Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
File:                     3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft (raw, json)
Hash identifier:          Wg8wUilTnISyZBiAL1yJh9BqKy+Uj02nw31AMi0gcv0=
Subject key identifier:   0D:C7:F9:2A:2B:CC:DC:DD:7E:3A:C4:AC:D8:5B:70:1C:EE:E3:84:30
Authority key identifier: DE:11:CC:6D:F1:33:66:FC:59:5A:6E:72:ED:03:C5:38:00:79:2B:4B
Certificate issuer:       /CN=de11cc6df13366fc595a6e72ed03c53800792b4b
Certificate serial:       01962F064B7CBC5ABF1BD51B7685B620D28A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft
Manifest number:          0C4D
Signing time:             Sun 13 Apr 2025 12:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:03 +0000
Files and hashes:         1: 3hHMbfEzZvxZWm5y7QPFOAB5K0s.crl (hash: /1x2TXAVqgpjtJIFTFGyuPcBLsqoxDsZvDa3W3c0HlQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:4b:7c:bc:5a:bf:1b:d5:1b:76:85:b6:20:d2:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de11cc6df13366fc595a6e72ed03c53800792b4b
        Validity
            Not Before: Apr 13 12:01:03 2025 GMT
            Not After : Apr 14 12:01:03 2025 GMT
        Subject: CN=0dc7f92a2bccdcdd7e3ac4acd85b701ceee38430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4b:1a:03:d8:ac:5c:d1:ca:54:ee:e1:1e:78:
                    f4:78:b2:5e:36:c8:e2:95:9c:ea:19:ae:fe:a5:8d:
                    1e:d6:f9:b4:44:84:06:79:3d:08:23:bb:e9:ea:4c:
                    a3:6c:a3:91:2c:d9:4b:6f:17:d1:f7:9b:cd:5d:74:
                    aa:1d:62:ae:2c:97:5a:54:bf:b9:82:60:e1:15:a9:
                    d7:01:63:c0:cb:e6:c1:05:45:6b:af:32:0c:cc:4f:
                    45:7a:70:da:78:e7:8a:a0:c2:0a:d6:0a:4b:37:2b:
                    35:b4:65:0a:ad:00:41:b6:9e:e4:4b:76:b5:eb:9a:
                    98:70:59:8c:ba:be:c8:69:46:89:7a:52:54:ec:4d:
                    88:23:fe:c1:96:b2:43:7d:e0:ca:a7:f7:d7:c4:7f:
                    a6:e9:ce:e8:fd:4d:12:a6:1a:1f:c0:e7:0e:33:22:
                    71:ac:82:80:0e:40:8c:76:1c:b0:54:dc:39:9a:df:
                    2b:12:dd:d6:1b:0a:f6:01:a9:33:98:58:01:d0:1f:
                    b3:bc:f9:20:5c:58:39:8b:47:81:0e:fc:46:2b:96:
                    78:82:f4:4f:06:bd:ff:79:5d:96:68:30:13:bb:99:
                    1b:ad:17:4f:b6:10:f9:46:a5:68:76:7a:24:36:1d:
                    d3:6a:db:16:f3:7d:05:a5:4b:4d:4a:9a:ca:40:0e:
                    f8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C7:F9:2A:2B:CC:DC:DD:7E:3A:C4:AC:D8:5B:70:1C:EE:E3:84:30
            X509v3 Authority Key Identifier:
                keyid:DE:11:CC:6D:F1:33:66:FC:59:5A:6E:72:ED:03:C5:38:00:79:2B:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hHMbfEzZvxZWm5y7QPFOAB5K0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c6494d-fc66-453c-bc83-e6c4df46f04d/1/3hHMbfEzZvxZWm5y7QPFOAB5K0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:27:56:c1:e2:2f:05:47:9b:2b:d5:0a:ba:0b:18:13:66:01:
         a3:bb:78:8d:f0:73:a7:bd:1d:47:29:93:33:61:33:70:fe:9b:
         b8:49:7f:79:1a:be:03:65:fa:2d:4a:61:c6:fb:81:9e:63:d8:
         b0:b8:ca:25:cc:58:d1:0f:0c:9b:ef:b1:38:14:a8:22:5f:80:
         e5:25:85:49:60:61:2b:98:15:0c:7a:fb:28:a0:57:11:1c:4d:
         bd:d0:4f:5e:c1:5a:1c:7a:68:34:af:3f:61:16:d5:a5:40:ec:
         59:10:e2:13:bf:01:b9:fa:8e:49:6c:8e:6b:79:43:af:02:99:
         83:52:c3:ea:5e:9e:d4:99:01:0a:da:42:67:a8:09:5d:ab:f5:
         ab:e9:3b:9f:b0:75:62:9c:90:16:c7:13:06:71:64:b5:3f:1f:
         2b:ac:e5:f1:8a:88:72:2d:4f:85:4b:3b:ee:b3:7c:a2:5e:1e:
         76:dd:a7:b1:8a:9b:64:f9:c2:84:ff:0d:62:ce:8c:ba:16:1c:
         f3:01:04:02:b2:88:d7:42:a7:64:49:4b:99:2a:e0:24:55:f0:
         61:f0:27:58:c1:3b:c7:9b:e4:f5:01:fd:a5:fb:c0:20:2f:4d:
         41:0d:e2:c1:3b:6b:17:93:5b:ce:5a:b4:c0:f1:bf:17:12:2f:
         b9:7a:d4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----