Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
File:                     3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft (raw, json)
Hash identifier:          9E8vC/JrWWunRyK8UlAjdIwqOabxTRemt8KYSxTYJuQ=
Subject key identifier:   96:76:0C:BA:BD:02:75:8B:A4:B2:60:3B:EB:8F:96:20:F7:B8:39:B7
Authority key identifier: DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37
Certificate issuer:       /CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037
Certificate serial:       01962F3D8E4E42A113E206648A9589A5EA14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft
Manifest number:          14F4
Signing time:             Sun 13 Apr 2025 13:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:25 +0000
Files and hashes:         1: 3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl (hash: hq8TpoMKp2ehlX47Jy/GYmob/aWQhbIjmk+33LFYjFw=)
                          2: X_yuCbgOElk7t0Nndlrc9uLk_XU.roa (hash: zPioyhAie2r6Wx7GGJYyupW2bQRy/+no7AIsLRygNz8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:8e:4e:42:a1:13:e2:06:64:8a:95:89:a5:ea:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc377b5d022bf0be4a6224b47eea6ca0b81bf037
        Validity
            Not Before: Apr 13 13:01:25 2025 GMT
            Not After : Apr 14 13:01:25 2025 GMT
        Subject: CN=96760cbabd02758ba4b2603beb8f9620f7b839b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5c:5a:a5:05:8b:a0:5a:96:69:82:c3:64:34:
                    6e:21:3f:d0:ba:a5:62:12:b1:69:e6:6e:57:9d:03:
                    ff:22:87:fe:c1:bd:97:f4:39:78:ff:f7:51:78:0a:
                    94:ec:fc:f1:06:56:7c:21:48:a0:50:20:56:08:6e:
                    fb:f3:a1:6e:70:33:e0:0f:f1:40:83:fe:3d:cb:04:
                    23:65:d9:5b:08:9e:c0:94:78:43:31:ae:a8:3c:c2:
                    50:ee:e9:06:2d:95:9d:b6:fa:bd:3d:81:cf:d1:18:
                    69:42:5e:84:3c:ad:dd:d3:8a:32:f5:38:d5:2d:87:
                    f0:7a:18:15:f7:87:b7:e3:8f:de:f3:97:ba:36:4e:
                    d2:37:71:41:9e:1d:dc:f3:ab:e9:db:ec:cb:4b:39:
                    53:03:f3:7a:e5:3e:b9:cc:68:37:6f:57:85:57:58:
                    0a:59:6f:e8:4a:b3:8c:bd:33:70:e1:34:68:f2:48:
                    50:dc:d7:42:c5:85:a9:c7:9c:97:2e:6a:88:39:d1:
                    57:2f:57:df:cb:3a:74:f3:ce:d5:02:66:f7:9e:b5:
                    e9:a9:e8:a2:6e:bb:ef:01:4b:33:30:68:74:fc:d1:
                    8a:aa:c9:12:81:49:17:8f:39:8d:2b:ce:45:91:30:
                    41:74:5a:06:be:4b:ff:3c:06:da:45:2c:5a:cf:0f:
                    9d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:76:0C:BA:BD:02:75:8B:A4:B2:60:3B:EB:8F:96:20:F7:B8:39:B7
            X509v3 Authority Key Identifier:
                keyid:DC:37:7B:5D:02:2B:F0:BE:4A:62:24:B4:7E:EA:6C:A0:B8:1B:F0:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cc558c-35e5-4dd6-867b-8b05b778e0d5/1/3Dd7XQIr8L5KYiS0fupsoLgb8Dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:5e:63:7d:6c:84:1f:18:98:8b:a9:1e:25:2e:91:9d:cc:b4:
         74:2d:50:7e:cc:82:2c:49:17:0c:dd:b3:21:d7:0e:c6:93:57:
         3d:ba:55:01:83:d9:82:3b:0d:b4:8c:9a:b2:ef:fe:24:87:27:
         64:7a:67:13:b9:7e:3d:d2:60:e6:de:25:e1:64:51:c1:ce:43:
         b6:61:cb:ae:be:3a:23:a4:72:2e:8d:61:ec:81:53:6a:80:b4:
         64:75:de:bf:84:2e:02:e4:11:78:27:7f:de:86:07:94:f3:c2:
         18:ce:23:c1:04:0c:39:93:6d:ff:c3:a1:3f:81:b1:c0:40:53:
         4f:e6:32:c9:52:ef:b1:71:65:01:f0:ce:fc:1e:d2:0e:f5:25:
         c0:6f:0c:32:f9:11:15:62:be:82:34:25:02:37:2f:b7:49:16:
         5f:04:5f:b4:25:2a:f8:38:3b:8f:c9:46:2e:b7:1e:4c:80:2c:
         94:e9:5a:7d:6d:70:98:c0:49:90:75:0d:65:b0:80:21:bf:3e:
         89:7c:4e:4e:31:22:1d:9d:e5:e4:5b:0a:7a:af:7a:c2:a5:5f:
         1a:52:f1:9d:5f:9e:7e:b3:08:07:ef:ec:34:c2:eb:f8:39:76:
         82:28:41:01:f6:cb:09:84:e6:fb:a1:eb:a9:31:91:10:b9:3e:
         83:b0:c2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----