Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
File:                     3HbS9D7BffyAXNsF8AChV5ie1Eg.mft (raw, json)
Hash identifier:          4ni8KfGHE4VnyzQNNeMSCDCXrf6LV++1egwWjyCWsPs=
Subject key identifier:   02:A0:72:5A:B2:4A:CD:F1:09:24:1F:7C:63:10:3B:B4:7B:29:3E:C6
Authority key identifier: DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48
Certificate issuer:       /CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
Certificate serial:       01962E2ABB959FFEE0ACDD27CD004BC83F53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
Manifest number:          147E
Signing time:             Sun 13 Apr 2025 08:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:14 +0000
Files and hashes:         1: 3HbS9D7BffyAXNsF8AChV5ie1Eg.crl (hash: KiILBvRz5bKMvYxX2OXgVFmgFlsE8lWyfGsQtcTCJ4A=)
                          2: vMasAu2YCDgiGttPAAgT_LUqims.roa (hash: vZV6QUfnrQuKBHkkqaJTtSdtOrcdYKhNNa/gcjcEoTQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:bb:95:9f:fe:e0:ac:dd:27:cd:00:4b:c8:3f:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
        Validity
            Not Before: Apr 13 08:01:14 2025 GMT
            Not After : Apr 14 08:01:14 2025 GMT
        Subject: CN=02a0725ab24acdf109241f7c63103bb47b293ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:08:a9:2d:ec:e1:b3:ce:db:e9:45:41:4a:4a:
                    da:b8:16:b1:c3:44:7d:e1:72:5a:a0:46:f3:8f:3a:
                    3f:df:e5:fc:a1:28:4d:26:67:ea:c4:3e:b3:65:9a:
                    3c:98:85:c6:e1:f9:4d:46:96:b2:ce:19:20:f1:66:
                    af:03:10:b7:33:f3:ea:62:a4:56:62:f8:3e:71:61:
                    bd:e5:09:a5:ea:dd:01:10:9b:b2:5f:2f:4e:05:3e:
                    02:1a:d7:c5:18:f6:79:5b:d5:ca:92:bd:df:44:6d:
                    85:62:66:5c:7e:2b:5b:f6:0d:16:b4:02:10:26:8a:
                    66:9a:9d:78:26:e9:44:73:a4:d8:28:4e:d0:1c:73:
                    5f:37:9e:4e:db:19:83:df:6e:8a:f7:ac:96:3b:4d:
                    19:62:b2:67:f0:b9:04:62:c9:60:e9:af:05:11:7d:
                    a9:c5:53:6f:9b:54:4a:d0:dc:b2:6c:40:36:c7:9b:
                    17:22:a2:0e:b8:71:b5:1d:92:02:09:53:fb:9c:b1:
                    a6:ec:0e:15:04:03:19:99:ee:47:ac:3e:15:71:0a:
                    f4:e1:4d:a8:2c:71:15:f5:82:22:91:a0:2c:f3:08:
                    79:76:60:c3:1a:0d:a2:85:a6:bc:30:05:50:1c:5f:
                    8d:e5:a8:86:4e:d7:89:a3:d7:3e:13:fb:bc:35:2a:
                    c9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A0:72:5A:B2:4A:CD:F1:09:24:1F:7C:63:10:3B:B4:7B:29:3E:C6
            X509v3 Authority Key Identifier:
                keyid:DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:10:52:1d:14:f8:6f:d7:9e:98:37:e6:31:31:8b:03:35:ef:
         d7:23:36:17:d3:42:4d:8d:e4:66:a1:ed:dd:f1:db:8b:fc:57:
         a5:f6:1b:b6:87:43:f6:da:57:b0:07:4e:86:0a:c4:4d:ea:0a:
         d7:d0:da:72:56:d9:98:f5:51:97:ba:a5:4b:f7:e0:10:73:f4:
         1a:08:84:28:0f:be:3b:ab:e8:ee:f9:f3:ec:6a:c6:55:5b:f5:
         29:6d:10:5e:80:c0:0c:ea:ff:f9:66:2c:ce:71:9c:96:90:4c:
         75:2f:63:1c:cb:22:49:e7:e2:1c:a0:33:59:1f:cc:bd:d8:36:
         1c:2e:e1:ba:63:83:ab:1c:1d:9b:0e:11:2c:67:e2:85:7c:d9:
         ef:11:44:84:f8:95:f9:be:00:19:14:e1:1a:10:fd:fc:4e:b1:
         98:fe:94:a4:87:03:6e:0c:e9:27:62:cd:07:a7:cd:39:f6:74:
         65:0b:33:8d:d0:16:c6:8b:2b:cc:96:63:ef:ec:36:fe:74:6d:
         06:20:9f:a2:ad:3a:0a:ab:a7:68:ea:2b:7c:c5:9b:77:35:99:
         83:b5:ce:e6:28:39:ec:ce:60:f9:3f:9b:f2:f5:12:52:ef:91:
         1e:9d:19:fd:82:67:d7:c3:b5:8c:1b:59:fa:49:60:06:9a:3e:
         69:4f:78:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----