Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
File:                     3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft (raw, json)
Hash identifier:          5PJCdaQHHJ0//fReJCQ/a9GDzs9Dia4DhtE3W5fo/34=
Subject key identifier:   61:4D:BA:60:94:F5:62:B1:B0:A9:46:52:40:93:12:B3:D2:47:A9:59
Authority key identifier: DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6
Certificate issuer:       /CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6
Certificate serial:       01962F06E73ACFBB2521E7C82F0B414766E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft
Manifest number:          0D6B
Signing time:             Sun 13 Apr 2025 12:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:43 +0000
Files and hashes:         1: 3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl (hash: TKUHMCmEeYT9EO6vYeIh5E8y81Pe1RVuCWSwZQq7udE=)
                          2: Kw550ydpOki0PWOYy-6z5BR-VIE.roa (hash: DJKKlAPQ1FQMVESwtaTdBMt71sNwkspOh/dlMgsjkTY=)
                          3: fcEpjbgKYOO71SWou3_dCE-kLKk.roa (hash: zROet63WRPPKV6TiwIGdua33aTn4W6zOjjUbs9hhWRs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e7:3a:cf:bb:25:21:e7:c8:2f:0b:41:47:66:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfea4e9bff294e20bd749ed2eeb9184f208bc9d6
        Validity
            Not Before: Apr 13 12:01:43 2025 GMT
            Not After : Apr 14 12:01:43 2025 GMT
        Subject: CN=614dba6094f562b1b0a94652409312b3d247a959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a6:53:bf:83:2d:d1:c9:bd:55:0f:9b:14:03:
                    6a:7c:f5:32:27:8e:c8:84:e5:6b:c3:4e:e7:53:46:
                    71:bf:cc:aa:7a:c8:21:13:54:bd:97:09:56:d7:ad:
                    8c:20:3e:ab:71:bf:81:10:55:2b:f3:2f:50:dd:21:
                    22:46:b8:f2:b8:d8:24:32:79:32:54:ee:bc:89:0f:
                    13:65:02:8e:69:7c:fa:d3:de:4c:9a:27:66:9f:95:
                    87:b0:c1:03:cb:81:1d:55:1c:42:99:af:fb:ba:56:
                    56:09:d0:b1:38:c5:fd:fa:f4:11:91:4b:f0:82:21:
                    12:1a:f7:78:57:c1:c2:95:5b:21:7f:aa:3a:ba:5b:
                    76:37:03:81:a0:5f:22:5d:e3:dd:b4:3d:45:22:aa:
                    14:f5:0c:c5:01:37:57:44:98:51:f5:0d:aa:48:49:
                    f4:2e:bb:3f:f9:d6:e3:19:d7:72:b6:26:c2:21:c0:
                    60:39:91:dd:cf:31:2f:72:59:3a:c5:d4:8f:8b:9f:
                    e3:2e:bf:4f:80:c7:b7:4c:13:d1:24:40:2e:e9:60:
                    3f:f7:c4:b8:af:bf:61:ab:07:47:6a:a2:fd:3d:3d:
                    06:73:8c:28:db:e0:ae:89:73:6a:da:f5:b1:bc:97:
                    ad:65:ad:8d:af:db:51:75:6e:eb:f4:6f:ba:53:37:
                    fa:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:4D:BA:60:94:F5:62:B1:B0:A9:46:52:40:93:12:B3:D2:47:A9:59
            X509v3 Authority Key Identifier:
                keyid:DF:EA:4E:9B:FF:29:4E:20:BD:74:9E:D2:EE:B9:18:4F:20:8B:C9:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-pOm_8pTiC9dJ7S7rkYTyCLydY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/73f4ab-b3e6-426d-b284-69bfc925979d/1/3-pOm_8pTiC9dJ7S7rkYTyCLydY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:87:49:38:0b:dd:c1:7b:d6:3b:c7:d3:af:57:2c:26:98:ea:
         02:a2:ba:47:55:86:a6:0a:dc:d0:90:da:16:8d:7f:f5:cd:a9:
         88:e4:72:da:df:60:49:00:98:3f:a6:62:ed:fa:21:55:32:cd:
         56:54:80:e6:32:14:43:c2:b2:f1:5a:47:21:d5:76:de:3a:ba:
         19:25:a0:e1:a6:8b:3d:24:95:94:19:0f:c3:11:3f:3d:16:74:
         43:5f:21:e3:ba:4e:60:f8:be:8d:58:4a:56:12:58:a7:e6:5f:
         4e:39:5b:82:1a:fd:3e:82:7c:19:76:b8:0a:ed:ad:95:d7:6b:
         f8:fb:e3:62:71:1a:f9:fa:36:89:d3:f0:a9:81:d3:b1:d1:0d:
         c5:3e:21:07:32:9f:59:84:3d:3f:b3:1a:2c:71:f9:a0:7f:7f:
         4f:57:b2:2c:f6:ae:0c:e9:07:1d:d5:a4:61:45:c2:32:f4:32:
         77:e6:9b:10:24:90:fd:f3:da:9f:01:ff:fb:9d:55:b3:0a:f0:
         38:e4:14:0e:14:6e:ef:e1:2f:a1:69:2a:60:20:d8:16:a8:9f:
         df:e5:9f:1b:2c:46:84:60:31:d3:da:25:12:84:d6:c1:e2:d0:
         3e:76:b7:df:fb:10:e1:5c:17:48:af:2f:68:3e:d6:ce:2c:6c:
         ff:bd:7f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----