Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
File:                     3cwuYUgshl3CU8D6lD49os6X2gU.mft (raw, json)
Hash identifier:          4bcNpIJZRgFX+vYqyCQwUD7GE2u1208XWcjvFYqtpWI=
Subject key identifier:   52:38:A1:F0:DC:AF:76:FF:BD:57:6C:34:A1:83:DA:8E:45:4F:2D:79
Authority key identifier: DD:CC:2E:61:48:2C:86:5D:C2:53:C0:FA:94:3E:3D:A2:CE:97:DA:05
Certificate issuer:       /CN=ddcc2e61482c865dc253c0fa943e3da2ce97da05
Certificate serial:       01962DF4088DF0F8110BCEDD4183FC31C1DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3cwuYUgshl3CU8D6lD49os6X2gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft
Manifest number:          046E
Signing time:             Sun 13 Apr 2025 07:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:29 +0000
Files and hashes:         1: 3cwuYUgshl3CU8D6lD49os6X2gU.crl (hash: YQvzrk1EHklyrl1G5FQID4ZEb58+EsIjgh7+Mc+PtGQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:08:8d:f0:f8:11:0b:ce:dd:41:83:fc:31:c1:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddcc2e61482c865dc253c0fa943e3da2ce97da05
        Validity
            Not Before: Apr 13 07:01:29 2025 GMT
            Not After : Apr 14 07:01:29 2025 GMT
        Subject: CN=5238a1f0dcaf76ffbd576c34a183da8e454f2d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:45:c5:66:b3:dc:fe:6d:3e:87:ab:ae:f4:e3:
                    54:9a:79:47:df:25:1e:f2:91:69:6b:35:e0:1b:41:
                    0f:9e:2f:31:45:3c:30:74:5d:44:68:fa:2d:a1:5c:
                    19:47:75:c6:83:60:4e:20:bc:fc:15:a7:be:52:ff:
                    74:c9:26:2f:b3:8d:6c:c2:78:13:79:b0:a4:03:cd:
                    e4:8b:20:65:96:bd:84:8c:3d:0f:53:5e:5b:50:9d:
                    ea:13:54:4b:a5:68:04:1f:6c:6f:b8:ac:9b:4d:d3:
                    e6:88:33:43:3d:69:66:ee:0d:34:04:74:1d:4a:77:
                    8f:4e:0c:4a:5b:05:44:30:47:96:8e:a2:dd:28:98:
                    0c:cb:58:16:4a:f0:4c:03:cf:9a:9c:66:b2:de:d7:
                    3c:46:3d:8f:c0:d3:64:17:07:4f:7c:ed:f7:bf:7e:
                    aa:86:d0:f4:c2:d8:0d:ec:a6:c6:6f:f1:91:a3:9d:
                    cb:c8:2c:69:15:0b:cf:8e:17:eb:ba:9d:da:d6:86:
                    fd:3b:cc:f9:b0:49:37:06:7d:13:9b:43:6c:d7:c9:
                    85:54:da:01:d3:e4:fd:50:f3:f7:fe:a7:77:b5:4b:
                    bc:1b:eb:96:54:7e:37:c7:7b:52:eb:b0:e3:1b:20:
                    41:68:63:db:74:17:33:3a:e8:fd:ca:56:2b:d3:69:
                    84:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:38:A1:F0:DC:AF:76:FF:BD:57:6C:34:A1:83:DA:8E:45:4F:2D:79
            X509v3 Authority Key Identifier:
                keyid:DD:CC:2E:61:48:2C:86:5D:C2:53:C0:FA:94:3E:3D:A2:CE:97:DA:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3cwuYUgshl3CU8D6lD49os6X2gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bf7343-65a4-4714-8f90-358f59532258/1/3cwuYUgshl3CU8D6lD49os6X2gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:c1:47:20:fc:e4:1a:50:f6:ce:3e:a2:2c:b5:fd:5d:60:ba:
         20:47:c1:d3:7d:a6:7c:e3:e9:d3:07:14:b4:0e:e8:79:d6:66:
         85:31:8f:18:fd:79:73:47:f1:6b:27:78:c4:f5:8c:8d:93:c8:
         2a:44:34:37:85:da:36:0d:a9:a6:c2:98:a7:d6:ed:6a:90:57:
         5c:2f:a9:c7:f4:b9:f5:f0:b2:8f:6c:ed:8f:86:b4:6e:b8:11:
         92:41:86:31:a2:eb:b5:17:41:e7:73:e1:6d:9f:ed:14:85:f1:
         ec:f7:ac:8a:3a:80:e3:9d:6f:4d:44:9b:2d:d1:7f:83:1a:5e:
         41:80:71:f5:42:0d:c1:5f:79:f9:7b:2d:ff:f1:b8:26:6c:f9:
         fc:3b:94:11:7e:26:bf:c2:be:01:56:5f:2a:24:54:37:74:fe:
         9e:ab:a1:e7:a6:96:23:e6:41:a1:1b:68:3c:8a:10:c7:52:8a:
         69:e0:bd:aa:61:d4:a6:13:08:7b:77:cd:50:7d:c3:00:d4:92:
         9c:3d:ee:f1:ce:65:38:09:ca:28:4d:2e:76:0a:86:f7:f2:5c:
         61:44:06:ba:83:f6:36:24:bb:08:97:e5:d8:3a:92:8c:89:ba:
         e2:70:18:b7:38:b6:05:3e:be:09:ac:9f:f0:67:1f:68:af:66:
         b8:23:11:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----