Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft
File:                     R3avt0-tW68KYYC0lRDYuEl9-NM.mft (raw, json)
Hash identifier:          ahFEPVFbCi5R1ZZinZlGMmsescP2WqIjEsF5EnIdd3s=
Subject key identifier:   29:D0:A5:41:1E:2E:45:68:5A:77:76:E7:AC:55:B7:57:BE:75:D6:09
Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3
Certificate issuer:       /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
Certificate serial:       01962F3D6CD15121F9B053A7A1F871B91007
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:16 +0000
Files and hashes:         1: 1h855CNEVOjEfeY3xJdnjH3udfA.roa (hash: LnReL4xvvQZDIPnpuzGkg0WHy3mNK+PRykuvMTviVRU=)
                          2: 9TPdAIfPUajUjs2DsbC3GN5w1mM.roa (hash: f998uOYMTFD5RySwHTrfZLXT9MQqC7DQiOZI706CLv0=)
                          3: BjNcWgFCcgba03gZ00Wn0vEqj3g.roa (hash: U/XRsHv7C+f9dXk91I1pC9Y4HNFCH0uKUdMuFoDViRQ=)
                          4: BrfY4YW_yXK06U0eOLt-LobfjzY.roa (hash: Hv6+aEBXmMC9XH4TQkng0p4jntb620WSOaHbhPCP9JQ=)
                          5: Cw1uuAeUBhAelOLTm4Dk1iRffEA.roa (hash: z7x5PkssyE32f3g9waLhPt3Hl1C8H5f4Iw04pNNOOB8=)
                          6: EcRwtilhZy6tNswg6gPS5OkvUlQ.roa (hash: qBDPjWgpNJxholOTWxrJUnO/kRkTjC8UXjWmpsN+tAc=)
                          7: R3avt0-tW68KYYC0lRDYuEl9-NM.crl (hash: Wv/WcitmUHevhErJQDEWobOQbU8YujNJvuj1jKvD6BE=)
                          8: T8_EmiMUPF83zSf_CWDX1W5xQ1k.roa (hash: d6CAaY4KcSFvMEPDFQGYRUngwvkhFj6iBm1RzRLZ++4=)
                          9: WUYHmqFyP61kI6BD9sMT7KF9l-U.roa (hash: xFiWBHTwLfZ5M8eQEBathNKsbTc1PcIqXDpV9YTX3G8=)
                          10: g5kj0c5gIcfXvJMBxVW2-IvShUI.roa (hash: CKgIE1v8ZknTa0F780Va3Q+BXidD3R6HaKXYmqUb3wg=)
                          11: kKoWp4Lx502DAZ2dTiIEcojnfao.roa (hash: wbMVZciEXcbsx0EhcS9t8+gUwRDnIiXLOoH2KSH13m8=)
                          12: m0urSftBhVugiQE6mFeNiCtZVI8.roa (hash: xOqBMnBvPEbbfCmZX1QX9FuTGPEracGRpzNmhAwuxVM=)
                          13: p9BRYnl3EKm9TTth6amvuszGxmw.roa (hash: RclXNVeUwytI6eicBVcxuy79LLzQjb8L+50PtV/MwdU=)
                          14: rq0QSGPYNrEzw6-22i_TjD_5ytM.roa (hash: GZherMDntzrMQ22JN8aWo0GpEMJ9AqPJdM6Y8aGsT1I=)
                          15: tWTx91zKwnMqo4ymab78lMSrAv8.roa (hash: ueVp+aZdHi8wvh5xrtibgRIouCvFn7uQziD4gJ74yO0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6c:d1:51:21:f9:b0:53:a7:a1:f8:71:b9:10:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3
        Validity
            Not Before: Apr 13 13:01:16 2025 GMT
            Not After : Apr 14 13:01:16 2025 GMT
        Subject: CN=29d0a5411e2e45685a7776e7ac55b757be75d609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e4:f1:2f:fc:aa:6e:88:2c:8c:01:54:a3:18:
                    c2:30:7c:60:9c:eb:81:06:55:fb:29:ce:9c:d4:d9:
                    62:86:b5:0d:a1:73:09:4e:db:8b:5d:79:aa:15:52:
                    d3:f7:91:4b:38:f8:c3:8b:cd:d2:88:a1:6f:90:e1:
                    c5:8e:51:54:e5:c7:bc:46:66:5a:45:48:70:8e:6f:
                    cc:e2:7a:f7:30:80:3a:8c:8b:c2:43:b5:9a:48:6c:
                    cf:5d:7b:6e:37:c0:ac:e4:56:09:5b:53:b1:30:87:
                    7a:98:b0:55:94:8e:30:1a:25:97:ef:28:20:53:ab:
                    34:41:fa:e3:d7:07:bd:7d:57:22:74:c0:f6:65:19:
                    08:64:35:91:cf:40:83:bb:a6:11:21:f2:99:9e:0e:
                    67:b3:d5:25:73:a6:14:4d:5d:9c:48:59:86:d4:1d:
                    49:a0:c3:81:5b:ff:af:94:5d:ee:b5:53:40:e3:7f:
                    dd:34:d0:4e:88:89:84:f5:82:74:52:d9:95:ab:37:
                    69:f7:df:69:8e:bb:02:6b:03:f4:09:04:66:69:d9:
                    94:fa:d6:77:16:3c:40:89:72:33:86:20:a2:ed:c6:
                    26:20:93:88:b6:3d:07:82:da:86:65:1c:08:53:93:
                    8f:f3:69:d6:b2:77:a9:90:2b:25:88:86:32:d4:29:
                    0f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D0:A5:41:1E:2E:45:68:5A:77:76:E7:AC:55:B7:57:BE:75:D6:09
            X509v3 Authority Key Identifier:
                keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:a7:93:c6:50:f6:03:0b:f0:06:ea:3a:27:2d:8d:75:06:b7:
         73:23:ff:9a:c9:46:6f:ad:12:01:fb:3e:80:9a:d4:9c:bd:b6:
         aa:44:fb:29:71:7f:d6:59:8f:de:bd:6b:8f:04:a0:54:dd:ab:
         9d:40:4c:1e:0f:16:26:f3:06:23:9b:fe:a2:ea:b3:fe:3a:95:
         6f:74:cc:0c:01:dd:7e:b6:51:29:ed:7e:40:2a:df:02:a0:da:
         45:0e:24:2d:68:2a:9f:23:ae:40:1f:70:fc:66:3a:da:37:52:
         85:df:d0:f8:75:b8:ba:f0:1d:f0:85:cb:7e:50:19:4c:40:4c:
         80:78:6d:90:ec:9d:7b:7b:40:a6:7d:97:fa:cc:b0:b5:85:21:
         8f:47:50:bd:55:3a:0a:0c:bb:2c:5e:9b:a8:84:fb:0c:fd:31:
         93:13:cb:a2:5b:4a:fe:29:1a:62:0f:d4:87:e1:a6:05:4c:69:
         8e:fc:2b:ac:7a:c2:1d:92:c6:b5:73:08:3c:a3:fb:31:62:a0:
         a2:a1:95:b2:98:0d:58:66:94:81:bb:73:29:5b:36:4e:53:a8:
         4e:47:a7:55:0a:76:df:0e:d4:bb:ae:76:09:50:ea:cc:76:ac:
         f8:20:b2:ee:de:13:89:78:df:4d:43:b3:a1:6f:c2:8b:09:17:
         58:e0:47:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----