Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
File:                     3EFBHpPiXV7GUJlWmxtcX63Brj0.mft (raw, json)
Hash identifier:          zMyso9rN/MuPldF8wBaAjDBmE5SXIJJmvJ8TerC9x9o=
Subject key identifier:   89:AF:EF:0C:FB:C0:D2:00:25:48:F3:4A:B8:13:CA:8A:66:A2:2F:6E
Authority key identifier: DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
Certificate issuer:       /CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Certificate serial:       01962F3D416A21F4BFBB68004A21AF9D78B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft
Manifest number:          10B4
Signing time:             Sun 13 Apr 2025 13:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:05 +0000
Files and hashes:         1: 3EFBHpPiXV7GUJlWmxtcX63Brj0.crl (hash: zZE6OjDC7M0ojT6V1HGFCZtskiNonyjYy7J/13+0IyI=)
                          2: I5wQnrgvMCaYn9C8yDvoLQWI0Fs.roa (hash: LLp7jSaPRxKkmfQPCgmC3oWPlWcodXukIf+OL2Y6Xy4=)
                          3: h62oWk5e6sS8zDCwC47t23u4hGk.roa (hash: KIOG5EX7T8Dsm3c4MU4hyZU5pek+PylPfC7rdsiyJoY=)
                          4: jGoTTL_48yWV-ohs_hgmOjEwT4E.roa (hash: Q0KSsruo9YLV5d/ARziN3CSGqP5OR6gQhOox+XP9FnI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:41:6a:21:f4:bf:bb:68:00:4a:21:af:9d:78:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
        Validity
            Not Before: Apr 13 13:01:05 2025 GMT
            Not After : Apr 14 13:01:05 2025 GMT
        Subject: CN=89afef0cfbc0d2002548f34ab813ca8a66a22f6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:da:86:fc:ba:76:9c:03:43:f7:2c:77:3b:39:
                    7b:f7:73:a1:00:c3:d3:63:dc:03:b3:0e:fb:4b:b8:
                    b6:85:ce:27:ee:d2:51:b6:59:1a:66:fa:e2:09:40:
                    5f:8d:ad:35:2c:14:d4:fb:29:d5:cb:55:7d:f5:30:
                    f4:81:14:a3:ba:35:27:76:db:01:32:9a:b9:c5:0c:
                    8a:42:6d:a6:e8:1a:45:f8:0d:4c:13:a0:d3:27:6f:
                    bc:7b:d0:0a:80:ad:ff:b0:6d:39:a8:5f:1e:8e:7e:
                    66:c5:9d:7e:42:cc:b8:ae:b3:3b:d8:43:b6:e7:61:
                    45:46:89:2f:3f:4f:8f:1e:bd:94:fd:2a:f8:14:ce:
                    15:84:fd:e3:5b:cd:77:e0:e8:58:f6:ae:44:f0:37:
                    1d:67:95:c5:18:40:22:e5:8c:f3:3b:9f:bb:30:d4:
                    48:7b:40:9c:50:ae:1f:81:47:45:9f:5a:60:48:2b:
                    3e:36:22:7d:f8:83:37:e9:bf:bd:a5:8b:1c:a3:3a:
                    02:b5:ce:63:e9:61:70:c5:15:60:25:c1:94:91:3b:
                    5a:47:2c:6f:f6:89:ff:86:47:d7:c0:b3:1c:00:f0:
                    42:d5:a7:bc:a7:86:64:a9:52:33:c8:96:69:17:0a:
                    77:9c:b2:80:3c:55:2b:ee:42:5c:e4:76:b2:75:f1:
                    40:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:AF:EF:0C:FB:C0:D2:00:25:48:F3:4A:B8:13:CA:8A:66:A2:2F:6E
            X509v3 Authority Key Identifier:
                keyid:DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:9d:cd:10:fc:15:ce:0f:70:0e:01:b5:5e:02:6e:1e:17:76:
         0b:f1:00:1c:35:05:6c:25:e9:a6:19:bd:cf:e2:27:da:67:ca:
         95:e9:43:10:c3:42:e5:33:a8:35:f5:d8:b6:17:99:35:be:b5:
         93:01:b7:92:f7:81:ff:41:66:15:66:1c:1b:ba:86:95:82:23:
         fc:bb:71:3f:2f:06:57:7c:71:bd:cc:fe:f1:28:df:5d:0a:b7:
         b9:42:5d:ac:78:a7:f1:6c:22:c6:75:f0:5f:30:f7:c5:1c:29:
         c8:dc:13:3a:50:ba:88:37:aa:a8:fa:13:7e:8f:74:d0:0f:ad:
         24:26:f1:04:b3:13:15:bc:fb:51:22:58:c0:d3:db:0b:3f:08:
         8e:3f:d2:8f:c4:1e:d5:36:34:6a:24:10:85:dd:e5:4f:44:d8:
         3a:b1:12:38:77:bb:8d:44:4e:da:5c:09:3a:f3:50:9a:99:d0:
         4f:75:ce:b6:0a:8f:15:eb:49:cc:e0:1b:c7:95:5d:47:50:c9:
         14:4d:58:91:9a:bd:5d:ba:74:60:7a:87:70:26:86:06:ef:b8:
         29:df:19:cd:d0:0a:dc:8e:ba:b3:2f:79:2b:2c:47:1a:f7:68:
         57:71:d2:f1:14:75:e3:9e:07:89:95:d6:dc:17:e9:e4:71:ec:
         c9:a9:04:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----