Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft
File:                     3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft (raw, json)
Hash identifier:          zaQLPkmjYd25wBNSx+9emCemPtKEmE/6OlOCHNpd7L0=
Subject key identifier:   8D:AC:75:3D:25:9A:A0:B7:D2:28:9F:B1:9D:4B:9F:24:3F:F1:77:81
Authority key identifier: DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D
Certificate issuer:       /CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
Certificate serial:       01962E989A09AD7807B43DE7B776C68304B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:14 +0000
Files and hashes:         1: 3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl (hash: 8QntICe3ugsdDBh14dGWsm5/LDeclLBHO+/kKzppF4E=)
                          2: G7UCO8Vqg1runszmtQBQmkn8DqY.roa (hash: 5UbSXfgLxbMjgxcmGz7miCGa9V5+dL7nrdVkUhcTIyw=)
                          3: Naw5SESv6F-7xw8AlzszEkwan9U.roa (hash: Mbo3Jub5v2CNI5HfXQyreqoCmBqpJFtpKsAqTMduHgY=)
                          4: ZIeftz8g6-61T0mBa0ClKG58PyI.roa (hash: bAh6A9SIv0Nw80HjsuLV5ZZhtF7rRyou/1nJ2bbqVfk=)
                          5: d_85lmU1RpGhphRgrIhRhEl6fKg.roa (hash: VpMz8KT7GjSVAfis0Pkct4zgkIxNQjh2YesKqba5huE=)
                          6: i0b6D-rT2FVTM19LqLSh15LYCRI.roa (hash: eAyg6w88G2QnqmNNJFWUnwDhKYl0dByuSLnfnUOvCnA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:9a:09:ad:78:07:b4:3d:e7:b7:76:c6:83:04:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de6ed0579c3fd253597ec82f0939111ba9d8c88d
        Validity
            Not Before: Apr 13 10:01:14 2025 GMT
            Not After : Apr 14 10:01:14 2025 GMT
        Subject: CN=8dac753d259aa0b7d2289fb19d4b9f243ff17781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:eb:45:d1:0f:5b:29:60:5d:29:44:1f:86:d5:
                    f7:9b:c1:38:6b:8e:a9:43:df:70:a0:78:37:35:98:
                    9d:74:ec:6f:7b:db:46:c4:2b:0c:17:08:21:9e:fe:
                    1a:e8:da:16:b4:a9:89:93:34:d5:02:a3:14:e0:16:
                    1a:03:c2:0c:16:a0:8d:39:b5:ad:d7:72:aa:c2:0a:
                    36:a3:97:82:d3:0a:79:7e:ea:58:86:45:71:67:69:
                    dd:57:ab:73:72:10:26:18:42:a6:db:56:cb:71:a8:
                    53:5a:a3:4e:2a:3a:d1:c6:28:ac:b7:b3:97:30:1f:
                    cf:f1:3a:03:bd:00:96:4e:72:9a:89:5a:8f:b3:16:
                    a0:cb:7a:85:7c:21:51:6b:d5:c8:d9:ad:34:2a:c0:
                    ee:39:25:48:76:7c:97:02:7f:03:8f:12:d1:9b:6f:
                    88:5c:6b:86:15:aa:60:7e:a4:f3:6c:3d:8d:3e:33:
                    fc:7a:06:1a:b0:98:53:89:ff:b8:c7:b5:86:b3:96:
                    c8:15:ab:e3:5e:40:84:20:a5:81:6a:6c:9c:a6:aa:
                    65:5c:1a:16:89:e0:54:9f:df:d8:e7:52:38:a7:d3:
                    aa:48:ff:00:12:e3:ff:1a:02:a4:be:7e:0f:ad:51:
                    bb:5f:d2:95:72:01:14:f2:71:64:44:6d:17:be:05:
                    98:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AC:75:3D:25:9A:A0:B7:D2:28:9F:B1:9D:4B:9F:24:3F:F1:77:81
            X509v3 Authority Key Identifier:
                keyid:DE:6E:D0:57:9C:3F:D2:53:59:7E:C8:2F:09:39:11:1B:A9:D8:C8:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3m7QV5w_0lNZfsgvCTkRG6nYyI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/3m7QV5w_0lNZfsgvCTkRG6nYyI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:67:32:9c:d2:7d:60:e5:05:20:8e:57:62:29:80:e0:21:60:
         5d:83:92:5d:f1:c2:1b:a3:36:28:f7:bf:05:43:4e:ba:de:77:
         6d:62:a9:16:81:6f:4a:eb:4f:2b:eb:15:6d:81:fb:80:0f:3b:
         ec:13:46:96:9b:e1:e2:ea:fb:0b:c8:c8:ef:30:d2:9d:73:53:
         5d:ab:b0:6c:dd:2c:01:b5:e2:68:60:0b:65:c6:35:6f:54:00:
         a6:c2:60:b9:00:46:39:cc:32:a5:4a:4f:a6:74:cf:c3:3e:8d:
         bc:01:66:20:87:8b:20:3b:f1:7e:4f:d7:9e:07:63:13:0e:1d:
         79:58:00:27:0a:37:f4:15:92:c4:62:ca:cf:d1:5f:6d:95:30:
         7b:4f:79:88:86:97:01:91:15:40:af:a4:3c:01:d4:b1:5d:c2:
         ed:75:45:46:f3:d2:c1:d2:0d:6b:6d:d4:bd:fa:7f:17:9a:44:
         04:58:5c:c6:8a:7f:c0:b9:cc:77:b1:47:29:bd:b3:b4:43:5e:
         0f:5f:e1:6f:24:58:64:79:44:14:f4:bd:84:01:e8:22:14:da:
         9a:ec:0b:2d:83:2a:d6:46:0a:7b:93:c6:4a:3d:55:d5:26:d5:
         dd:56:2a:f2:e7:83:81:26:45:6f:a3:8a:cf:cf:a2:57:cb:1a:
         fb:da:56:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----