Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
File:                     3AveFGeJXG86Rxl-rFjKE65Lt40.mft (raw, json)
Hash identifier:          ahSDcXVH62EBlhzpIrplewWCsQT06+dkQpfDGOA1204=
Subject key identifier:   59:A9:80:EB:E3:7D:8F:75:6C:63:73:2B:F9:84:98:9A:FC:2E:23:E9
Authority key identifier: DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D
Certificate issuer:       /CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
Certificate serial:       01962F3DB71C9D8A6956336AFAC278069833
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft
Manifest number:          0375
Signing time:             Sun 13 Apr 2025 13:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:35 +0000
Files and hashes:         1: 3AveFGeJXG86Rxl-rFjKE65Lt40.crl (hash: JOyoGNo67wE0aEGHtcCrpj62q60y2QTbIWiOwGHfvgY=)
                          2: EZxzjJ6XhYd6ltYTmizd41s0hPw.roa (hash: JYFppnIvAuxE4lEcobv5nYUUPDwGguXkpkPpHyixP6g=)
                          3: NGkgR_rl3fLugEg3BgzB-iR4GzY.roa (hash: /ZmEtv61Y7p4XUZGiWjRkOyM1ttDKeEvzWRAeWuz5J4=)
                          4: ducUWn7SmjDXSD2XK_HAZ4X-w1E.roa (hash: QsOlqkwJkHZw/RVRRDiq/I4YTQ51hDfHFRswj0zjjww=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b7:1c:9d:8a:69:56:33:6a:fa:c2:78:06:98:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc0bde1467895c6f3a47197eac58ca13ae4bb78d
        Validity
            Not Before: Apr 13 13:01:35 2025 GMT
            Not After : Apr 14 13:01:35 2025 GMT
        Subject: CN=59a980ebe37d8f756c63732bf984989afc2e23e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0a:fa:78:f7:ed:d0:78:8d:8c:15:47:e2:0b:
                    02:d1:eb:5a:84:d6:9b:a3:b5:d9:dc:4a:a8:68:a6:
                    ee:23:02:98:10:77:b0:fc:f4:ce:36:f7:7c:85:9b:
                    ad:f1:f4:f7:31:af:1d:f5:79:3d:ed:5a:6f:09:7e:
                    f4:a3:13:d7:1b:b9:58:50:cb:1c:d4:74:fb:d0:fe:
                    b5:6a:a0:44:a2:20:f7:85:9b:fa:d0:8f:cb:2c:f9:
                    39:e0:63:62:63:49:82:a3:26:42:14:c5:ba:4f:f4:
                    b2:ec:e2:b0:df:fa:4a:e2:2f:58:5e:c5:32:89:70:
                    07:37:2b:b2:0c:26:00:1a:55:a8:cd:18:fa:1c:42:
                    3e:8c:86:1e:95:c9:b0:12:20:76:91:77:50:b4:46:
                    27:20:e4:fb:38:ae:20:9c:49:39:84:07:bc:19:bf:
                    55:05:8a:02:70:15:7f:5a:f6:bd:01:bc:c8:b8:15:
                    d4:cb:7f:bf:cc:91:41:bf:ba:a0:d1:71:22:4a:61:
                    a0:b9:c3:21:a8:77:72:3e:7c:22:04:80:38:2a:79:
                    da:50:77:26:87:05:b7:4e:7d:9f:6e:fe:21:f6:67:
                    d8:59:c8:14:b3:48:4c:1d:39:34:83:69:4e:c7:65:
                    8a:b9:75:ab:31:67:a5:5c:86:77:39:f1:d6:d8:2d:
                    c9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A9:80:EB:E3:7D:8F:75:6C:63:73:2B:F9:84:98:9A:FC:2E:23:E9
            X509v3 Authority Key Identifier:
                keyid:DC:0B:DE:14:67:89:5C:6F:3A:47:19:7E:AC:58:CA:13:AE:4B:B7:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AveFGeJXG86Rxl-rFjKE65Lt40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cf063f-9493-46f1-acd1-31c7fb4715f6/1/3AveFGeJXG86Rxl-rFjKE65Lt40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:cc:85:a7:f5:b5:ae:37:70:ff:db:19:56:66:cf:d2:e8:76:
         1c:7e:4a:17:48:8c:fe:d5:82:05:dc:ce:21:23:ca:70:78:60:
         1e:6b:b6:d3:8a:0e:63:cb:56:0c:63:0f:15:92:3a:bd:b6:87:
         89:c4:2a:0d:82:ce:7c:5e:73:bd:34:e9:70:6e:26:c0:e1:77:
         ca:a9:b3:07:f7:40:cc:ef:86:e0:20:1b:fd:b4:c6:b4:cd:99:
         aa:7f:c9:5c:f4:d6:67:84:62:53:cd:81:bb:e6:84:ee:5a:5e:
         71:9c:5b:db:f4:26:d7:86:3c:cb:26:cf:cf:10:fb:cb:2b:a7:
         23:aa:37:58:bf:31:f0:17:ad:20:ee:38:96:ba:ed:80:83:c7:
         bd:23:b0:7c:a7:bd:00:a3:04:60:d9:e6:08:0b:13:84:3b:01:
         7b:57:95:84:72:58:62:1a:4a:88:2b:b3:59:b2:d4:c8:0d:89:
         22:0d:17:c8:b7:7d:01:96:59:77:1b:46:15:d0:24:58:5f:44:
         c0:22:cf:bc:14:11:c2:e9:c7:d1:ec:76:5b:9f:a6:2d:b0:05:
         51:82:f8:eb:15:82:ba:87:42:83:59:7e:c6:fc:42:53:4d:90:
         6f:52:1e:fc:7d:bf:8d:33:2a:fe:96:53:c6:7e:16:54:1b:9a:
         d9:9e:11:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----