Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
File:                     H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft (raw, json)
Hash identifier:          /f83B/pSdsXs6RazQZr9tRxQMjPYA1KFQy418/STO/0=
Subject key identifier:   4F:8D:0D:81:11:12:C2:B1:E6:69:CB:5C:FA:A0:A6:39:D7:CB:AA:81
Authority key identifier: 1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6
Certificate issuer:       /CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6
Certificate serial:       01962F3D5BDA26B1A7FF87C5E3F3F47F104D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft
Manifest number:          0904
Signing time:             Sun 13 Apr 2025 13:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:12 +0000
Files and hashes:         1: H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl (hash: TSJvu3sBwCj1N+UWoed0PEFkFaXZZCJHNFaUQslD1Uw=)
                          2: iHSrTbxet8j5uaWQ6yDr02jRxjY.roa (hash: oCfYmcjvyzUP7DhCDsHSSh72gSgXxnVFLGRLc0v5Xfo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5b:da:26:b1:a7:ff:87:c5:e3:f3:f4:7f:10:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f7142b45b5ce39016e25e09b2fed579a9bd77d6
        Validity
            Not Before: Apr 13 13:01:12 2025 GMT
            Not After : Apr 14 13:01:12 2025 GMT
        Subject: CN=4f8d0d811112c2b1e669cb5cfaa0a639d7cbaa81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4c:9c:9f:59:25:c4:b9:83:1d:ca:40:88:3d:
                    fc:b7:0e:14:01:51:b2:8f:71:07:a1:56:65:db:f8:
                    24:3d:ed:e5:06:e6:8b:ec:f1:21:46:89:7d:d9:96:
                    df:eb:ec:16:3b:71:43:8e:ff:d1:26:6f:eb:c7:1c:
                    7e:ae:e3:b0:e0:dc:78:de:b9:fa:03:09:f1:a2:e9:
                    52:5d:4a:72:ef:c6:1b:de:2f:df:5a:3c:04:59:16:
                    0c:fa:ed:0c:13:e5:9c:ce:52:17:26:70:29:47:9c:
                    f6:8b:8c:8b:88:dd:be:38:95:27:ae:9c:64:6d:66:
                    64:c0:09:43:19:6e:04:01:4b:7b:4a:62:c9:60:45:
                    57:76:ec:40:0b:80:50:27:92:d1:3e:84:83:9a:ca:
                    3f:f1:09:85:e6:7d:e9:b3:87:fd:73:97:db:b1:c9:
                    f6:e4:c4:0b:05:71:2e:4d:62:ee:cd:78:ec:c0:97:
                    17:b4:fd:e4:eb:20:98:e0:ac:6a:24:ef:cf:30:5b:
                    87:f5:44:21:88:ed:9e:c7:2c:50:3f:42:dc:a0:3a:
                    a8:eb:70:78:7a:dc:64:10:7e:97:ad:00:87:23:fa:
                    ba:f7:b5:01:e4:bd:a0:d8:a6:0a:6a:65:da:12:a0:
                    3a:f7:f6:4e:0c:65:01:34:0e:75:0c:0a:54:2f:2c:
                    58:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8D:0D:81:11:12:C2:B1:E6:69:CB:5C:FA:A0:A6:39:D7:CB:AA:81
            X509v3 Authority Key Identifier:
                keyid:1F:71:42:B4:5B:5C:E3:90:16:E2:5E:09:B2:FE:D5:79:A9:BD:77:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3FCtFtc45AW4l4Jsv7Veam9d9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/dfead7-586a-4b35-b199-dfe45f672f81/1/H3FCtFtc45AW4l4Jsv7Veam9d9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f1:29:06:87:97:e0:06:bb:2d:ce:96:87:ee:9f:e0:4e:94:
         8f:e8:d6:d2:25:ab:d2:e4:ce:6e:f3:72:04:4b:4e:f5:a8:32:
         8d:d6:4b:92:27:39:98:81:56:dd:4d:d7:49:ba:86:a6:35:9b:
         7d:f1:31:76:6d:5e:c5:4f:46:f7:4c:90:a2:d1:28:cb:bc:7f:
         81:bc:84:eb:35:02:fa:44:78:81:4d:79:74:e4:7b:6c:a4:22:
         34:8e:cc:99:f7:9a:be:48:54:3d:dc:aa:1d:a0:ce:49:3f:6a:
         63:e3:86:ba:5d:85:46:e9:87:84:fc:23:12:d7:79:30:28:b5:
         93:f9:2f:af:72:1e:ac:14:e2:ac:9f:e3:ea:07:59:ca:6b:0b:
         3a:ff:12:e6:93:ad:96:e9:04:b6:1f:6f:d8:1c:3c:fd:3e:0b:
         d9:e4:bd:da:8d:f6:90:51:36:19:9d:9a:07:7c:2b:eb:97:6d:
         be:2a:f1:49:63:65:3a:79:2a:66:d0:d1:39:f7:40:fe:68:53:
         2e:a1:52:09:e7:fe:ed:e8:af:15:57:ed:fc:ee:39:1b:b2:66:
         fc:d7:85:7e:e3:7c:d6:7b:60:ab:d4:bc:d2:5b:83:76:ea:b1:
         f2:fd:e2:2f:6d:c2:79:00:5f:7f:2a:44:05:c3:ab:15:98:b7:
         53:c4:66:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----