Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
File:                     3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft (raw, json)
Hash identifier:          zmeHIlLf/lBqFGT3MLTBDG3xH/aixNwOJ/tIAdVXQas=
Subject key identifier:   61:CA:E6:1C:7E:2B:5B:F5:3F:FA:C6:36:43:7C:D7:C5:A2:21:91:91
Authority key identifier: DD:11:61:68:F7:89:BD:D4:08:E6:EB:99:62:2E:3E:BC:9A:73:10:0A
Certificate issuer:       /CN=dd116168f789bdd408e6eb99622e3ebc9a73100a
Certificate serial:       01962E99B85555C102EC78864A648A180020
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft
Manifest number:          11A5
Signing time:             Sun 13 Apr 2025 10:02:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:28 +0000
Files and hashes:         1: 3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl (hash: siCR1Mb3BI9a70zbYRTPTNOhVKdomuqH1vGoTni3QyY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b8:55:55:c1:02:ec:78:86:4a:64:8a:18:00:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd116168f789bdd408e6eb99622e3ebc9a73100a
        Validity
            Not Before: Apr 13 10:02:28 2025 GMT
            Not After : Apr 14 10:02:28 2025 GMT
        Subject: CN=61cae61c7e2b5bf53ffac636437cd7c5a2219191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c9:69:57:20:1a:d1:be:22:57:9c:97:75:81:
                    cb:7b:12:f7:20:85:ea:2b:d7:70:ff:34:f1:bb:0e:
                    a9:65:53:42:7c:9d:ef:47:7f:70:62:c6:30:09:70:
                    1d:44:36:8f:6d:d6:73:3d:9d:ce:85:82:7c:fb:16:
                    c7:dc:41:ed:b9:46:13:c0:50:2c:90:81:03:20:d1:
                    2f:62:7b:bf:72:d9:d0:4e:f1:39:c9:e3:99:f2:fd:
                    ad:d2:19:37:c0:72:33:a0:c0:b1:a6:3b:13:11:84:
                    38:08:5b:e4:03:96:f4:ca:d0:7b:b0:8e:6d:76:fb:
                    44:4f:f5:c8:b4:0b:53:fa:2d:79:08:22:99:e9:1e:
                    80:8d:85:5e:2a:fb:2d:a8:43:68:5e:56:70:29:19:
                    ea:e8:0c:e5:69:4e:0a:30:5f:ef:db:b2:10:05:26:
                    15:44:b0:44:f4:12:db:6f:76:a2:33:6a:5c:ad:e2:
                    8f:f1:60:be:13:ae:49:a2:f6:49:50:bb:67:7b:52:
                    01:ee:6b:76:4b:a9:a1:a5:df:54:20:86:e6:e2:d7:
                    f2:0f:3e:b6:46:d5:46:7e:fd:62:b3:7d:e5:b9:57:
                    4e:f9:d5:4a:f8:03:58:e4:65:c8:8e:8f:90:1d:a2:
                    a9:e5:99:c3:76:a8:80:79:3b:44:40:7a:7d:1e:90:
                    4b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CA:E6:1C:7E:2B:5B:F5:3F:FA:C6:36:43:7C:D7:C5:A2:21:91:91
            X509v3 Authority Key Identifier:
                keyid:DD:11:61:68:F7:89:BD:D4:08:E6:EB:99:62:2E:3E:BC:9A:73:10:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RFhaPeJvdQI5uuZYi4-vJpzEAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/bb8f62-6bb9-4076-890a-7d4b033f1307/1/3RFhaPeJvdQI5uuZYi4-vJpzEAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:ab:89:c8:97:ed:6f:65:be:9b:bd:bd:45:78:c1:87:63:74:
         9e:4b:de:2e:e2:ef:ea:ca:e2:04:d8:97:79:d7:f6:21:05:4a:
         51:f4:08:75:c7:dd:cc:16:11:f3:cc:91:1f:90:d7:00:d8:a9:
         4c:01:6a:1e:6a:de:f1:73:4c:64:f8:08:1b:d0:f1:cb:e7:fa:
         ea:3e:f6:cb:72:57:32:9a:37:1f:31:fa:a3:e5:7a:cb:f8:07:
         7f:08:61:8f:17:a8:38:1a:00:d1:06:7c:66:96:2e:98:bd:f6:
         f5:c5:6d:2f:ea:88:7c:7f:fc:43:4d:19:ba:ac:ec:7f:17:8d:
         98:d1:01:4d:1d:01:f4:83:30:5d:90:32:4b:64:2e:d3:db:19:
         d3:b5:1d:de:1e:f4:b8:4b:25:6c:b3:48:1f:d5:4b:4d:6a:ee:
         2b:fe:c6:43:1a:e3:a4:ad:be:16:da:f6:45:f2:33:d6:2e:4e:
         20:9f:94:b1:76:63:b5:e0:d3:0d:70:ff:5e:91:34:6a:5a:a3:
         f6:0d:2f:fb:d0:b2:2f:69:89:c8:54:b0:ff:91:0f:91:03:5f:
         9d:55:06:d0:6e:c5:51:fb:23:82:82:7f:9f:a0:68:21:94:10:
         db:08:cf:e7:a4:88:b8:5b:bd:fe:30:fc:4a:96:c9:29:78:de:
         6d:47:fb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----