Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.mft
File:                     3XF0IQf16FBis-CuZa-kuuZw4Es.mft (raw, json)
Hash identifier:          CR9m56gh8W6S1bcsc90uba3sQ/r3FN2xLPQVkgXjTek=
Subject key identifier:   36:E5:97:49:F0:F7:2F:6D:64:A0:86:C6:33:B8:C6:EF:A0:E3:7B:83
Authority key identifier: DD:71:74:21:07:F5:E8:50:62:B3:E0:AE:65:AF:A4:BA:E6:70:E0:4B
Certificate issuer:       /CN=dd71742107f5e85062b3e0ae65afa4bae670e04b
Certificate serial:       01962DF3DE945334E86734B408348D1078FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3XF0IQf16FBis-CuZa-kuuZw4Es.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.mft
Manifest number:          036A
Signing time:             Sun 13 Apr 2025 07:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:19 +0000
Files and hashes:         1: 3XF0IQf16FBis-CuZa-kuuZw4Es.crl (hash: LtO4TDabuEwjLk7tL311BBsAf5dJccOAfG8SJ6fxArM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:de:94:53:34:e8:67:34:b4:08:34:8d:10:78:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd71742107f5e85062b3e0ae65afa4bae670e04b
        Validity
            Not Before: Apr 13 07:01:19 2025 GMT
            Not After : Apr 14 07:01:19 2025 GMT
        Subject: CN=36e59749f0f72f6d64a086c633b8c6efa0e37b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:0b:14:e6:b8:61:6f:85:61:80:86:28:cc:48:
                    c8:e9:ad:1d:66:1e:75:40:6f:45:24:24:53:34:f3:
                    77:14:b7:d8:52:e9:aa:03:bf:2d:e8:27:b9:cd:c2:
                    a4:e2:92:0c:f6:ad:95:44:5d:aa:20:38:a0:75:b9:
                    dd:5a:48:8b:e6:35:9f:23:a6:6f:0f:89:ac:5f:c3:
                    89:88:e6:7d:f2:1d:55:ab:c2:57:13:3b:10:93:72:
                    fd:8d:c5:b4:22:21:7f:2a:b8:b5:92:b4:07:5b:d5:
                    59:25:27:7e:8d:4d:19:71:93:bb:1e:7e:b3:c8:cc:
                    41:df:e5:31:ce:c7:16:d5:7a:05:ff:39:94:aa:97:
                    58:98:58:da:db:21:7a:0e:f8:e0:7e:16:bc:0d:de:
                    1a:00:fc:28:51:a7:d5:14:b4:0a:30:c9:ba:f1:d7:
                    e6:57:c4:54:1d:dd:9a:13:2f:d6:83:be:d2:f0:fe:
                    b8:59:52:c4:2f:41:d1:41:07:5b:2a:9f:f4:9c:1f:
                    40:b2:6b:f3:ac:fa:80:95:75:34:2a:48:6a:e8:89:
                    f5:32:ea:97:f2:d7:0a:6a:53:36:87:a9:34:76:f0:
                    42:6a:b5:dd:52:b4:16:85:ea:ad:9c:fb:45:50:93:
                    73:7f:fe:b0:4d:9f:f8:b5:2c:5a:b8:68:4d:0d:f0:
                    66:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E5:97:49:F0:F7:2F:6D:64:A0:86:C6:33:B8:C6:EF:A0:E3:7B:83
            X509v3 Authority Key Identifier:
                keyid:DD:71:74:21:07:F5:E8:50:62:B3:E0:AE:65:AF:A4:BA:E6:70:E0:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XF0IQf16FBis-CuZa-kuuZw4Es.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2de4a9-658c-406b-8ee7-a7706ba30889/1/3XF0IQf16FBis-CuZa-kuuZw4Es.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:db:83:1a:d5:60:5d:46:7d:5c:95:e3:19:66:67:79:db:ab:
         b4:53:00:c7:12:d6:78:80:36:01:4a:5d:07:7d:ba:1f:54:c9:
         ff:8d:fe:cd:db:6e:89:eb:e7:18:06:47:19:df:a5:1a:ab:36:
         78:2a:75:92:7c:59:a7:0c:3d:ca:14:eb:11:2d:34:0d:ba:1a:
         2f:a3:4f:c1:11:1d:32:cb:40:f6:95:bc:b7:7e:d5:14:b9:1a:
         4a:9d:14:a9:32:5a:ec:07:84:c4:d0:87:b9:75:d2:aa:c6:73:
         fb:1c:c0:f7:66:78:60:bb:cc:c1:42:6c:f8:7e:8d:a2:14:e2:
         5d:eb:ad:57:94:5d:e1:a1:4b:09:6e:ec:8e:e1:ac:b7:8f:44:
         e1:d5:75:36:fb:23:d9:30:75:98:50:4d:04:55:42:ac:cb:38:
         41:8a:4c:73:25:07:64:ca:6e:2e:34:0c:44:ec:55:20:35:19:
         36:fb:c9:49:a1:de:26:fe:64:45:a4:2a:cf:66:4e:19:c1:71:
         ac:a9:1b:65:f6:1d:32:8d:b7:94:17:c8:fd:d3:43:db:65:02:
         53:37:80:91:76:a2:21:9e:e4:31:f0:09:cf:bb:5a:4e:90:d2:
         c8:45:bc:d0:95:7e:08:7f:09:1c:6d:bb:9a:da:65:be:75:55:
         1e:62:38:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----