73:3c:4e:b0:2e:1e:a1:
         02:4b:38:b7:1e:69:5c:7f:d4:8d:6a:c2:a4:ec:74:d8:3d:b1:
         50:39:61:a6:89:55:42:5d:05:6a:40:b8:03:96:e0:e1:9b:fd:
         51:66:9a:a8:b1:a9:9b:66:18:87:50:9a:7a:7a:3b:dc:e5:5d:
         d2:f6:22:cd:51:6c:b8:84:ba:5b:7e:c1:b0:a8:10:30:9f:e2:
         d9:a1:ce:6d:6b:90:5e:25:1c:ae:49:05:39:ea:63:15:48:5a:
         b1:b6:d5:a4:4b:d1:57:69:c4:d1:79:28:92:dd:93:68:51:6d:
         ff:29:06:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----