Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
File:                     3L-wBIqNpVb9nT3xB3QC-EP11wM.mft (raw, json)
Hash identifier:          7mBWC8TGjnTWRCVuFriRjbCz82hdTKZGg+TglHcstxU=
Subject key identifier:   49:29:B6:1B:83:40:08:4E:6E:F6:E2:1B:43:63:25:E1:BD:52:39:16
Authority key identifier: DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03
Certificate issuer:       /CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
Certificate serial:       01962F072351D5B679F1CD1F1D511A2F6B7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:59 +0000
Files and hashes:         1: 3L-wBIqNpVb9nT3xB3QC-EP11wM.crl (hash: qRk1jAAbMkmHxnaKqNyW0idkJgKxw7iUUegctgV0n4M=)
                          2: Do4PLeA5o1GoY13K0QrZV2b74eA.roa (hash: B+FCeD+X05tR69YheF7VQWedc1p5umVaXn20qWaAN1Q=)
                          3: hbNbIVCjEN8lItMWW7GZDYik4tU.roa (hash: /QjTSPpaK1t0LSYMylHsSi3d6TtpowMr+RmtBrzOYQo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:23:51:d5:b6:79:f1:cd:1f:1d:51:1a:2f:6b:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcbfb0048a8da556fd9d3df1077402f843f5d703
        Validity
            Not Before: Apr 13 12:01:59 2025 GMT
            Not After : Apr 14 12:01:59 2025 GMT
        Subject: CN=4929b61b8340084e6ef6e21b436325e1bd523916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f5:7a:cd:8e:ea:bb:28:6f:c0:6c:c4:a2:25:
                    16:ad:af:5b:07:a3:95:69:81:d5:a1:f6:81:42:ef:
                    a2:76:af:d9:b4:ea:53:6e:5d:33:e7:99:93:14:3e:
                    df:9c:5e:dc:f0:09:6d:c3:43:e6:93:26:e2:e5:9d:
                    83:c7:25:fb:a7:72:c4:1c:14:cb:15:eb:50:91:9d:
                    e3:85:2a:7c:e7:1e:34:bf:28:6f:44:38:13:55:f9:
                    3c:db:90:e6:10:43:d6:8b:67:5b:6d:fb:45:0a:d3:
                    c8:8a:ca:d2:81:d1:9c:9c:60:f3:a1:a4:ae:37:71:
                    34:95:7b:0e:ba:43:ad:16:ec:64:55:2d:7f:c4:f0:
                    d1:cf:79:a7:a2:3d:91:09:aa:88:0c:68:13:d8:db:
                    1f:86:1c:1f:d8:a3:52:cb:ce:37:b9:fa:f6:9f:d3:
                    3f:28:7a:2e:ee:88:21:9d:a1:9b:a7:0e:a2:46:28:
                    af:23:88:0b:10:de:62:eb:0e:92:b6:71:14:c9:cd:
                    4b:f4:12:8b:eb:56:7e:9a:ce:57:92:e2:95:67:c1:
                    18:f4:4f:14:52:6c:1c:41:7e:50:05:4e:3c:5e:28:
                    74:7d:3b:c3:93:ef:c4:f1:87:82:f9:6d:b0:72:94:
                    b3:40:2d:f8:6f:d1:7c:9d:47:d6:0d:d3:85:14:12:
                    01:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:29:B6:1B:83:40:08:4E:6E:F6:E2:1B:43:63:25:E1:BD:52:39:16
            X509v3 Authority Key Identifier:
                keyid:DC:BF:B0:04:8A:8D:A5:56:FD:9D:3D:F1:07:74:02:F8:43:F5:D7:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3L-wBIqNpVb9nT3xB3QC-EP11wM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/dcb70d-7947-4569-bc84-e060b4fcbccb/1/3L-wBIqNpVb9nT3xB3QC-EP11wM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:71:df:c4:37:45:a5:55:4f:f9:58:bc:0d:7e:73:59:d4:dd:
         86:f5:0f:6a:1e:5a:3c:b5:28:3f:88:0f:2e:8f:2a:9b:0d:0a:
         d2:e0:37:38:d6:fa:8f:c9:f6:b4:bd:2e:d0:78:7b:13:4c:ec:
         79:0b:65:16:b3:cd:d7:d2:eb:8b:5b:7d:82:34:4d:1e:ce:eb:
         b8:6e:a9:a8:ad:26:26:7c:87:e3:4f:6f:1a:c2:6f:3e:fc:39:
         cb:22:5c:aa:8b:b5:e8:43:2e:3c:6c:4c:49:aa:6b:66:87:1d:
         0a:90:d6:c8:0a:ff:02:97:b7:d4:ef:93:ff:2f:2e:12:ac:3e:
         e1:f8:be:7d:a9:96:26:08:5b:30:da:83:de:60:6f:10:e5:1d:
         c8:df:08:10:7d:d3:91:d7:31:7d:29:df:c0:aa:03:ad:b6:07:
         11:6c:ef:30:3b:56:4b:72:e9:c5:3f:85:8a:21:65:e4:17:b2:
         fe:9d:1a:f8:d0:0a:69:38:45:61:2e:b6:d2:54:99:86:e4:fb:
         f6:c5:0a:0f:32:ab:92:bf:c7:d6:ae:05:04:42:10:25:0e:8f:
         b1:8b:37:fb:9f:78:6d:f1:6c:dc:dd:2f:aa:8b:04:34:4c:f8:
         37:1f:3e:ea:cf:fb:92:21:e9:74:b0:fa:80:fb:53:db:09:46:
         30:f8:2b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----