Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/3ef846-f84d-455f-8ee8-f9613da09eeb/1/I3Q_4xfDJL95Q-pzp9S3hs_cHp8.mft
File:                     I3Q_4xfDJL95Q-pzp9S3hs_cHp8.mft (raw, json)
Hash identifier:          iXjrUvRVAVKEPCDMn3ddL21OssBEPJikM3ZbcgRIrDQ=
Subject key identifier:   D0:5D:0E:F2:9F:20:3D:D2:E1:B1:81:EB:99:84:68:F6:79:3D:C6:64
Authority key identifier: 23:74:3F:E3:17:C3:24:BF:79:43:EA:73:A7:D4:B7:86:CF:DC:1E:9F
Certificate issuer:       /CN=23743fe317c324bf7943ea73a7d4b786cfdc1e9f
Certificate serial:       01962E9904CFBE3908F099DCF952943C1C6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I3Q_4xfDJL95Q-pzp9S3hs_cHp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef846-f84d-455f-8ee8-f9613da09eeb/1/I3Q_4xfDJL95Q-pzp9S3hs_cHp8.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:42 +0000
Files and hashes:         1: I3Q_4xfDJL95Q-pzp9S3hs_cHp8.crl (hash: O8GJCbCoF29/uh0kcERBq2w+hfD9GRgkI1Bs6nNq74s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:04:cf:be:39:08:f0:99:dc:f9:52:94:3c:1c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23743fe317c324bf7943ea73a7d4b786cfdc1e9f
        Validity
            Not Before: Apr 13 10:01:42 2025 GMT
            Not After : Apr 14 10:01:42 2025 GMT
        Subject: CN=d05d0ef29f203dd2e1b181eb998468f6793dc664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8d:eb:3c:64:c8:8e:bf:d1:3c:2a:ea:d0:d3:
                    08:b7:c6:e1:53:1b:fd:3d:a2:ed:69:f0:30:e4:53:
                    ff:65:cf:6c:1b:6e:fd:6a:f2:ee:74:cb:ef:4d:44:
                    6f:01:58:77:0e:35:2e:24:03:b8:b7:f2:2e:59:f2:
                    e9:ba:62:2f:97:51:f5:ba:d0:55:e8:70:18:e7:d6:
                    8e:43:76:dd:2f:59:f7:e7:64:94:08:76:fc:6b:6f:
                    21:1d:03:6b:a3:65:2e:3f:92:88:bf:7e:dc:1e:f1:
                    d9:a4:dd:bd:3e:53:96:17:08:c8:4a:1b:6a:66:7e:
                    8a:4b:95:d1:0e:5f:c6:7c:2e:3f:0b:3d:40:af:55:
                    72:5a:df:60:d4:c2:5f:d6:a1:67:c4:7f:84:ef:1b:
                    b6:15:f8:0b:a1:01:9a:29:b8:0c:02:e3:15:a9:f6:
                    07:96:03:e3:57:74:8b:5c:70:dd:d1:36:bc:d3:40:
                    e2:64:bd:13:f7:d6:f9:fc:32:bb:3c:e8:05:7c:7d:
                    f9:22:bc:03:11:4c:15:d2:ed:fd:db:7c:1f:9f:59:
                    72:4b:92:5d:ec:4c:b8:1d:78:ba:9c:79:ef:b6:14:
                    00:c9:6d:75:0e:91:29:a3:dd:80:be:9b:73:73:6c:
                    d7:d6:45:c7:64:01:44:75:e5:9e:1f:eb:2f:29:38:
                    b0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5D:0E:F2:9F:20:3D:D2:E1:B1:81:EB:99:84:68:F6:79:3D:C6:64
            X509v3 Authority Key Identifier:
                keyid:23:74:3F:E3:17:C3:24:BF:79:43:EA:73:A7:D4:B7:86:CF:DC:1E:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3Q_4xfDJL95Q-pzp9S3hs_cHp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef846-f84d-455f-8ee8-f9613da09eeb/1/I3Q_4xfDJL95Q-pzp9S3hs_cHp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3ef846-f84d-455f-8ee8-f9613da09eeb/1/I3Q_4xfDJL95Q-pzp9S3hs_cHp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:8a:7d:ad:f1:09:87:56:4c:4c:12:b3:d0:40:c8:3f:5f:e1:
         a3:3a:1a:ac:f6:4f:35:93:36:8a:80:f8:e2:c8:da:88:0e:56:
         b2:28:42:1e:0f:09:36:55:cb:a2:62:43:65:8f:04:42:fe:07:
         19:a0:3d:4f:00:e2:41:c3:48:e8:b0:af:04:3d:82:2c:27:0f:
         af:72:e7:43:12:c0:8e:63:43:7e:13:05:7a:a8:f2:80:67:07:
         26:57:bc:b7:43:f8:3e:d1:7f:96:3d:96:47:b5:1e:0d:11:6e:
         f2:1f:85:53:cc:54:38:3b:d4:2f:b5:52:28:f1:f4:95:76:dc:
         15:35:eb:50:6d:49:c9:54:dc:fc:b0:36:e7:aa:03:a0:fd:dd:
         a4:6a:f9:c6:20:35:29:aa:7f:1a:19:2c:bc:a5:70:c9:ca:22:
         ac:ea:fc:c7:e7:08:c3:3e:b6:93:de:4e:00:bf:e8:c4:9a:db:
         7e:b0:3a:03:f5:c3:df:b6:2c:47:55:62:5b:58:e5:54:93:12:
         d3:52:84:d8:c5:06:78:f6:e5:56:a9:9a:1f:93:6f:17:13:a7:
         4a:23:ec:da:2c:df:bd:0c:9c:75:ce:35:6b:b5:26:67:2c:1d:
         69:e1:26:6d:ab:38:71:d5:43:a9:55:0f:b4:68:ee:40:3a:d0:
         bc:f2:6b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----