Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
File:                     Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft (raw, json)
Hash identifier:          zAe2Gnt27cmiiFUzBNv0X0D/ciT++AGgaGPYDW8mO84=
Subject key identifier:   F6:E3:64:E5:8F:A9:CC:EA:42:09:03:3F:1E:0B:C0:F3:36:CE:30:11
Authority key identifier: 32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19
Certificate issuer:       /CN=32bdecf2b1a410f6523c20e630826709cb6dac19
Certificate serial:       01962F3DC1C3FDB999255EA94076C086E5CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft
Manifest number:          0D04
Signing time:             Sun 13 Apr 2025 13:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:38 +0000
Files and hashes:         1: D1ApEIwb1kjfyIq9DKRzPBBfvvY.roa (hash: xg03oxBmRY8/OHWbSAoqzOUqsR3adUdWhS3XjYzzmwE=)
                          2: Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl (hash: hPDKe1qT6vu4BivIZ+k2hWkM1tvu6wlPhiXhIlVJmW8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c1:c3:fd:b9:99:25:5e:a9:40:76:c0:86:e5:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32bdecf2b1a410f6523c20e630826709cb6dac19
        Validity
            Not Before: Apr 13 13:01:38 2025 GMT
            Not After : Apr 14 13:01:38 2025 GMT
        Subject: CN=f6e364e58fa9ccea4209033f1e0bc0f336ce3011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:62:bf:63:77:3b:20:7e:4d:44:1e:1e:a0:1d:
                    ec:39:7f:8f:f0:b4:9a:f8:f4:79:b7:73:91:e3:06:
                    4e:9f:95:5d:0b:9b:3c:25:70:31:22:b0:f1:5e:24:
                    e1:0a:a4:b1:10:51:e0:8f:d1:1a:51:fe:71:81:de:
                    b8:b3:f8:40:8e:3d:72:20:af:81:b9:3f:8b:f7:c2:
                    bf:46:eb:1a:ff:e8:89:e8:8b:5a:bc:12:c6:e0:df:
                    9b:2a:6b:93:46:bd:47:c8:9f:02:34:5f:f3:90:41:
                    64:13:76:26:64:00:bc:05:e9:95:12:c9:5c:de:da:
                    53:ad:1f:db:75:aa:44:38:a4:02:0a:71:cd:93:bc:
                    fc:a6:a6:e3:d2:2f:3d:64:b5:e1:bb:be:fe:1f:70:
                    7a:ab:12:48:ab:dd:e9:80:84:c3:84:df:43:de:37:
                    c2:e3:46:b1:ed:81:43:0b:30:89:04:e7:c8:42:4d:
                    01:b5:e2:c0:20:a6:44:72:e4:f9:bf:51:1c:2c:64:
                    6d:d9:74:49:dd:bd:75:65:5b:55:c2:4c:8f:41:d3:
                    c6:d6:94:c3:bb:b0:e2:36:5b:29:95:67:6d:31:b0:
                    cc:3a:7a:34:f9:b4:35:81:81:62:19:10:7f:43:ad:
                    8b:53:82:cb:ac:11:a7:59:d0:94:6d:09:cb:63:3a:
                    52:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E3:64:E5:8F:A9:CC:EA:42:09:03:3F:1E:0B:C0:F3:36:CE:30:11
            X509v3 Authority Key Identifier:
                keyid:32:BD:EC:F2:B1:A4:10:F6:52:3C:20:E6:30:82:67:09:CB:6D:AC:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mr3s8rGkEPZSPCDmMIJnCcttrBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e1544b-1b2c-4ebd-8658-77839eb5f820/1/Mr3s8rGkEPZSPCDmMIJnCcttrBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:6b:ed:a5:65:95:a4:e9:2b:72:e8:ef:47:5d:88:27:b3:17:
         54:58:bd:66:09:75:74:ae:a1:ed:d1:a7:0d:e9:8a:72:56:65:
         5b:a7:0b:59:0f:e2:1f:5e:8c:cf:69:0f:2d:4e:04:9b:40:26:
         ee:d5:b8:79:d3:3f:fd:90:e6:68:c8:77:b6:b0:f0:82:37:92:
         8f:19:1e:51:ae:30:43:f3:67:22:c0:9f:b5:5c:a5:41:a7:d6:
         ef:85:2c:32:73:b8:af:23:b2:08:4b:5d:b2:fe:fd:4e:90:ee:
         f2:70:e2:05:c2:b8:20:e0:86:b3:1d:60:5a:dd:6e:ef:5b:10:
         b2:0c:aa:21:ad:41:34:3d:2d:8e:ba:10:29:02:75:a8:5d:9b:
         b3:db:e0:6c:8d:13:f1:62:a4:a3:f7:6f:23:b6:80:4f:2e:2d:
         17:b5:54:df:a3:8d:6f:86:71:dc:cd:dc:12:79:7b:d6:3c:38:
         fa:25:16:51:e6:9e:08:44:3d:5d:bf:f6:df:76:a2:76:66:b3:
         8c:3f:61:ca:40:ef:d8:2e:11:63:ea:9d:f4:35:f6:46:46:cb:
         08:20:da:63:cd:de:20:28:69:7f:97:ed:bf:2c:4e:1c:7d:9f:
         11:2c:58:32:07:9b:00:0c:fd:93:a5:fd:bb:89:e8:fa:be:ae:
         5f:f7:3e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----