Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
File:                     3kVs200UA0XD3K6_x2NNTnzcuRM.mft (raw, json)
Hash identifier:          imjgUyBzqSfzG6P4u8QDFtspUAV7ev3LdkOmE92zNGI=
Subject key identifier:   5E:CF:1C:68:C3:D5:0F:A6:14:9D:87:79:6B:42:4D:22:A3:CC:EB:05
Authority key identifier: DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13
Certificate issuer:       /CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
Certificate serial:       01962ECFB1F022DADD7902079D8E8592E515
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
Manifest number:          14F3
Signing time:             Sun 13 Apr 2025 11:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:25 +0000
Files and hashes:         1: 3kVs200UA0XD3K6_x2NNTnzcuRM.crl (hash: uanlB2qIX9L1hlOgNcrmD0HVCNRasTdtOo/QVlJ9OOM=)
                          2: JIEsiChTD9veiUWmlJ3B4QQpFuc.roa (hash: G8sz8HlJFis3zSSNKaXy4CKewTagYcW3tdUbj5SB5rw=)
                          3: RW1YVzgS-Uo6wRyI7wghmoflhxM.roa (hash: P4Jy/rnS/ee761fTnFOjrUGdxRIMtrfWOZk+7E9+pGE=)
                          4: erY5eOsE13MYDYGdz-7KiRAOTog.roa (hash: NmXI2cVM6emkr8oTXJbXMbKgJl7gRO9hnwaW3QZ2P/k=)
                          5: g4ZCPviGonmRGPJlO9nSng_S-lo.roa (hash: NBfLnaWFnRjJb4HXfFDgN4fD3VeUZZnkBAnPok8zBDM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b1:f0:22:da:dd:79:02:07:9d:8e:85:92:e5:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
        Validity
            Not Before: Apr 13 11:01:25 2025 GMT
            Not After : Apr 14 11:01:25 2025 GMT
        Subject: CN=5ecf1c68c3d50fa6149d87796b424d22a3cceb05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e8:ec:3f:2c:d3:a9:24:94:db:8e:c7:81:f4:
                    2e:d6:e7:bb:5d:c9:4c:ce:ca:e5:a2:87:25:1d:36:
                    3d:e6:9e:cb:81:57:49:14:9c:cf:5a:b7:9b:50:43:
                    d9:dc:64:9f:32:e5:cb:25:ba:3d:df:8d:dd:62:56:
                    08:32:ea:5d:20:9b:c2:51:9b:64:05:e2:2f:15:a2:
                    5d:dd:53:38:da:01:26:29:79:8c:ca:d6:21:16:2b:
                    c5:e1:d5:de:c0:12:cb:b2:9d:e2:39:3c:02:bb:34:
                    fd:33:51:8a:39:ec:6d:1e:2b:dd:d7:d3:f3:fa:1a:
                    bd:9d:69:16:ee:2c:f6:64:78:61:47:7c:4f:de:72:
                    0d:0e:6f:3e:1e:f9:9f:c7:f8:d3:be:5f:32:62:e1:
                    76:2c:06:a1:a0:98:d0:44:64:8c:cb:2a:b2:05:5b:
                    2d:1e:51:2b:2d:26:cb:41:e3:46:dd:a0:cb:ca:34:
                    4c:d8:ee:90:f4:4b:b4:f6:57:fa:88:b3:7e:2a:cb:
                    a8:e4:93:f4:ef:99:30:d2:dc:83:24:29:11:40:6a:
                    78:3f:aa:2e:f1:6a:b6:71:f7:4c:9c:76:3f:7c:1a:
                    c1:31:55:81:88:75:fb:87:d2:e9:80:95:a9:02:ca:
                    55:1c:d2:6d:af:af:48:71:3e:af:cf:d8:ff:c1:06:
                    95:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:CF:1C:68:C3:D5:0F:A6:14:9D:87:79:6B:42:4D:22:A3:CC:EB:05
            X509v3 Authority Key Identifier:
                keyid:DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ce:99:a5:d7:b2:cd:2f:05:fe:c5:e4:0f:cd:6b:f9:9d:cd:
         68:10:90:04:0e:98:26:2f:ff:ae:8d:8b:2e:d9:ff:0a:28:3b:
         67:32:57:8f:9f:fe:5f:a4:9a:3b:35:a1:27:65:ea:4d:ee:4a:
         cb:42:6f:1b:fe:aa:65:a9:8a:62:f2:16:0d:2f:a7:dd:f8:63:
         16:18:d4:b1:d0:9b:5c:44:43:24:77:d9:3c:36:81:0d:ec:c7:
         3b:2b:1a:1e:94:15:eb:76:86:49:49:c5:5b:05:2d:98:4b:21:
         80:bc:db:e6:45:84:1b:1b:6f:c4:e1:be:e9:ca:aa:c6:05:aa:
         11:68:b8:91:14:7e:04:59:07:40:8b:4d:e2:df:07:af:f8:6a:
         e4:26:5f:51:d2:2f:96:ac:88:cb:52:0c:ea:35:1d:0d:5d:70:
         e7:31:5f:fb:11:59:89:05:56:ad:86:df:86:0e:b2:5b:ba:ef:
         d9:62:3f:b1:34:4c:c1:b3:a0:27:d9:a7:79:28:2a:9a:0c:a9:
         e4:46:70:fe:c3:1b:81:c0:a0:97:de:39:15:96:a2:0d:96:90:
         aa:cf:23:bf:27:10:4c:f9:60:3f:2f:35:62:86:b1:12:f8:35:
         4a:c3:96:55:7f:6b:7d:06:07:0a:1e:48:82:b0:c4:b9:15:9b:
         9d:68:0e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----