Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
File:                     3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft (raw, json)
Hash identifier:          1tH1IpfX5yG67syzFW5cKZxFrHt1LLq6DMLK89Ch62g=
Subject key identifier:   4C:93:48:18:07:92:90:87:E3:0D:D1:6D:53:38:34:15:61:3A:34:F1
Authority key identifier: DD:19:B5:04:7A:CC:57:DF:DD:2F:87:04:57:64:95:6F:4B:60:30:66
Certificate issuer:       /CN=dd19b5047acc57dfdd2f87045764956f4b603066
Certificate serial:       01962E99775F08AC7682C3220F21DF753850
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft
Manifest number:          0C05
Signing time:             Sun 13 Apr 2025 10:02:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:11 +0000
Files and hashes:         1: 3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl (hash: FYBw9pNE90ZUjMi7Fi0HibCB12uNsBNfO+P3POueFZc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:77:5f:08:ac:76:82:c3:22:0f:21:df:75:38:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd19b5047acc57dfdd2f87045764956f4b603066
        Validity
            Not Before: Apr 13 10:02:11 2025 GMT
            Not After : Apr 14 10:02:11 2025 GMT
        Subject: CN=4c93481807929087e30dd16d53383415613a34f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6c:db:03:5e:78:8a:c4:32:1a:b8:85:c8:60:
                    4d:0f:52:ad:62:05:89:73:14:d5:20:f8:f6:63:ef:
                    29:31:bd:b7:2c:a5:e7:81:5c:4d:f0:43:22:3a:01:
                    db:7b:f9:a5:0d:e9:af:ca:b3:f3:58:0e:2e:e3:69:
                    44:e7:5e:7d:48:e5:08:f9:6f:24:32:0e:ae:18:bb:
                    19:11:bb:a8:20:a3:cd:93:a4:49:03:4c:d9:ac:41:
                    75:7b:a7:57:2e:a5:59:ed:b2:47:3e:85:fb:1c:ff:
                    1d:48:6f:12:a6:e3:f9:eb:55:75:97:0d:30:d9:cf:
                    4b:93:fc:75:53:2c:93:0c:31:68:53:b0:64:37:3f:
                    f7:90:12:be:90:24:e3:0c:c2:39:01:f8:c7:b2:41:
                    01:37:af:c1:8a:9b:50:67:e5:a2:28:b1:54:39:e0:
                    df:49:49:82:76:50:63:d7:b1:ba:e6:a6:b2:99:a1:
                    59:c9:02:ae:92:ef:bb:23:a3:b1:fb:76:3e:d4:fc:
                    0e:5a:2e:66:1e:24:b2:b6:5c:50:cc:9a:7f:51:bb:
                    88:bb:85:b4:a5:fe:c8:33:07:e6:e5:a0:bd:d6:39:
                    58:bc:37:d0:27:12:bb:48:cc:c1:a1:62:74:19:56:
                    ea:e3:db:f0:0f:19:f2:c4:0b:6f:6e:5c:a7:e5:14:
                    85:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:93:48:18:07:92:90:87:E3:0D:D1:6D:53:38:34:15:61:3A:34:F1
            X509v3 Authority Key Identifier:
                keyid:DD:19:B5:04:7A:CC:57:DF:DD:2F:87:04:57:64:95:6F:4B:60:30:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ef40b8-8313-4618-9d35-eddef87e241b/1/3Rm1BHrMV9_dL4cEV2SVb0tgMGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:76:d1:31:b6:e6:47:59:e4:40:66:3f:f3:a6:a5:b7:a5:4f:
         25:39:b5:41:61:7a:da:6e:5d:5f:d3:9b:b0:31:df:15:d5:79:
         46:7b:c2:14:37:94:50:e9:1e:89:60:d2:af:19:d4:44:b9:53:
         c3:71:2b:26:ea:aa:70:00:6e:c6:5a:1a:e1:c0:ab:6f:df:38:
         e1:d3:a6:f6:45:12:d6:e0:61:a3:72:6e:8c:74:e1:6e:cf:b0:
         31:d9:4a:9f:42:3b:05:e6:f9:05:a0:88:94:0a:fe:7d:6e:28:
         c8:ca:04:0b:de:8d:dc:71:39:f9:b0:06:d8:3a:33:52:d3:23:
         6a:3f:d4:78:b0:28:e9:2b:a0:96:a8:26:7e:aa:de:2c:a6:6a:
         96:72:35:69:b9:aa:24:53:d4:11:f3:ad:dd:80:f0:57:d8:d7:
         34:43:9d:42:1d:be:9c:30:b9:43:0f:b3:42:91:80:13:ff:c4:
         07:53:02:b0:26:90:10:06:b5:88:8f:b7:4e:e8:b2:71:67:f5:
         1e:64:18:4f:94:ed:55:99:67:27:e5:c1:78:de:63:93:85:51:
         f1:a8:b8:03:05:c3:f9:0c:ac:a7:96:35:b0:1e:fa:02:6e:6a:
         36:0f:e6:9c:a3:4c:ac:43:b0:88:5b:f7:8f:ce:c5:7e:c5:b5:
         36:4b:03:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----