Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
File:                     3y4c6U6IoT84_n-UO3lBa8B6HfA.mft (raw, json)
Hash identifier:          YIumbJYKGsF/HC4YOiyQkG5LBKeLNfifyxEyLUcPdng=
Subject key identifier:   82:72:09:66:A2:86:67:D9:D3:B0:0B:36:5C:50:96:19:D9:A9:96:17
Authority key identifier: DF:2E:1C:E9:4E:88:A1:3F:38:FE:7F:94:3B:79:41:6B:C0:7A:1D:F0
Certificate issuer:       /CN=df2e1ce94e88a13f38fe7f943b79416bc07a1df0
Certificate serial:       01962F065434F5FE2ED7E0A25BADF6E53139
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:06 +0000
Files and hashes:         1: 3y4c6U6IoT84_n-UO3lBa8B6HfA.crl (hash: yFtUcXGjWc/cwyIB2RT4zpEvLKoZf6A5BR5nN5CnD1U=)
                          2: cssion0g3PJ3Xd3t2jaSsbUDiLU.roa (hash: n63LUbsK0+15N0vAETIk0kewzsiQZdMNrmzn6fJSfQI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:54:34:f5:fe:2e:d7:e0:a2:5b:ad:f6:e5:31:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df2e1ce94e88a13f38fe7f943b79416bc07a1df0
        Validity
            Not Before: Apr 13 12:01:06 2025 GMT
            Not After : Apr 14 12:01:06 2025 GMT
        Subject: CN=82720966a28667d9d3b00b365c509619d9a99617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e5:31:8e:82:e8:e5:5c:32:9c:41:3a:ff:f1:
                    89:9f:46:20:a5:0e:27:6c:8a:c5:65:92:46:35:9d:
                    26:3a:36:ae:8a:79:28:90:79:f2:b5:12:d2:b3:dc:
                    f1:6a:a2:f2:15:cd:96:dc:d8:45:17:48:24:48:43:
                    21:12:52:de:41:73:e5:24:eb:44:a5:08:e7:43:f6:
                    1d:e7:03:8d:05:ff:5a:92:0d:60:af:79:d9:d7:8f:
                    ab:b3:e2:e1:6e:22:4f:38:2f:29:ca:82:7d:9f:2b:
                    b0:1f:d7:b5:77:a4:de:77:ea:4f:fc:1e:e7:c6:75:
                    55:51:26:9b:0c:bd:48:cd:8f:a3:fd:a7:be:6c:1e:
                    bf:06:3f:9a:41:15:aa:f5:de:77:b7:d0:76:f2:1b:
                    f3:e4:fb:ca:78:88:a8:63:64:56:f7:08:9f:81:ac:
                    c4:f2:c5:b7:4f:23:54:48:04:3f:ea:cc:7d:5d:3f:
                    01:86:06:31:f8:80:19:95:1b:17:aa:7f:c1:96:1e:
                    f7:de:aa:24:5a:a4:1d:64:23:94:0d:74:1e:73:16:
                    6c:d9:84:e5:a3:3d:39:60:99:8f:de:38:0b:4a:a2:
                    ee:bb:3d:c7:cf:c1:89:d1:e9:b2:bb:0c:d4:a1:8d:
                    ce:73:ff:d9:b3:02:9f:e1:91:15:2b:12:3d:d6:df:
                    96:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:72:09:66:A2:86:67:D9:D3:B0:0B:36:5C:50:96:19:D9:A9:96:17
            X509v3 Authority Key Identifier:
                keyid:DF:2E:1C:E9:4E:88:A1:3F:38:FE:7F:94:3B:79:41:6B:C0:7A:1D:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:f9:f0:2a:77:5a:85:4e:76:2d:fd:3b:5a:30:4f:dc:0a:92:
         f6:b7:b7:a9:07:c8:8f:16:6a:24:ed:15:60:6c:ac:78:58:29:
         73:be:29:35:17:38:08:c9:cf:24:5b:46:5a:dc:21:d1:de:70:
         90:be:f7:43:98:5a:15:b3:d1:0e:6a:6b:1d:03:16:59:4c:cb:
         05:a8:f6:a9:60:33:39:29:f0:b2:63:b5:3b:a4:92:46:37:40:
         30:d0:f4:d6:cb:f7:81:45:e8:f5:e7:93:6a:64:59:53:c9:34:
         0d:c9:15:49:dd:16:d7:f1:cb:7a:0e:76:ae:d6:4c:b2:52:3c:
         63:25:27:c5:47:60:e6:3f:be:ea:29:4f:72:35:7e:2f:47:35:
         2c:0c:e3:3d:4f:9b:21:4e:65:2b:68:27:db:76:23:7f:fa:d8:
         eb:4d:eb:39:7c:fd:21:ea:07:9a:85:23:ab:42:5b:31:c8:4c:
         05:27:d6:09:25:fa:e5:76:f6:1c:31:4d:8b:3d:1c:6c:05:a2:
         46:d8:77:30:00:6d:09:44:67:4f:3a:18:f4:94:a4:ae:f7:bf:
         f5:44:00:41:93:15:ee:33:e0:27:48:9a:52:cd:25:4b:73:ee:
         f1:10:36:c4:32:eb:4b:eb:c0:70:ea:58:29:de:fc:4d:85:44:
         aa:78:58:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----