Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
File:                     3BAvYTHOWnRutZgd1MHWtOF7Az8.mft (raw, json)
Hash identifier:          0EOmHMiONbDtdQ6KM70L9nNAkR04yfEJou962Abh3Y8=
Subject key identifier:   71:AF:0B:F0:1A:4B:03:66:98:D8:9B:7B:1A:D5:56:FA:28:3A:67:2E
Authority key identifier: DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F
Certificate issuer:       /CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
Certificate serial:       01962E99103A9ACEEE44DF63BA1AE29F203C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:45 +0000
Files and hashes:         1: 3BAvYTHOWnRutZgd1MHWtOF7Az8.crl (hash: FQD/o0G75Qg0coF3p6smrqu3n14XLJ0agev+PR3fUoo=)
                          2: 4aMsThSQ8pto7QNh_kFB73sOXo8.roa (hash: HEBFusOcNgQfdZRF0U/he5dAzzkTri4ddTPSMK0+giU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:10:3a:9a:ce:ee:44:df:63:ba:1a:e2:9f:20:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f
        Validity
            Not Before: Apr 13 10:01:45 2025 GMT
            Not After : Apr 14 10:01:45 2025 GMT
        Subject: CN=71af0bf01a4b036698d89b7b1ad556fa283a672e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:88:e6:d4:d2:7f:d8:3f:d1:76:42:4a:59:e9:
                    72:c7:27:8c:24:f4:b1:6e:56:67:25:ab:cb:fc:15:
                    2c:55:34:38:39:ca:6d:97:5a:d9:e0:db:14:df:1d:
                    cc:bf:dc:fb:9c:82:7a:d7:c2:b7:72:f2:7e:78:1c:
                    b5:52:cc:76:89:e5:64:33:8d:e8:45:41:7f:66:51:
                    40:f1:73:b8:92:31:04:47:41:5c:06:4f:9a:62:43:
                    d0:2f:51:9f:fc:d4:72:f9:b2:f7:34:6f:e9:38:52:
                    51:87:ab:56:1b:e7:1c:7e:ef:cf:59:33:ac:2b:c5:
                    b6:71:f9:49:96:f2:0a:99:1c:f0:ab:f0:94:35:18:
                    d4:d5:a3:2c:c8:e8:4d:1c:1d:03:f4:3a:53:f1:fe:
                    f7:d9:a8:21:fe:f2:b6:26:ba:45:3e:9d:5f:16:f6:
                    ba:09:66:2a:42:2e:77:a2:d8:36:e7:1a:f0:63:d4:
                    60:a7:16:88:7b:6f:9e:ff:ee:97:fb:99:d8:4d:51:
                    91:3d:89:9c:9e:0f:ef:a9:60:55:96:00:5c:f3:6a:
                    74:d8:07:05:70:bf:c9:f2:19:34:f1:d6:ab:a3:63:
                    a1:c7:85:21:df:f4:33:e1:39:c8:16:91:54:25:88:
                    42:de:10:b7:46:5b:fa:9e:f6:7a:b7:f7:9e:76:e8:
                    06:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AF:0B:F0:1A:4B:03:66:98:D8:9B:7B:1A:D5:56:FA:28:3A:67:2E
            X509v3 Authority Key Identifier:
                keyid:DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:53:8b:84:5e:24:0d:27:3d:f6:d6:da:3b:86:ce:76:89:07:
         87:37:63:a1:b2:d8:72:d0:ea:b7:e2:50:ab:0d:2d:29:dd:9a:
         f9:fb:36:38:34:2b:8d:17:59:c1:91:63:7f:8b:0a:78:fb:17:
         70:7a:d7:50:17:8d:fb:b0:1f:84:36:93:88:91:80:af:9b:78:
         1b:41:55:61:18:71:db:15:9f:86:83:2f:80:69:1a:64:73:4b:
         35:66:6e:1c:32:7d:87:b5:00:e9:49:9c:c0:75:dc:3b:a6:23:
         c9:19:b2:af:a1:8a:73:60:1a:b9:51:5d:9d:ce:a3:4c:37:0a:
         71:5a:e6:fb:ec:f9:3a:66:c3:86:de:7f:e9:e9:e9:03:da:8a:
         76:e8:75:f6:4a:06:b9:36:37:56:7a:c4:9a:b0:b6:70:52:01:
         0b:fd:1a:8e:16:d2:db:1c:04:f2:c8:2e:7f:27:af:67:60:e9:
         7a:9e:97:b9:00:aa:54:21:08:68:9e:18:71:13:82:1e:03:1e:
         e4:a5:90:ef:26:7a:32:ac:ad:4f:5e:95:c7:20:ec:b7:62:aa:
         8e:1b:01:94:8c:5c:53:a3:b0:d6:7f:26:58:30:fd:44:96:5f:
         d2:5c:d2:fe:86:0f:17:a9:74:1c:b3:e5:f7:54:ad:61:44:81:
         be:40:ce:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----