Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
File:                     xN3-D0v7aYLxlgqyo_rnovtFepM.mft (raw, json)
Hash identifier:          2phwB8jlrIPib7GrFGzPDYSRABA5HqCbRmLykkkxl0c=
Subject key identifier:   1A:11:28:40:54:DB:58:19:9C:A0:6D:E3:C3:5E:17:29:5F:71:76:E2
Authority key identifier: C4:DD:FE:0F:4B:FB:69:82:F1:96:0A:B2:A3:FA:E7:A2:FB:45:7A:93
Certificate issuer:       /CN=c4ddfe0f4bfb6982f1960ab2a3fae7a2fb457a93
Certificate serial:       01962FAB2E901C762E57BB9CCDD877A03040
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xN3-D0v7aYLxlgqyo_rnovtFepM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft
Manifest number:          066D
Signing time:             Sun 13 Apr 2025 15:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:09 +0000
Files and hashes:         1: S8JU_Rcn4aoynb-Ajo5SG-rhPXY.roa (hash: fzgvAAaxWzcuS3HHSBSyM+73bTeADHpyyR/eP8i6gAs=)
                          2: xN3-D0v7aYLxlgqyo_rnovtFepM.crl (hash: XA+46O2Sc6G696D8e+qwWTEfLPHr852GBMeymbnfLdI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2e:90:1c:76:2e:57:bb:9c:cd:d8:77:a0:30:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4ddfe0f4bfb6982f1960ab2a3fae7a2fb457a93
        Validity
            Not Before: Apr 13 15:01:09 2025 GMT
            Not After : Apr 14 15:01:09 2025 GMT
        Subject: CN=1a11284054db58199ca06de3c35e17295f7176e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c6:3f:d3:5f:58:a5:50:fa:b8:43:40:a5:42:
                    5c:a4:83:7d:bf:eb:15:46:fc:8d:cb:41:ee:fe:03:
                    64:03:f7:04:c3:4f:d2:d2:5e:42:4f:fe:4d:7a:0a:
                    2a:1e:5f:44:17:80:84:a4:d2:d9:14:2f:63:64:60:
                    15:73:ff:61:6c:67:9b:b5:17:fb:7d:59:13:94:ef:
                    7a:69:3a:a8:48:8e:4a:5a:c4:f1:13:fb:d3:4c:7e:
                    d5:d4:38:dc:e5:6f:e7:81:b7:fc:8e:63:63:7d:50:
                    a0:1f:0e:b8:8c:72:da:97:c7:04:f9:c7:44:7c:0f:
                    b5:a8:c7:f7:c5:31:3e:4b:bd:5c:ce:ff:1d:dd:35:
                    34:28:73:9d:af:91:a4:2e:9d:85:b0:cb:8b:9a:85:
                    22:0e:c0:dc:86:d9:5c:23:c4:69:be:84:fd:7e:95:
                    7d:fa:9d:93:f3:54:66:85:2a:4d:86:e9:f0:38:f0:
                    67:11:93:2f:ea:d1:68:3d:38:90:58:0a:86:fe:bb:
                    a0:7c:d4:07:ef:68:14:95:bb:0d:ab:23:f7:34:df:
                    bc:8e:b9:53:db:33:d2:3a:99:79:cf:66:54:68:bf:
                    41:10:0d:39:0d:c7:a5:55:1d:8b:98:c4:a2:41:9f:
                    2d:c7:a3:59:be:96:8c:45:5c:f6:31:e2:db:aa:64:
                    41:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:11:28:40:54:DB:58:19:9C:A0:6D:E3:C3:5E:17:29:5F:71:76:E2
            X509v3 Authority Key Identifier:
                keyid:C4:DD:FE:0F:4B:FB:69:82:F1:96:0A:B2:A3:FA:E7:A2:FB:45:7A:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN3-D0v7aYLxlgqyo_rnovtFepM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80b481-6535-40a3-81a8-313a4c163b10/1/xN3-D0v7aYLxlgqyo_rnovtFepM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:7f:7b:c6:6e:1d:41:be:ad:0b:1e:b1:31:3b:31:54:08:85:
         f3:b3:a3:04:64:67:71:4b:2d:8a:be:3b:15:13:92:d2:23:11:
         65:02:da:9d:6b:47:f6:9b:73:20:90:a0:21:9e:32:97:b4:de:
         3e:da:f3:00:42:a8:09:ae:dc:cb:58:57:ba:5f:86:47:7a:9e:
         63:37:c9:4d:f6:9a:f1:57:17:55:93:21:2d:7e:96:d8:8f:fd:
         3f:e0:25:d5:1c:43:5f:e3:3c:46:38:0f:31:62:63:ee:65:3f:
         22:8d:1f:5e:75:46:ea:6b:b0:28:48:8c:20:15:bb:98:e1:0e:
         d6:fb:d0:2a:ec:86:f2:84:4f:6c:a0:02:75:05:05:e8:c2:92:
         80:56:2b:da:23:71:2a:28:97:bd:be:11:88:3b:fc:a2:1e:52:
         a9:48:9c:ae:ed:db:0a:c0:18:fe:b7:82:7c:ee:2e:95:a9:0e:
         db:cf:87:67:ae:5d:cf:e9:fd:8f:97:90:1a:39:ce:c8:da:7e:
         ae:f4:66:40:ea:79:7c:f7:c8:22:47:d3:8f:fe:09:07:7a:8d:
         05:b3:13:77:fd:68:07:96:08:fd:4b:5d:10:7a:83:68:e9:61:
         74:eb:c1:06:48:c4:6c:9a:16:af:9e:d7:86:6e:70:7a:35:7a:
         42:15:b1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----