Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
File:                     3W5w5DbhwCWqDg4_uoUrmK07hBA.mft (raw, json)
Hash identifier:          g+hmlbOdLYxSm57gU48infzXI7/v31RttR4+t6tgvVc=
Subject key identifier:   33:0F:3A:54:8E:83:9B:C4:88:AB:00:BB:1F:3F:87:DD:97:A2:3B:D4
Authority key identifier: DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10
Certificate issuer:       /CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
Certificate serial:       01962E9921568996BED7FBFEED713807C7FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft
Manifest number:          0BCF
Signing time:             Sun 13 Apr 2025 10:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:49 +0000
Files and hashes:         1: 3W5w5DbhwCWqDg4_uoUrmK07hBA.crl (hash: uoUNBnt/X+Pk1qXCPc007JUjbcc67oF2czjk7hfaiiw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:21:56:89:96:be:d7:fb:fe:ed:71:38:07:c7:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd6e70e436e1c025aa0e0e3fba852b98ad3b8410
        Validity
            Not Before: Apr 13 10:01:49 2025 GMT
            Not After : Apr 14 10:01:49 2025 GMT
        Subject: CN=330f3a548e839bc488ab00bb1f3f87dd97a23bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d5:65:87:b0:67:08:ea:ae:7f:69:c0:e9:fe:
                    e1:9d:72:87:57:3f:e6:14:dd:bc:37:33:69:a8:0b:
                    6f:78:16:15:3d:1b:43:53:09:48:92:42:9e:a8:f8:
                    ab:14:5d:09:db:3b:f3:f4:8b:ec:dc:96:80:b9:2a:
                    61:c2:bf:9f:fe:c6:43:9d:d9:c7:c9:51:92:6b:8d:
                    6c:49:e1:56:50:e8:ec:7d:1c:c3:a8:c3:38:58:f1:
                    8d:1a:d6:75:32:9c:89:b0:cc:c6:28:8b:b8:0f:30:
                    ff:3c:28:83:39:63:65:94:49:08:b4:99:96:eb:f2:
                    ce:2c:82:12:42:ba:ab:b7:99:1d:9a:6b:cd:87:5d:
                    8d:cf:62:ca:1e:7a:54:43:ac:e7:7f:a8:3b:11:cf:
                    77:22:17:53:94:b1:53:2b:ad:33:cc:00:2b:cb:8c:
                    ab:be:18:35:43:37:5d:de:67:7a:d0:28:50:4e:38:
                    7e:c2:83:b4:10:b1:09:12:9b:c1:e3:0e:89:09:f3:
                    82:84:c1:37:0f:dc:c7:2c:ef:9c:1d:67:a8:82:10:
                    1d:5e:41:13:b1:ce:7f:43:72:c6:5f:0b:15:94:e5:
                    ce:23:57:2a:eb:3e:2a:0a:f5:1c:db:98:c1:f7:52:
                    c8:c7:81:51:22:c2:20:e0:6a:5c:ee:da:89:70:60:
                    44:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0F:3A:54:8E:83:9B:C4:88:AB:00:BB:1F:3F:87:DD:97:A2:3B:D4
            X509v3 Authority Key Identifier:
                keyid:DD:6E:70:E4:36:E1:C0:25:AA:0E:0E:3F:BA:85:2B:98:AD:3B:84:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3W5w5DbhwCWqDg4_uoUrmK07hBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/b6afbb-5a6b-4345-90ae-7b61a695d132/1/3W5w5DbhwCWqDg4_uoUrmK07hBA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:cd:4f:6c:aa:b0:a8:41:10:9e:c9:d2:fc:95:24:bf:c7:a4:
         07:2d:10:66:cf:bf:97:a3:a1:5c:f0:80:6b:19:ed:b4:d8:8f:
         1c:a3:ac:70:33:21:44:7c:1e:33:73:0d:ab:0c:13:2f:74:28:
         54:41:67:43:63:ca:04:b6:e8:7e:15:48:ec:78:59:a5:34:f4:
         b0:db:8a:48:f8:09:dd:6e:02:5b:5a:82:6d:49:6d:87:5e:a1:
         61:6e:b2:77:78:eb:d1:47:8b:43:94:06:72:89:d5:b9:47:c1:
         3a:2b:95:76:90:67:51:4d:05:c4:8d:8c:d5:2e:b1:fd:3c:32:
         e4:62:e6:0f:64:8b:0a:9e:7e:80:49:31:9a:cd:e7:d0:12:9f:
         2c:ce:c6:b1:a0:4c:98:87:b8:2c:34:9a:dc:5b:46:8b:e4:7e:
         5f:52:11:f2:8d:64:dc:4d:b7:6a:11:29:ab:63:8f:14:12:86:
         9a:ae:ff:89:c4:dc:b4:b0:47:cc:dc:19:da:90:54:2a:d8:a5:
         06:95:16:1c:df:11:2c:46:15:cb:c7:4a:8d:0c:32:1b:40:00:
         c3:42:ea:46:b5:c9:eb:05:10:21:c1:92:4e:7a:6a:bc:b8:14:
         95:44:a3:63:ef:f6:c7:65:fe:67:31:99:e7:a7:aa:7f:7d:3c:
         31:0f:d6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----