Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
File:                     x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft (raw, json)
Hash identifier:          +mRGIf97WvxVVJTneQh635pGRN5rNxZFcaqLhfGYdiY=
Subject key identifier:   44:74:A9:14:32:D9:09:4C:5E:D5:9E:0E:6D:36:D8:0C:FB:5F:B9:D0
Authority key identifier: C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4
Certificate issuer:       /CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
Certificate serial:       01962F06FB5FEF68699398CBC1E8130399FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft
Manifest number:          0522
Signing time:             Sun 13 Apr 2025 12:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:48 +0000
Files and hashes:         1: x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl (hash: Sut0wJBhh93pWnb0spP7Y0WFgohueHRAfbCY1zdXCIY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fb:5f:ef:68:69:93:98:cb:c1:e8:13:03:99:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77b1969d9addf199632b4de05e8a20e3de7b6c4
        Validity
            Not Before: Apr 13 12:01:48 2025 GMT
            Not After : Apr 14 12:01:48 2025 GMT
        Subject: CN=4474a91432d9094c5ed59e0e6d36d80cfb5fb9d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:78:17:61:c6:5c:2e:73:da:5f:14:7e:45:ff:
                    08:27:68:39:63:3f:e3:58:54:cc:d0:72:f0:81:94:
                    87:bb:f3:9d:d8:fd:55:6f:7b:13:33:aa:c1:0c:d9:
                    f3:66:21:69:26:7e:b6:46:a6:f9:c5:24:e5:87:38:
                    a3:8f:55:79:d8:92:88:18:44:d9:c9:48:d9:e3:b7:
                    58:8f:6f:76:63:c1:ba:ad:b9:80:ef:8d:63:91:8d:
                    65:77:58:7e:9f:e5:14:f0:18:bf:1a:a1:ab:e9:cc:
                    1d:ac:d9:4b:70:4e:4b:5b:17:42:87:31:dc:65:34:
                    e2:1c:a2:71:0b:f1:0f:c0:dc:25:bd:73:66:45:af:
                    fb:93:84:96:c3:51:82:4b:7f:92:1d:ff:61:47:0a:
                    86:35:7b:5d:09:bc:0c:ef:11:79:53:53:0a:75:b3:
                    ab:20:3d:50:e2:53:88:72:6a:cc:66:0b:80:7f:9f:
                    33:3c:07:3e:89:de:3d:2d:ee:6a:95:a6:b2:cd:6a:
                    35:1e:43:23:94:e4:de:ce:7c:a2:81:7f:b1:7b:76:
                    2b:77:d9:52:0d:24:ab:8a:bf:68:d9:07:ec:d2:da:
                    4f:3f:d7:60:d1:c3:ff:03:c6:3b:19:5c:06:e5:8d:
                    7c:fb:56:71:7d:0b:6a:58:9e:95:9b:cc:3a:51:ac:
                    93:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:74:A9:14:32:D9:09:4C:5E:D5:9E:0E:6D:36:D8:0C:FB:5F:B9:D0
            X509v3 Authority Key Identifier:
                keyid:C7:7B:19:69:D9:AD:DF:19:96:32:B4:DE:05:E8:A2:0E:3D:E7:B6:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3sZadmt3xmWMrTeBeiiDj3ntsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49a802-636e-4f06-b779-7c782f6a46c7/1/x3sZadmt3xmWMrTeBeiiDj3ntsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:79:32:ce:c2:ed:41:a1:58:4c:63:fc:59:91:4e:5a:e7:35:
         16:40:30:bc:49:d4:de:98:88:f3:ae:03:60:92:da:17:0d:cd:
         05:85:6b:c7:65:b5:19:31:ad:39:62:74:40:c8:ec:26:e6:0b:
         0d:9c:55:17:60:f3:8f:aa:4e:a2:ca:77:a2:d9:67:c0:2b:12:
         16:03:bb:7f:52:fa:2c:3c:1e:02:e2:d0:81:02:33:66:f1:28:
         f8:d9:15:01:4a:b5:dc:9a:52:ac:6a:f9:0e:95:45:2d:f1:54:
         62:38:fd:24:7f:3d:1c:33:bf:3a:6c:7b:2f:72:f7:af:0c:91:
         03:df:2c:81:99:79:43:27:72:c1:07:1b:ea:64:f4:53:f3:62:
         5b:85:bb:f0:4c:84:19:c3:fd:b4:53:57:70:17:06:f7:05:cb:
         92:dd:2d:4f:a5:7a:14:7f:9d:44:f1:a3:9f:32:5c:32:45:7f:
         61:83:91:1b:db:88:bf:5e:36:e9:09:35:13:b1:28:bf:d2:7b:
         c7:e4:15:db:15:64:45:80:9c:1d:3d:b0:f2:eb:66:9f:fa:d2:
         55:8a:0b:f2:8f:07:84:f0:90:73:d8:54:aa:c0:c0:38:47:0c:
         ad:27:5c:83:34:25:95:23:24:b2:29:67:31:fe:a6:12:40:55:
         95:12:1e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----