Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
File:                     3Prn1OadQuT0yV2Z9IK5qUTb78g.mft (raw, json)
Hash identifier:          zR2bnfLGtdAC2lDOlDTl7mT+pkXEqpEWC8vEhPkq+8Y=
Subject key identifier:   DA:D8:A0:94:F7:A3:94:69:5D:E7:02:35:1B:34:DE:F8:C3:6D:EB:96
Authority key identifier: DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8
Certificate issuer:       /CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
Certificate serial:       01962E2AE2EFCB880C29ADA9498468969149
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
Manifest number:          11D0
Signing time:             Sun 13 Apr 2025 08:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:24 +0000
Files and hashes:         1: 3Prn1OadQuT0yV2Z9IK5qUTb78g.crl (hash: wynR/X/XqhUWriW3nRMN5KaQOdIWXPhDPwC9YartF8w=)
                          2: AFa9BeMRC9KZa5ESZVY3qezRhqo.roa (hash: kFgjZZQAO7DQ4A//2mPuGomN/dVKyDVTDikOVl1cxRM=)
                          3: oTU6jls5Cbp2h-8jJVa1y-YZLoo.roa (hash: UlQbXDO/2Z5fLH/VOiXf6qQdUrJ+q43vGjJDK0Fi6XA=)
                          4: onN6KmPVXQwrcGzs19GCsiDsKrQ.roa (hash: z68kDOoDWacxs1gAQw1w/1PdDLWcZUVC2dAlyVoGWL0=)
                          5: rrglEeDtNMMTRuZ3vbypZH_RQmE.roa (hash: urqCGELvaxYkBx+UEtrFXZNDg3RBmJzxwZn3ZWt36zo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e2:ef:cb:88:0c:29:ad:a9:49:84:68:96:91:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
        Validity
            Not Before: Apr 13 08:01:24 2025 GMT
            Not After : Apr 14 08:01:24 2025 GMT
        Subject: CN=dad8a094f7a394695de702351b34def8c36deb96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:78:fc:7a:a9:5b:34:28:24:1d:b2:39:ab:00:
                    69:da:7f:fd:0e:04:18:92:25:41:7c:b9:af:2b:70:
                    42:57:11:6d:03:40:6d:00:c6:d1:7f:43:21:cf:f2:
                    58:41:fb:e1:34:0d:2e:c8:af:fd:b9:fd:fe:17:cb:
                    af:3d:ad:a0:fe:0a:ad:1d:9a:ae:13:79:e3:48:c9:
                    d7:34:e2:58:e8:78:9e:60:78:8e:2b:a1:7d:e8:80:
                    fc:51:83:b9:c0:6e:c9:ef:24:99:84:df:61:e7:b1:
                    3c:70:1d:16:48:e5:30:a6:98:3a:c8:21:f6:1d:b0:
                    2f:a9:06:b5:c0:1d:3b:fa:8a:35:8b:2f:94:48:de:
                    98:71:c6:97:0c:14:27:91:c2:bb:f1:68:7e:d9:ab:
                    df:65:53:19:e8:fa:d8:aa:52:f3:c1:7a:76:17:cf:
                    68:f3:90:4b:17:6e:da:e9:b0:0f:f0:b1:f4:20:6a:
                    44:a0:f2:af:4d:17:6e:b9:12:01:f3:31:7c:96:76:
                    d3:49:d1:f3:76:dc:ea:76:0f:4f:22:fe:d3:15:fb:
                    60:de:68:94:5d:e7:b7:cc:f2:94:d0:52:22:5b:1d:
                    14:86:6e:48:c4:58:85:0e:0c:6c:ad:56:b7:97:12:
                    c8:81:4b:dc:08:c8:74:39:bc:7a:97:4f:3c:6d:3b:
                    54:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D8:A0:94:F7:A3:94:69:5D:E7:02:35:1B:34:DE:F8:C3:6D:EB:96
            X509v3 Authority Key Identifier:
                keyid:DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:e0:a6:01:6e:8c:5a:ff:c4:ce:05:e2:aa:ab:fc:9d:c0:5f:
         38:a7:d7:db:3d:69:60:97:46:c0:cb:c4:08:d4:86:f2:d0:75:
         30:23:3b:59:32:7a:6e:fe:89:e1:6b:5e:b8:80:2f:7e:4d:b4:
         b2:08:b0:b2:23:51:6c:a0:1e:f7:8b:60:0e:98:45:a4:8b:ad:
         81:b6:d4:b2:8c:b5:3c:46:b1:65:4b:da:c2:c1:34:84:aa:71:
         81:95:74:99:6f:8f:b7:eb:48:f4:30:22:dd:1c:fe:f6:ff:bb:
         01:0a:b1:ef:80:a8:83:b5:20:64:b0:18:f9:85:e5:89:e4:ff:
         7b:c3:b3:e0:f2:bd:1c:f7:e8:3b:ec:d1:a0:ad:88:3a:cf:24:
         5b:1b:c7:14:fb:2b:ab:5d:3b:03:ce:f0:9b:43:02:86:81:1f:
         24:57:b5:8a:ff:ec:e4:07:6d:da:f8:92:c6:de:2c:73:49:78:
         6c:72:4c:0d:a5:48:bf:44:85:72:22:6b:8a:49:92:61:81:98:
         a9:a3:75:54:a6:fd:76:24:7c:71:16:37:95:b7:80:a5:fd:78:
         0b:b6:fc:95:da:d1:05:95:7a:2f:11:f4:d9:a0:d3:1e:71:98:
         8e:a7:f6:14:c4:77:f4:f0:26:76:09:36:76:d8:55:59:90:08:
         d2:98:77:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----