Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft
File:                     3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft (raw, json)
Hash identifier:          DDSCoa2uEO1zj4ix2KDAGJ5p7FQFxjQe3ZXzrMiIsRU=
Subject key identifier:   F7:6B:88:46:6F:30:D4:82:DA:9E:9A:B7:3E:65:8F:3B:01:B8:6A:CD
Authority key identifier: DE:16:99:52:F9:7F:49:4C:FE:0F:6B:54:27:CA:56:E8:10:C0:5C:E0
Certificate issuer:       /CN=de169952f97f494cfe0f6b5427ca56e810c05ce0
Certificate serial:       01962F0729A703B4147F0D1749A3D7CF641E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft
Manifest number:          147E
Signing time:             Sun 13 Apr 2025 12:02:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:00 +0000
Files and hashes:         1: 3haZUvl_SUz-D2tUJ8pW6BDAXOA.crl (hash: 78MCtkdV2xSbBLeOqp2+6fiIXEt3Plxa62UVC00WamI=)
                          2: RZ4xmYAJVpVRLfuQVLFQGXgbrQE.roa (hash: aFDGOW4Qu6MNo6mtPQc9Lw/jPxt+lcHM9Vl2lskSnz8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:29:a7:03:b4:14:7f:0d:17:49:a3:d7:cf:64:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de169952f97f494cfe0f6b5427ca56e810c05ce0
        Validity
            Not Before: Apr 13 12:02:00 2025 GMT
            Not After : Apr 14 12:02:00 2025 GMT
        Subject: CN=f76b88466f30d482da9e9ab73e658f3b01b86acd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d8:a0:45:47:55:3f:af:cd:d4:63:30:da:6c:
                    e9:64:ad:aa:d6:42:a7:20:6b:f5:9d:4d:c7:e5:c4:
                    c5:c7:b1:75:e3:14:e6:dd:dd:b1:58:ab:4b:81:68:
                    f3:4c:0c:6f:d9:82:6e:25:47:64:0e:47:f1:28:8a:
                    6a:13:2a:91:a5:ee:e9:2c:43:e3:85:8d:03:88:c1:
                    bb:ff:db:76:ca:21:30:4a:0a:04:d7:79:17:c7:a6:
                    cb:94:87:68:26:31:32:9a:07:9d:0e:f9:cb:57:8a:
                    96:6f:4d:4d:ef:77:13:f1:c7:a3:5c:40:f1:01:2e:
                    00:47:e7:c4:0b:7d:b6:87:f0:26:27:90:e4:fb:a7:
                    97:6f:c1:02:4a:26:3b:e8:66:50:19:aa:6e:c7:1f:
                    81:37:8d:ec:94:6e:b8:e7:63:12:c9:10:01:02:a7:
                    9e:8e:3d:76:64:65:91:dc:ec:c1:89:e9:f6:11:90:
                    75:11:23:c6:19:0c:3e:18:90:e0:fb:6d:7a:ad:8d:
                    20:74:9d:33:39:db:bc:b8:25:78:ab:31:d9:d2:81:
                    53:bf:fd:74:70:13:25:b8:4e:d1:73:82:46:00:be:
                    b0:50:3f:10:da:1f:1e:b3:94:bc:27:0a:4d:f6:b3:
                    49:c7:58:cb:11:0d:9c:82:e9:bf:09:c6:da:77:c1:
                    4b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6B:88:46:6F:30:D4:82:DA:9E:9A:B7:3E:65:8F:3B:01:B8:6A:CD
            X509v3 Authority Key Identifier:
                keyid:DE:16:99:52:F9:7F:49:4C:FE:0F:6B:54:27:CA:56:E8:10:C0:5C:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3haZUvl_SUz-D2tUJ8pW6BDAXOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e78954-31fd-4fd0-9fc1-0f4b28b886f7/1/3haZUvl_SUz-D2tUJ8pW6BDAXOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:7f:46:26:07:fc:95:0c:c1:31:7e:d6:97:c0:b2:43:77:e0:
         2b:2a:68:e2:a7:73:9a:74:ed:65:18:86:75:fa:fa:f5:27:dd:
         d7:48:7d:48:d1:7d:aa:ef:4c:a0:b5:3a:d4:c3:8c:6a:d3:3d:
         93:be:d3:6c:54:e0:67:ec:f7:18:d8:51:34:2d:c7:45:c3:7e:
         ab:1b:4e:a4:e0:96:d4:c1:46:2b:72:91:88:f0:3d:db:56:8d:
         6d:29:f6:4f:7a:54:1b:dc:4a:d5:ff:1b:a3:8f:19:a2:b3:24:
         87:97:30:ef:80:0e:0a:cf:e5:a1:cc:2b:bc:6b:5c:47:31:27:
         18:32:05:d6:63:bb:8a:77:9b:6f:f5:a3:14:0d:65:f8:a9:80:
         c0:23:a2:3c:79:4e:b4:e1:4a:ec:73:59:d7:a9:da:ce:a3:8b:
         22:9f:51:eb:8a:ce:2c:4e:2f:6a:39:7a:f4:7d:87:cd:1a:d2:
         9b:6f:fc:1e:23:51:d0:23:9c:28:b7:f2:41:8d:b9:2a:14:1e:
         0d:44:ac:77:51:d3:30:6f:37:b2:f8:0f:6b:2b:a4:dd:d0:58:
         87:c0:85:6d:70:fb:41:b1:dd:01:ac:76:b3:0b:e8:24:e8:ef:
         a8:5a:3d:43:7a:7d:fd:b7:a3:a9:99:75:15:ec:1d:fa:c7:df:
         b3:a7:e5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----