Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
File:                     3SBri9IhV0yWWSRDGVuQBXacck0.mft (raw, json)
Hash identifier:          4ZvpN46j2A/WmyDqbCSV5NewC+E4dFI84HonsapE93E=
Subject key identifier:   3C:8A:7E:A5:7A:AF:68:04:5A:39:60:84:DD:5B:9B:49:10:64:16:29
Authority key identifier: DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D
Certificate issuer:       /CN=dd206b8bd221574c96592443195b9005769c724d
Certificate serial:       01962F3D39540D308E9DF84A5FEC26B4FF9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 13:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:03 +0000
Files and hashes:         1: 3SBri9IhV0yWWSRDGVuQBXacck0.crl (hash: 89PAK5DWktm+lUTPpfiywsfrIgGs/9r871fxDyCgX1E=)
                          2: 5cvTQhZb21i8dsjZHSMpM2dxt9k.roa (hash: Jg1xw/OZvnd1OLClxYEzrvwZ5HBLqquVy880Rp6Vr+E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:39:54:0d:30:8e:9d:f8:4a:5f:ec:26:b4:ff:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd206b8bd221574c96592443195b9005769c724d
        Validity
            Not Before: Apr 13 13:01:03 2025 GMT
            Not After : Apr 14 13:01:03 2025 GMT
        Subject: CN=3c8a7ea57aaf68045a396084dd5b9b4910641629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:eb:86:32:a7:18:5f:7b:e0:50:64:90:27:b6:
                    fd:44:c7:56:27:fd:e4:8c:8d:f1:19:52:95:0d:e3:
                    2f:4b:08:a7:dc:0e:bd:b7:b5:4c:0a:82:73:c0:6d:
                    2f:4c:0a:c1:bd:de:05:c5:a7:09:2d:7f:f6:a5:78:
                    58:a2:c8:e1:2a:37:6c:aa:2c:f8:79:f3:d2:c6:80:
                    a3:d3:34:3f:33:f2:2a:ed:b2:31:45:e6:89:a7:e0:
                    fa:dc:ca:5f:5f:9e:eb:85:97:78:29:b8:de:13:23:
                    18:6b:9e:9c:93:4e:7a:39:66:f5:c2:6f:99:1e:ee:
                    be:37:08:1f:b2:7a:3c:8f:96:3d:75:46:7e:87:21:
                    48:2b:36:11:72:39:85:26:39:6e:0f:5d:75:09:ef:
                    5f:29:38:70:a5:99:02:85:2c:bc:02:78:93:7e:2e:
                    a0:93:f2:ea:43:50:62:be:0a:5c:0e:dc:2d:68:35:
                    2c:6d:b9:7b:13:bf:c8:49:35:ca:09:68:75:df:d4:
                    0b:fe:b6:f8:07:c8:7b:dd:65:b3:d8:9e:91:39:cd:
                    3c:42:3d:76:af:99:c6:c7:87:55:46:7a:b6:84:e0:
                    aa:ec:93:1f:7f:1b:df:02:3d:b9:6b:95:a3:cf:6d:
                    cd:d8:e5:b1:49:ce:c0:56:a6:13:b0:1d:50:9d:23:
                    03:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:8A:7E:A5:7A:AF:68:04:5A:39:60:84:DD:5B:9B:49:10:64:16:29
            X509v3 Authority Key Identifier:
                keyid:DD:20:6B:8B:D2:21:57:4C:96:59:24:43:19:5B:90:05:76:9C:72:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SBri9IhV0yWWSRDGVuQBXacck0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ebc78b-578c-4a4f-9a4e-e29157679604/1/3SBri9IhV0yWWSRDGVuQBXacck0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:f6:39:97:ba:eb:21:45:3d:00:02:38:42:e4:ba:1e:03:05:
         80:39:b4:d0:0e:df:2f:4a:0b:c2:39:8b:e0:df:ee:9b:bd:71:
         bc:93:dd:95:1c:db:d2:0e:89:53:c1:de:08:0b:35:d0:9f:27:
         bb:c4:e1:84:6b:99:63:03:8a:e8:e5:97:60:54:b6:14:c0:56:
         75:85:96:fc:03:33:6c:33:a9:bc:93:05:58:74:8b:12:fc:39:
         a3:b6:96:b3:3e:00:08:be:df:b6:47:24:4e:13:5e:b8:73:90:
         0f:c0:02:23:e8:2e:5e:59:3e:31:95:13:71:4f:7b:41:4f:f3:
         c4:06:e3:bf:59:00:6a:d4:a6:6c:15:a2:e2:6f:6a:0c:94:bf:
         1d:36:58:a8:c9:ad:86:8e:b6:bf:5d:ee:d6:0c:93:38:1f:89:
         b6:23:9e:37:a8:e3:0f:90:ee:1a:83:29:ce:03:52:01:7f:1d:
         36:6e:d8:a7:0c:04:fc:d1:67:8c:2b:4f:76:f2:8b:d7:80:87:
         97:2c:fe:30:e6:58:f5:be:6c:ae:d1:ed:cb:09:ff:7b:3c:65:
         2d:e1:bd:18:11:7e:6a:f9:00:f0:44:97:a3:6c:c9:97:66:be:
         c2:f2:5d:ec:05:84:46:17:06:f2:4b:88:d4:6a:c2:ac:f3:82:
         cc:a3:72:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----