Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
File:                     rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft (raw, json)
Hash identifier:          cv3GJcPNfaFIkLBP2Vg0wgHvXxqkAHsJ6FgTbD+1zxw=
Subject key identifier:   30:EF:C3:C4:1A:02:37:63:97:C6:6F:2D:E5:80:3A:71:4C:09:14:41
Authority key identifier: AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02
Certificate issuer:       /CN=ad10cdd0b8b73304c985fde1b10e40182bf13902
Certificate serial:       01962F0654612757E5CFC6F012C52BD6FEF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:06 +0000
Files and hashes:         1: Ja_97273VAEHJD8U1oqoC_9aF9c.roa (hash: vJfC/52sLPqoQGFApNLbUAegOgUUxIE6GeG0+RQdWv8=)
                          2: rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl (hash: bfndptNdkS60dmYoQ903mFnYwlQFbOSsgQRPHpO9Bow=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:54:61:27:57:e5:cf:c6:f0:12:c5:2b:d6:fe:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad10cdd0b8b73304c985fde1b10e40182bf13902
        Validity
            Not Before: Apr 13 12:01:06 2025 GMT
            Not After : Apr 14 12:01:06 2025 GMT
        Subject: CN=30efc3c41a02376397c66f2de5803a714c091441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:22:64:8e:e4:2a:a9:33:ec:ab:2b:35:cb:d7:
                    d2:a4:9a:11:b5:cb:74:ac:71:8b:6c:9c:49:db:c0:
                    a1:9f:4c:ae:fe:e9:ac:4b:57:e5:e9:9f:92:cc:64:
                    39:60:3b:14:f2:08:f4:95:be:e3:32:be:34:85:49:
                    45:f9:4d:38:40:f9:dd:97:f1:50:21:fd:d9:8d:c2:
                    84:f9:e2:ef:ba:c5:d8:b2:b2:92:8a:b7:77:d6:78:
                    fc:d5:13:a1:ca:85:d5:76:0c:3c:b2:4a:c2:e5:61:
                    0c:b3:27:00:68:36:00:5e:d2:85:13:87:25:bf:67:
                    0a:72:52:aa:ec:7f:d3:6a:f1:e3:0a:dd:b2:84:7c:
                    a6:a1:2a:2a:35:d3:a8:e7:cd:59:32:5b:d4:e4:f4:
                    23:85:0d:12:71:be:ab:05:3b:ee:b6:20:7c:53:65:
                    70:b2:c3:d1:4e:a0:b1:64:3c:d8:f3:08:f2:50:c8:
                    51:37:05:61:14:d8:fa:c4:68:b4:aa:0f:12:61:61:
                    1a:f5:45:fc:e7:9e:c7:0f:ac:15:f4:61:2b:4d:f4:
                    bf:da:ea:e5:3c:79:2b:95:5a:d9:b9:8f:2f:20:e3:
                    35:58:3c:93:e8:f0:ec:17:5c:ff:5a:4e:7d:0f:2b:
                    21:0d:03:d0:ea:07:ed:84:e2:60:9b:9d:50:28:30:
                    04:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:EF:C3:C4:1A:02:37:63:97:C6:6F:2D:E5:80:3A:71:4C:09:14:41
            X509v3 Authority Key Identifier:
                keyid:AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ac:c3:55:d1:bb:20:63:fd:c7:e3:6e:a0:19:28:ad:2a:0b:
         ac:55:10:d3:a0:cd:25:62:1e:49:e9:a4:e5:4e:cd:1d:05:95:
         87:64:cf:b2:e0:c8:1e:47:42:cb:32:1a:5b:90:72:4e:75:fb:
         72:98:4c:38:43:0d:ff:49:93:26:5b:82:2d:d7:3d:86:00:9c:
         bf:4a:0e:5b:2b:71:5a:f5:da:38:19:88:c2:fc:2e:e3:b4:ec:
         bc:7b:5f:19:ec:03:91:32:e8:7b:d7:fe:e7:7c:ce:c7:02:59:
         d8:7f:f9:40:d6:ae:38:8e:99:8e:7f:f4:4d:02:2d:f5:3a:cc:
         e4:66:dc:1d:4d:79:99:97:13:5b:8d:a9:d7:2e:43:56:e5:eb:
         d0:a0:1d:59:64:fd:ad:f7:89:41:84:35:a2:69:f2:f9:f4:7e:
         57:9e:64:e4:f4:91:34:a2:fc:92:96:d7:f7:2d:0f:bc:d1:c9:
         f0:c2:ed:52:38:47:58:78:b8:f5:ab:f3:4a:df:52:4e:a9:2f:
         db:01:f3:16:a2:fb:a1:5d:48:a5:32:55:4e:54:74:29:99:70:
         89:ae:10:5b:33:ed:5e:5a:8a:6f:74:72:e4:11:e0:84:36:9f:
         bf:c7:19:37:a1:92:e5:b7:43:c2:a0:e9:3b:8a:6a:ec:b0:c9:
         9e:c7:76:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----