Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft
File:                     3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft (raw, json)
Hash identifier:          ArM1c4icZs8m2ouiRX14Q2o3gvsQC6MsoD71i3CQ+VM=
Subject key identifier:   AE:35:20:CD:0C:8C:79:D6:BE:50:EB:8A:2B:2F:FB:D2:82:78:5A:88
Authority key identifier: DE:46:82:E6:B2:86:60:BD:88:A9:B4:D2:8C:B1:D7:5E:F7:CC:6D:7F
Certificate issuer:       /CN=de4682e6b28660bd88a9b4d28cb1d75ef7cc6d7f
Certificate serial:       01962E61D8C3B20077BC3D25F5C7983885FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3kaC5rKGYL2IqbTSjLHXXvfMbX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft
Manifest number:          0EA4
Signing time:             Sun 13 Apr 2025 09:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:26 +0000
Files and hashes:         1: 3kaC5rKGYL2IqbTSjLHXXvfMbX8.crl (hash: wlkuceMwVBCLY3RhdwXUe1qAqUlvcYD1yQS9EAppWik=)
                          2: j2BsJZHL3LgBeU5YdWYJa32hdy4.roa (hash: d+oREESRuLvMYhUCDv9aLTd0uG0phphp5vORkyTT7cw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d8:c3:b2:00:77:bc:3d:25:f5:c7:98:38:85:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de4682e6b28660bd88a9b4d28cb1d75ef7cc6d7f
        Validity
            Not Before: Apr 13 09:01:26 2025 GMT
            Not After : Apr 14 09:01:26 2025 GMT
        Subject: CN=ae3520cd0c8c79d6be50eb8a2b2ffbd282785a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:66:aa:3a:53:e4:3e:4f:f8:2f:3b:98:b5:9b:
                    45:ef:96:e8:a0:f6:3e:00:72:8b:b9:37:45:64:cd:
                    a5:ca:ec:5e:be:8f:93:97:0d:d1:74:7d:42:10:9c:
                    44:a4:2a:eb:89:7f:68:9b:b7:e6:d3:25:f3:e1:9e:
                    d8:ac:dd:a4:d4:c7:50:2d:47:86:19:a8:b4:0e:1f:
                    39:e3:a7:87:7b:a3:d8:c0:06:f9:1e:1b:92:6f:05:
                    cf:11:62:4b:31:c1:ef:48:98:e7:15:94:c0:d3:59:
                    2d:4c:4a:0c:2e:a1:55:38:9b:fb:d3:ab:a9:6c:60:
                    72:ea:c7:71:aa:5e:e9:44:2a:f0:3c:46:31:93:db:
                    26:15:16:a3:7a:a6:2d:91:e4:b0:44:a8:8d:32:0d:
                    0e:3e:53:81:7e:d5:3e:32:77:02:08:5f:fc:06:96:
                    32:9b:7a:75:77:b2:6f:22:79:9d:a0:6b:08:a8:7d:
                    ad:f0:3a:31:8b:f8:d3:80:97:d1:37:3e:16:10:ed:
                    e9:ae:6e:f3:3f:4f:49:7a:d1:70:24:8c:09:be:0e:
                    7c:98:fd:8a:0f:62:23:12:ec:44:da:5e:11:62:b0:
                    f1:b6:dc:e6:7c:b8:45:04:06:bb:35:7d:11:d6:04:
                    e3:f7:db:b0:51:71:9a:1a:ce:b9:94:00:d8:d3:13:
                    28:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:35:20:CD:0C:8C:79:D6:BE:50:EB:8A:2B:2F:FB:D2:82:78:5A:88
            X509v3 Authority Key Identifier:
                keyid:DE:46:82:E6:B2:86:60:BD:88:A9:B4:D2:8C:B1:D7:5E:F7:CC:6D:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kaC5rKGYL2IqbTSjLHXXvfMbX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3511af-0b4e-40b3-bf8f-479c114656fc/1/3kaC5rKGYL2IqbTSjLHXXvfMbX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:b2:7b:67:af:c3:52:5d:bc:03:03:ca:2d:32:27:15:2f:c8:
         7d:f9:7e:9e:aa:d4:17:98:b4:3e:81:5c:ea:7b:e8:79:18:34:
         1e:cb:19:ad:75:78:d3:5d:eb:53:11:62:5c:d5:64:c1:19:ab:
         c6:bf:16:93:03:65:d3:a0:67:13:1c:b2:96:8e:3b:ab:0b:8e:
         f5:e9:9b:b2:35:75:19:6a:fb:9a:b3:ec:46:25:e6:b7:fd:76:
         48:8c:75:db:d6:18:e4:bf:54:34:74:87:e9:8f:bf:73:30:91:
         09:bd:af:4c:93:c0:f3:80:55:b8:12:f2:26:34:b9:dd:d1:2c:
         49:bc:0b:c5:e7:9d:4d:7a:a0:63:d7:63:64:f8:e4:9a:65:ff:
         5e:62:44:b3:ec:5a:8e:55:4e:92:97:74:f2:e7:79:82:2d:8c:
         6c:5c:46:24:c3:93:d7:d3:48:5a:e3:16:c4:0f:1a:93:44:40:
         e4:c7:cb:68:0c:8d:74:92:f5:6a:fc:07:bd:e8:e7:a5:4c:3f:
         08:b2:79:8b:e7:8f:e3:03:85:8e:be:fd:28:b6:99:fc:17:5f:
         c3:e6:f3:10:33:bf:df:c1:35:60:1f:4d:f6:5f:3b:18:53:35:
         ec:63:d0:a6:b6:d6:7a:03:39:1e:c0:28:ab:25:1d:94:b3:87:
         34:f1:5a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----