Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
File:                     3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft (raw, json)
Hash identifier:          J80PgLEuoGohICVTE4t6sr1ZZm2+CyQyflpJClcuN5I=
Subject key identifier:   8A:D7:73:25:62:A2:59:20:40:F3:DC:89:3C:C7:BB:57:6A:D9:9D:72
Authority key identifier: DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17
Certificate issuer:       /CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917
Certificate serial:       01962F3D6B175891ED5E595BD760E9CE096C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft
Manifest number:          13A1
Signing time:             Sun 13 Apr 2025 13:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:16 +0000
Files and hashes:         1: 3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl (hash: ejp9ILKnNgdIMtWqbXzgXBLuGlF71w1Uc5jx1C5i4dw=)
                          2: Wh1jH5vANwZcwldoZxeJx9Ms8Tw.roa (hash: /m2D3y0N+aO5CYT+TsC7FYKiJpOsP+DSU+ozinhXmV8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6b:17:58:91:ed:5e:59:5b:d7:60:e9:ce:09:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc2c2fef9c8caf8f2f08211ef02c3d0ad3474917
        Validity
            Not Before: Apr 13 13:01:16 2025 GMT
            Not After : Apr 14 13:01:16 2025 GMT
        Subject: CN=8ad7732562a2592040f3dc893cc7bb576ad99d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bd:18:fe:5c:15:60:a3:df:37:5e:82:35:c7:
                    70:ef:16:69:40:a3:45:6d:f0:7c:a6:b3:41:ec:fc:
                    4d:b8:1f:5a:39:d9:da:29:f9:8d:69:1e:99:30:77:
                    aa:b3:54:02:0d:13:07:ab:1f:db:bd:e9:72:eb:e6:
                    58:29:20:e3:a5:35:57:45:2c:b5:b1:67:33:a0:0a:
                    6a:fd:30:ce:fe:f8:4b:c0:1a:fb:ff:c1:23:c4:1d:
                    c3:6a:36:dc:97:da:0d:eb:80:11:68:77:fe:3b:41:
                    57:c0:d4:c4:87:d8:a4:f5:3f:ba:22:f5:59:d6:bd:
                    c9:35:56:ae:f7:0f:52:7c:93:91:15:d5:d6:1e:b5:
                    ae:b0:78:8e:c6:44:1c:a4:6c:bc:76:4e:e9:a7:c0:
                    d2:ef:1b:18:2d:ee:b0:82:36:7d:4b:6f:ab:1d:04:
                    e5:6d:e8:a5:d1:15:60:b8:70:18:64:63:3b:75:8a:
                    42:c0:2f:3b:8f:98:49:d9:26:53:02:fa:94:cf:33:
                    7d:e0:34:d0:c1:ec:f4:37:f9:5a:05:5b:b0:de:2c:
                    99:19:9d:f5:e3:85:b5:45:ce:28:6b:02:f1:d6:2e:
                    ac:16:28:10:1b:02:ab:dc:4d:c8:30:f0:ec:33:02:
                    5b:b7:18:1b:5a:5f:7e:f8:0b:79:36:8c:c7:aa:f7:
                    09:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D7:73:25:62:A2:59:20:40:F3:DC:89:3C:C7:BB:57:6A:D9:9D:72
            X509v3 Authority Key Identifier:
                keyid:DC:2C:2F:EF:9C:8C:AF:8F:2F:08:21:1E:F0:2C:3D:0A:D3:47:49:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cwv75yMr48vCCEe8Cw9CtNHSRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/08531b-bd66-4fce-a569-8644c5814c9a/1/3Cwv75yMr48vCCEe8Cw9CtNHSRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:0e:cc:28:32:7d:9c:54:e9:d2:72:bf:3b:8f:d2:b9:e2:44:
         0e:c4:62:05:77:48:ee:d5:fa:a2:49:16:14:c8:21:b6:7a:2b:
         7c:a2:07:f4:75:9b:5d:e0:35:22:8e:44:51:a3:86:83:53:fa:
         ca:f5:71:b5:d4:bd:58:93:fd:19:0b:50:1c:62:81:8b:94:eb:
         40:c7:e0:0d:66:1a:67:19:bd:31:9c:41:99:ac:5c:64:52:9c:
         f4:28:8a:bd:87:31:ec:a7:85:75:02:4b:34:72:b0:e8:43:0e:
         3f:52:65:d8:a5:4a:0f:8b:a0:65:45:8a:f6:d4:e2:58:34:f6:
         ff:28:17:1f:b5:6c:87:27:04:ce:15:af:98:0c:d2:47:1d:f1:
         f0:05:c4:df:ae:3e:7a:37:ae:7f:a3:a1:8c:f6:ef:7b:1c:4a:
         0d:76:b2:1d:03:7c:dd:89:53:09:b3:16:8b:a2:dc:fa:6b:29:
         e8:2e:1d:f6:38:83:d5:ac:33:f0:ac:97:04:f0:10:7d:0a:7c:
         8c:50:d6:b6:41:05:77:26:a0:fc:a8:75:9a:74:86:40:6e:48:
         ac:a9:63:5b:af:57:3f:d5:bb:f1:81:a5:53:4f:12:58:ad:7b:
         fa:7c:70:77:6f:c4:a7:5f:5f:1c:cb:e3:c4:a9:8a:4f:e8:06:
         6d:6c:90:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----