Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/db3TijiDJA5GxLGsi7-DF96P-IU.mft
File:                     db3TijiDJA5GxLGsi7-DF96P-IU.mft (raw, json)
Hash identifier:          g375Q75MF9xZZBVUPIXHGhYApAI5LIxpLo7l695ui00=
Subject key identifier:   04:3A:ED:FC:7F:9B:A6:85:E7:A6:60:73:B2:00:36:0C:31:05:6E:CA
Authority key identifier: 75:BD:D3:8A:38:83:24:0E:46:C4:B1:AC:8B:BF:83:17:DE:8F:F8:85
Certificate issuer:       /CN=75bdd38a3883240e46c4b1ac8bbf8317de8ff885
Certificate serial:       01962DF4250FA917E5D0589986B88D847B77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/db3TijiDJA5GxLGsi7-DF96P-IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/db3TijiDJA5GxLGsi7-DF96P-IU.mft
Manifest number:          11F6
Signing time:             Sun 13 Apr 2025 07:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:37 +0000
Files and hashes:         1: db3TijiDJA5GxLGsi7-DF96P-IU.crl (hash: NSJrihybnAp6zBv6hnVLl787p5szGeVY3awNXK5BYwU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:25:0f:a9:17:e5:d0:58:99:86:b8:8d:84:7b:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75bdd38a3883240e46c4b1ac8bbf8317de8ff885
        Validity
            Not Before: Apr 13 07:01:37 2025 GMT
            Not After : Apr 14 07:01:37 2025 GMT
        Subject: CN=043aedfc7f9ba685e7a66073b200360c31056eca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:60:2b:0d:10:fa:af:c6:11:7d:2a:06:8a:c4:
                    4b:ad:57:aa:e8:ce:0e:22:54:e8:c7:ff:29:ad:5c:
                    79:68:db:10:4f:4a:41:21:61:0e:c9:b9:62:e4:98:
                    9e:a3:a3:c9:70:2c:90:e0:29:91:c4:a7:76:bd:96:
                    d0:78:20:b4:99:c9:1c:fd:f8:ed:46:7f:01:05:f1:
                    83:19:9b:a1:6e:b4:09:5a:c7:20:4a:4f:57:7d:6c:
                    d3:54:e4:5e:74:ee:6f:3f:f5:dc:8f:61:1e:9d:40:
                    34:85:67:05:5e:97:29:cf:3e:ed:a3:4b:93:92:1f:
                    7c:8d:ad:87:e0:e1:e7:b5:17:9f:10:ac:a7:41:a7:
                    73:37:d3:cb:70:da:07:49:6c:6f:c6:9e:33:2c:9c:
                    b4:28:6a:9c:3e:3e:af:f6:e9:cd:e5:70:16:10:7a:
                    94:30:de:c7:f0:e6:c1:e9:d3:8a:00:5a:e1:d3:79:
                    37:cb:5f:31:d4:73:1b:31:fb:85:2e:83:d8:01:70:
                    b7:bf:06:15:b7:1f:38:b0:c2:5e:fa:37:16:94:87:
                    d2:f0:d3:5f:4a:24:4e:86:3d:e2:3e:8e:4b:9c:37:
                    aa:04:40:2f:7f:8e:db:c2:4d:34:b2:0c:f8:15:3d:
                    fe:a0:c6:51:6a:cb:e2:6d:be:4c:56:74:8b:1f:a7:
                    22:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3A:ED:FC:7F:9B:A6:85:E7:A6:60:73:B2:00:36:0C:31:05:6E:CA
            X509v3 Authority Key Identifier:
                keyid:75:BD:D3:8A:38:83:24:0E:46:C4:B1:AC:8B:BF:83:17:DE:8F:F8:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/db3TijiDJA5GxLGsi7-DF96P-IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/db3TijiDJA5GxLGsi7-DF96P-IU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c3a4f7-2d0a-4924-8cdb-8da60535e6a0/1/db3TijiDJA5GxLGsi7-DF96P-IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:b6:40:62:1c:0a:39:6c:34:9c:73:a5:65:fa:ca:df:c7:e5:
         35:a3:86:d9:6e:95:0e:0d:8e:d9:71:3e:5e:5b:a5:8a:08:99:
         29:70:2e:05:7c:52:7c:a8:62:aa:7b:3b:9d:94:e5:0c:e8:af:
         06:cf:2e:18:a8:04:8a:19:5f:46:e8:af:9f:4d:fd:8d:fc:7e:
         12:0f:57:12:db:68:f4:2e:b0:2a:24:aa:06:d5:2b:5a:bf:88:
         7a:9c:9b:2c:58:7c:e0:97:17:20:11:b0:9b:2d:4a:75:95:0a:
         16:f9:4c:7a:3c:bd:aa:83:ea:b7:21:ad:b7:f0:0b:2e:0a:4e:
         c7:88:bc:85:04:eb:64:40:df:ca:29:12:20:cc:9f:c4:84:03:
         9c:51:bb:94:00:d0:7f:b4:93:69:53:3c:32:17:cb:00:35:6d:
         9e:5b:b0:60:17:27:4c:96:2f:ce:08:de:86:cf:1f:bf:a4:93:
         17:4e:95:4a:d3:b0:19:b9:12:4c:7c:96:2b:cd:a5:1f:79:41:
         8c:41:56:b1:48:7c:61:b9:97:92:7b:f7:a4:e1:45:02:de:e8:
         55:09:a2:29:83:09:bd:98:45:76:8b:19:57:b4:07:f4:25:06:
         42:af:c4:c6:f9:8f:c6:4e:52:78:93:e2:6a:aa:39:8e:3d:6e:
         81:74:72:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----