Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d6a648-2286-429f-98fa-884e81a1786a/1/3k_14NZGWzwsc6LG4Q5WovpzFic.mft
File:                     3k_14NZGWzwsc6LG4Q5WovpzFic.mft (raw, json)
Hash identifier:          +6eUrV//noz2a/j93W9M+tokKN7euVPPU2V0r+qkSCI=
Subject key identifier:   CB:0E:18:3D:7B:3C:5C:91:06:C9:FB:DF:67:D1:3F:8A:70:8E:B1:50
Authority key identifier: DE:4F:F5:E0:D6:46:5B:3C:2C:73:A2:C6:E1:0E:56:A2:FA:73:16:27
Certificate issuer:       /CN=de4ff5e0d6465b3c2c73a2c6e10e56a2fa731627
Certificate serial:       01962DF4152AB884C085537D2075362AD1F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3k_14NZGWzwsc6LG4Q5WovpzFic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/d6a648-2286-429f-98fa-884e81a1786a/1/3k_14NZGWzwsc6LG4Q5WovpzFic.mft
Manifest number:          0C82
Signing time:             Sun 13 Apr 2025 07:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:32 +0000
Files and hashes:         1: 3k_14NZGWzwsc6LG4Q5WovpzFic.crl (hash: tWnnsCPXw65gvA4h3BgJBKfdsDxy2k14qIDwaJ7fecw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:15:2a:b8:84:c0:85:53:7d:20:75:36:2a:d1:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de4ff5e0d6465b3c2c73a2c6e10e56a2fa731627
        Validity
            Not Before: Apr 13 07:01:32 2025 GMT
            Not After : Apr 14 07:01:32 2025 GMT
        Subject: CN=cb0e183d7b3c5c9106c9fbdf67d13f8a708eb150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c3:8b:67:58:cc:e4:b6:3e:55:05:2d:49:14:
                    7a:03:7c:67:49:fb:cc:24:f3:5d:78:31:0f:0f:18:
                    93:c1:04:b7:f2:9d:1f:5c:12:f9:69:57:c6:65:a1:
                    49:06:97:d8:e3:76:d3:f8:70:08:b2:3b:bc:ad:f9:
                    7e:22:66:6f:90:e3:84:8c:56:76:07:ac:ec:ee:fd:
                    ac:8c:02:f9:f8:f7:96:8e:8f:b2:63:13:83:95:82:
                    50:f9:b0:0e:80:9e:ca:bf:dd:2a:0a:74:30:f3:b8:
                    cc:8e:e9:76:51:9c:4f:c9:17:bb:54:80:f3:e5:47:
                    e2:6b:f6:20:fd:94:bf:0a:eb:af:15:ef:43:c7:4c:
                    1e:c8:9f:6c:bd:e5:71:ed:f7:dd:23:30:99:a5:db:
                    ce:e5:b0:72:74:a1:5b:a7:ed:1e:b3:06:c3:cb:1e:
                    1c:c4:bb:df:be:66:14:29:80:ea:32:a2:29:ce:d2:
                    56:00:1f:f9:01:01:f2:39:0c:b6:ba:d0:d6:69:fe:
                    4b:01:be:34:d3:1f:19:b5:2c:1d:3a:e5:22:e4:4f:
                    e8:43:5e:e5:d7:69:a5:cf:89:76:6b:41:69:99:13:
                    00:c1:6c:1f:e9:b0:d4:d8:50:ed:24:28:cb:bc:c6:
                    e1:9d:bf:b7:c3:03:10:f5:4b:ec:4c:47:97:53:a4:
                    71:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:0E:18:3D:7B:3C:5C:91:06:C9:FB:DF:67:D1:3F:8A:70:8E:B1:50
            X509v3 Authority Key Identifier:
                keyid:DE:4F:F5:E0:D6:46:5B:3C:2C:73:A2:C6:E1:0E:56:A2:FA:73:16:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3k_14NZGWzwsc6LG4Q5WovpzFic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d6a648-2286-429f-98fa-884e81a1786a/1/3k_14NZGWzwsc6LG4Q5WovpzFic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d6a648-2286-429f-98fa-884e81a1786a/1/3k_14NZGWzwsc6LG4Q5WovpzFic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:eb:95:c4:f4:e9:15:f9:24:c5:60:fe:23:ba:1b:06:91:d3:
         a5:1f:85:16:ba:9e:5b:7f:d9:ad:91:7b:7a:ef:8e:c7:0d:57:
         63:4c:c0:58:96:d7:43:0a:39:58:31:a5:80:66:cc:2e:84:a9:
         7c:ad:ef:5e:d7:b8:81:84:7a:54:10:36:db:68:29:9c:77:b0:
         c2:a5:5e:35:c1:f2:ca:7a:fb:78:03:7f:75:e3:7c:83:1b:e9:
         a8:0c:75:58:01:ca:77:61:7e:f5:51:33:4b:a0:d8:03:3f:43:
         ad:b5:6f:21:7c:7c:63:67:ee:4d:e8:9b:cf:60:bd:3b:5f:10:
         53:85:58:ab:3e:51:56:7a:0e:13:6c:df:86:6f:15:52:62:db:
         2c:c0:4b:55:e8:dd:c9:f6:a5:4f:20:c3:27:d7:7d:e7:72:a4:
         bb:30:aa:e4:1f:74:28:4d:cb:11:95:3e:18:be:25:74:4f:bf:
         47:08:d8:cb:db:64:0b:51:71:df:65:e5:1c:2a:55:3f:73:22:
         90:fb:88:42:49:a7:a0:71:03:0f:cc:a5:f4:fb:26:cf:f0:95:
         02:12:cc:be:43:91:a6:0c:aa:08:72:9a:c8:fd:21:76:62:a3:
         53:a2:c1:0f:27:fc:7a:c4:19:13:73:ab:1c:b7:af:c2:8b:5a:
         1f:d7:23:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----