Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
File:                     35BBVe46z-P-qLv-6G6XxYyJkfQ.mft (raw, json)
Hash identifier:          iiKQDFpEimgDA8WKNd40Q6DifE+fYTXscq0jOOgZC80=
Subject key identifier:   EF:F4:D1:C1:B4:CC:07:34:51:94:98:79:3F:2C:DB:4B:05:95:30:19
Authority key identifier: DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4
Certificate issuer:       /CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
Certificate serial:       01962F064075F89986457C8DD2C7E64F498F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
Manifest number:          1110
Signing time:             Sun 13 Apr 2025 12:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:00 +0000
Files and hashes:         1: 35BBVe46z-P-qLv-6G6XxYyJkfQ.crl (hash: fgP2ANjg39/Nq0NgiCGhpY6CzPBKzudTIMBCPKVdr28=)
                          2: B-nM1GTMLKr4Gk1KLpOo23YK3j8.roa (hash: 0wOg2hC46+mvVWLdy3l+GE8WwSTmGrLshzLKyEpaIwQ=)
                          3: zrrMlICGpdDYFya8WKvO7u0XM-Q.roa (hash: txsRNfUipxo+CqvVL0kXrQvI1GxCBc26tW/8hZA3omw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:40:75:f8:99:86:45:7c:8d:d2:c7:e6:4f:49:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
        Validity
            Not Before: Apr 13 12:01:00 2025 GMT
            Not After : Apr 14 12:01:00 2025 GMT
        Subject: CN=eff4d1c1b4cc0734519498793f2cdb4b05953019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:94:1a:25:61:11:72:91:18:db:18:db:d7:a3:
                    7c:18:eb:88:a5:dd:a1:ec:a5:e8:fd:b8:98:ea:4b:
                    57:2f:d4:2b:70:6d:f8:b9:81:d5:23:c9:6f:34:51:
                    ee:06:de:df:01:28:d4:d4:ba:12:f7:fd:2f:d1:68:
                    b1:41:ad:a1:a4:c0:c3:d2:d9:6c:8e:cc:74:fb:7e:
                    8d:14:0c:95:40:10:29:0d:15:3b:22:79:2b:f6:bf:
                    07:53:74:47:7b:76:ee:fa:96:50:dc:69:8a:13:57:
                    01:16:da:96:d6:7b:35:05:90:dd:ad:ef:c6:47:4c:
                    39:4c:a3:d3:b9:a2:c0:46:8f:87:40:e4:2f:52:b1:
                    f3:63:e0:64:17:63:d1:94:74:8e:ae:18:cb:24:42:
                    82:77:b8:9c:9f:49:40:86:a6:05:4a:65:d8:94:1c:
                    fd:12:df:22:f3:87:be:1b:47:04:21:be:42:1a:b7:
                    2c:3d:73:0e:da:53:fc:8e:2f:7a:5d:b0:e7:58:25:
                    b3:2b:71:17:ee:a9:2d:9d:b4:e0:93:83:9e:db:fc:
                    17:3d:25:38:22:e1:a6:61:5e:3a:b0:ad:18:35:6a:
                    ab:ef:a7:77:0f:34:c8:7d:d1:ac:12:d8:3c:11:e6:
                    07:c3:ea:04:d8:fa:58:29:fa:ed:34:a1:3b:a8:38:
                    8e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F4:D1:C1:B4:CC:07:34:51:94:98:79:3F:2C:DB:4B:05:95:30:19
            X509v3 Authority Key Identifier:
                keyid:DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:b4:11:aa:22:98:6b:7c:c0:1c:ab:a4:c4:93:e0:b0:6a:5a:
         a6:a2:c7:4b:29:3d:e6:7d:b2:89:26:09:ce:db:c7:a9:00:b0:
         55:68:2e:22:98:59:2c:04:87:2c:06:5e:ac:ed:3d:a5:ec:6d:
         1e:b6:98:ae:41:25:00:7c:40:52:95:1e:34:e8:d2:4b:2e:cb:
         e7:b8:5c:8f:11:5e:be:40:40:c8:04:1c:e6:90:7e:ba:80:c3:
         c6:36:c1:5f:e8:20:1e:0e:b5:29:1f:7f:a9:fe:82:6c:52:71:
         5d:aa:d9:e5:1e:c6:4e:2b:81:50:ff:af:e1:67:8f:e3:50:22:
         6d:b1:87:7a:e6:9b:1e:ec:7d:86:a0:a7:c5:4a:68:6a:7c:a5:
         47:b4:b0:f6:cc:dc:2c:57:2d:33:fd:3a:5d:bd:54:d9:8b:11:
         5d:e3:a1:55:57:bf:aa:ce:41:cc:12:b5:c4:a5:1d:c2:8b:6a:
         41:b3:df:da:45:68:32:e1:9d:7b:a3:b6:9d:bb:c7:63:72:b8:
         ad:0d:ee:a4:52:cc:eb:f4:a4:b2:5a:e5:7e:9a:b9:09:12:a4:
         31:c1:b8:52:02:f6:cd:0b:01:63:8a:80:63:fd:35:bc:80:0d:
         f5:33:80:e2:99:d7:0f:41:1d:eb:79:97:3a:3e:5c:32:b4:88:
         b5:f7:76:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----