Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d1c088-740e-41b9-899c-7ca7cbb31e3d/1/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.mft
File:                     I3r_DfSAg8fiHXlKsUe7lxEUEkQ.mft (raw, json)
Hash identifier:          0YTeOZBV1NYP+08UvK3f/Ewkm7Pq4SLGFKvLSkJW5VA=
Subject key identifier:   EB:B7:E5:5B:3C:03:6F:94:F0:D1:70:5A:7F:AC:17:B1:CB:F2:0D:F6
Authority key identifier: 23:7A:FF:0D:F4:80:83:C7:E2:1D:79:4A:B1:47:BB:97:11:14:12:44
Certificate issuer:       /CN=237aff0df48083c7e21d794ab147bb9711141244
Certificate serial:       01962F3DC3AEB3056499541679683722CD7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/d1c088-740e-41b9-899c-7ca7cbb31e3d/1/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.mft
Manifest number:          08FB
Signing time:             Sun 13 Apr 2025 13:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:39 +0000
Files and hashes:         1: I3r_DfSAg8fiHXlKsUe7lxEUEkQ.crl (hash: Es5Woa32WDs3bUX7aatuFy3VSdsTc5aSWcXT/FZrnmk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c3:ae:b3:05:64:99:54:16:79:68:37:22:cd:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237aff0df48083c7e21d794ab147bb9711141244
        Validity
            Not Before: Apr 13 13:01:39 2025 GMT
            Not After : Apr 14 13:01:39 2025 GMT
        Subject: CN=ebb7e55b3c036f94f0d1705a7fac17b1cbf20df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:68:57:86:b8:69:ce:09:ff:fd:d1:e0:16:f0:
                    b7:5d:05:69:81:1a:ec:b0:14:8d:71:87:3b:d4:09:
                    b2:05:75:7b:fa:a3:f3:31:02:e3:21:14:66:cc:87:
                    71:15:90:2d:a5:b9:85:03:45:8c:c1:ab:36:bd:4a:
                    fb:86:59:ac:7b:75:8a:b4:5e:22:9d:4b:77:51:8a:
                    dd:cd:d9:a9:e5:12:aa:f8:f1:ec:5b:14:d2:7b:3d:
                    27:d5:21:44:13:05:a6:f4:a2:ef:cd:f8:96:47:56:
                    0b:d0:30:21:b7:d9:f9:fd:91:ea:97:7c:3f:f1:5d:
                    81:ec:b2:b8:67:75:22:6f:f7:b4:e9:4b:00:a4:a9:
                    2c:3f:8d:af:e2:a2:51:9a:e7:70:8f:e4:d7:37:89:
                    fc:3e:cd:1d:24:1e:3a:3e:15:7e:6f:50:a3:c5:4f:
                    15:de:b4:2e:f9:a2:5b:2a:c2:e6:ff:85:cf:e5:28:
                    9a:d4:8d:3f:58:62:44:6a:3b:5a:e5:0d:5c:b8:e8:
                    c1:73:85:a5:cd:4e:0b:c4:4f:b4:34:27:cb:48:49:
                    7c:d1:22:36:9d:86:8a:47:71:f5:e4:62:cf:c6:c5:
                    59:ab:75:e0:11:99:17:25:2d:b0:ca:8b:28:68:0c:
                    69:4e:7b:1a:fd:d0:09:9f:c6:ad:ce:83:12:b2:f4:
                    1d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B7:E5:5B:3C:03:6F:94:F0:D1:70:5A:7F:AC:17:B1:CB:F2:0D:F6
            X509v3 Authority Key Identifier:
                keyid:23:7A:FF:0D:F4:80:83:C7:E2:1D:79:4A:B1:47:BB:97:11:14:12:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d1c088-740e-41b9-899c-7ca7cbb31e3d/1/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d1c088-740e-41b9-899c-7ca7cbb31e3d/1/I3r_DfSAg8fiHXlKsUe7lxEUEkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:f7:42:aa:52:80:c2:36:a4:9a:60:06:55:6b:c4:a4:23:6d:
         e6:16:32:ab:a5:cf:cb:24:85:e6:19:1a:78:ce:38:32:e7:92:
         a2:32:c1:da:d5:25:c8:43:8d:93:91:2a:74:a4:d5:57:05:bc:
         92:6a:12:4f:ca:45:6b:81:18:62:ce:6e:b0:63:ab:97:d7:3c:
         bf:50:fa:b2:b7:5b:c3:90:8c:95:38:8f:2d:71:a9:ef:97:1b:
         f7:0c:1d:74:87:d2:d3:fc:72:7f:82:83:2c:0b:cc:e8:8a:fc:
         63:11:9e:7a:9d:46:7e:f2:a1:58:55:4c:2e:5c:fe:0a:d9:26:
         b3:4b:78:b8:92:d8:7a:cc:f7:88:6d:22:7f:9d:fa:60:07:7a:
         f0:b2:7e:2c:97:f9:b4:5e:cb:03:59:4c:37:eb:50:2a:2c:bd:
         e8:40:5f:23:d9:23:ca:6d:18:de:49:f8:34:7c:70:39:7f:d7:
         62:cf:b0:f8:d1:50:fd:90:aa:46:3b:35:e7:85:57:6b:d6:87:
         e9:b0:ad:db:f9:c7:f1:e6:f3:0f:81:95:0a:fc:9b:2b:73:74:
         ca:25:be:a0:4c:ad:a8:16:38:51:6d:b4:4d:1d:13:ea:f3:e4:
         e6:cb:7c:4d:f2:ba:21:4c:b6:c3:55:ee:ce:2d:a1:25:7d:d8:
         d1:46:47:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----