Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
File:                     3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft (raw, json)
Hash identifier:          khodrqxEO4+eScavIOKdHmmbRNfmMieyxWHlWtcoOjw=
Subject key identifier:   EB:AC:FF:B3:1E:A5:5B:A2:18:08:7B:2B:76:99:3F:C0:13:95:B0:89
Authority key identifier: DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD
Certificate issuer:       /CN=df0198a7b3afdcdd7003562a0871878e238760ad
Certificate serial:       01962E61F7174A2EC2A84B81EE7783867253
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft
Manifest number:          0F9D
Signing time:             Sun 13 Apr 2025 09:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:34 +0000
Files and hashes:         1: 3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl (hash: 0+blfhcUDS7OgYVMIx1Hs0R/0ibyms5Bd9uc/d3GetY=)
                          2: 4PgtcW6j7xPoaJPy67vk2tMAXu4.roa (hash: fufIwyPbWqbMyORM68+h1FhSNKXbFzjdgG7WcXkavWU=)
                          3: cUPSsBWZ4irx4TApxzbroJpf5do.roa (hash: 6GPPFraRfTGyKrm5jIIIVF8Jt+KHlsZR8YFMwLgpuuE=)
                          4: xqYP462dYCt-0eOV8zXikdtxg14.roa (hash: YzKJbzm4Szaaz/1aNRHY+rmqu5/8YwNywOTzBNgzdeo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f7:17:4a:2e:c2:a8:4b:81:ee:77:83:86:72:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df0198a7b3afdcdd7003562a0871878e238760ad
        Validity
            Not Before: Apr 13 09:01:34 2025 GMT
            Not After : Apr 14 09:01:34 2025 GMT
        Subject: CN=ebacffb31ea55ba218087b2b76993fc01395b089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e8:bb:e6:29:fc:f2:66:59:39:4a:7d:9a:51:
                    66:22:a0:8b:74:9a:61:84:f2:bf:ff:01:23:ec:9d:
                    3e:07:aa:86:e8:a6:21:62:9d:cf:d0:f1:d6:bb:0f:
                    ef:7c:a5:7f:b3:75:97:34:c0:19:bb:b0:ee:93:3e:
                    89:da:04:83:1d:b1:b7:51:be:30:56:41:f2:99:1a:
                    d7:9e:7a:1e:0e:9e:d9:82:31:89:76:39:7f:9b:53:
                    8e:14:af:7f:79:ec:3a:be:c6:a0:a1:bc:bc:ea:7f:
                    75:69:37:4e:74:2a:db:03:c0:10:8c:5a:26:97:cf:
                    6e:ca:ea:67:2a:f4:5a:34:89:3e:cd:ec:51:82:07:
                    6d:19:d9:8b:77:17:e8:bd:f1:6f:f1:b7:e8:f2:95:
                    56:29:ae:13:fe:e0:71:5c:86:35:2d:7d:e3:c6:67:
                    c8:5d:d0:82:4f:bc:38:32:55:de:f1:27:ba:cb:15:
                    94:2d:58:78:7a:1d:a1:78:b6:9f:3e:57:7e:64:08:
                    15:b6:17:c4:e8:b3:99:41:91:6f:64:3e:a4:02:ff:
                    d1:93:0b:9b:da:37:2f:0a:bd:13:4e:ae:57:5f:c9:
                    9c:1a:e2:11:74:2b:ba:e4:40:7d:7e:29:75:ae:4c:
                    f5:86:08:48:c0:c2:25:fd:24:be:6f:18:fd:76:c5:
                    c0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AC:FF:B3:1E:A5:5B:A2:18:08:7B:2B:76:99:3F:C0:13:95:B0:89
            X509v3 Authority Key Identifier:
                keyid:DF:01:98:A7:B3:AF:DC:DD:70:03:56:2A:08:71:87:8E:23:87:60:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d3fca6-ecb5-43aa-8c9d-0fcc6c3011fc/1/3wGYp7Ov3N1wA1YqCHGHjiOHYK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:f6:02:06:54:1a:1b:7b:bb:0e:fb:fd:3a:6f:fd:73:04:33:
         dc:d8:ce:ff:56:c5:b5:c0:2c:74:2e:91:02:b3:63:28:d4:dc:
         37:17:d6:fe:a4:6b:9f:c9:8b:02:ae:e3:6a:74:9b:74:db:a2:
         9c:1b:3c:c8:83:09:5b:69:5e:7c:da:1c:4a:e6:e7:e1:5d:2d:
         41:63:05:22:6b:7a:fa:86:27:58:4c:07:29:b9:c3:93:d7:e5:
         d8:37:2f:29:a0:fb:87:b8:40:d3:2b:33:75:dd:86:1c:04:2b:
         f4:02:1c:53:fe:55:d3:9d:44:4c:82:35:66:89:93:8f:1f:2e:
         a1:44:85:5f:bd:5f:22:18:8a:27:4d:b8:a4:05:a6:3f:e9:06:
         c1:2a:06:89:de:42:91:74:f4:d3:a9:3f:7d:f3:2a:4c:ea:fa:
         36:4f:0a:e0:62:49:3b:83:cc:11:96:f6:14:9b:08:a0:f4:27:
         c2:fe:ae:ad:aa:4c:d5:2a:3b:52:f4:61:4f:f1:80:1c:9a:3b:
         15:24:69:75:5b:6c:53:80:9b:84:84:0f:d9:e0:98:35:94:21:
         90:75:7d:9b:9c:90:68:33:a4:6a:39:a7:69:55:19:da:b1:83:
         4a:93:a7:31:95:45:c0:b6:72:d2:15:59:b8:a1:76:4b:08:24:
         46:c3:10:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----