Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
File:                     3DiEAh0bAujBa1VXQ9_rnajkjjE.mft (raw, json)
Hash identifier:          gRn2YmO5fJjoU15/IbZ0kFeVzqHlDOspJGQH9OcoKSM=
Subject key identifier:   BA:60:98:C5:83:A6:65:4F:50:50:50:42:09:53:1A:20:A8:66:D4:A1
Authority key identifier: DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31
Certificate issuer:       /CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
Certificate serial:       01962FAB26BEEB750164143229D5AAFF4CC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 15:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:07 +0000
Files and hashes:         1: 3DiEAh0bAujBa1VXQ9_rnajkjjE.crl (hash: qjnKh+N3IlXOo48uJFabmvXOJbqqu9LNJEcRABBzis4=)
                          2: Fv3sE2iVskV-mDIZ6tC2kUlGAaA.roa (hash: H3F5XuYvkLtvyyyPb3WNBs3Jib+ztvm2aFiyN79ql3U=)
                          3: Lf6gNW4pB2_3G8WJ1gs4diM2dp4.roa (hash: KsApADDkWth8orQKJUtme8wDWNYjMSX9ur5fZXW4Ab8=)
                          4: MC2jKTT_qt4dQPRJuzCLJkn3dIY.roa (hash: 690YFNoA6dF93SoBbsIHXRbUtNVseAW76vFSFSdgmtM=)
                          5: Y7R0jQTyur7PS79n24V95dokJ1E.roa (hash: kBuKXhAOJMq8DqLXajUVs2ZVCA0WRxqfHOvHHVdd1e0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:26:be:eb:75:01:64:14:32:29:d5:aa:ff:4c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
        Validity
            Not Before: Apr 13 15:01:07 2025 GMT
            Not After : Apr 14 15:01:07 2025 GMT
        Subject: CN=ba6098c583a6654f5050504209531a20a866d4a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:58:82:b8:61:65:29:ec:20:d7:6d:c9:4a:ac:
                    21:f5:94:91:59:39:66:37:ec:2c:69:8e:5b:2e:b8:
                    0a:c1:ff:12:e1:2e:0c:bd:87:8e:40:8b:4a:70:b9:
                    c2:b5:e8:23:de:7a:26:63:0c:62:5e:af:6f:97:44:
                    ee:d4:48:8a:d4:4f:c1:dc:0e:0d:b6:f6:e6:5c:e3:
                    5e:d6:cc:a6:c2:e7:b1:5b:e6:33:6b:b2:99:f5:b2:
                    c9:38:fc:c3:90:ae:f0:e0:bd:db:4e:44:ca:8e:b3:
                    59:63:f7:81:db:4f:38:ff:3c:91:f4:4d:ac:0a:5e:
                    a3:55:fa:1d:48:d3:8c:4b:1e:07:b6:ad:cc:00:94:
                    a5:52:a1:dd:52:70:f0:99:dd:f8:16:12:13:95:e4:
                    46:b9:1e:b7:66:47:2e:66:50:09:44:18:41:c8:5b:
                    40:1d:20:ae:ea:af:59:15:b2:60:41:3d:0d:99:77:
                    fb:fc:d7:da:99:d2:f2:6a:f6:58:76:80:65:4b:dc:
                    d9:16:91:b8:e2:34:62:8d:21:bb:e0:e9:f5:68:d3:
                    12:de:36:f7:e4:ec:8d:70:97:ed:2d:78:4c:4e:7e:
                    c0:2e:39:90:de:0d:45:3d:55:d8:d6:17:9f:75:dc:
                    1f:ee:35:59:92:cb:1a:e8:c8:f8:f2:91:30:ae:fe:
                    db:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:60:98:C5:83:A6:65:4F:50:50:50:42:09:53:1A:20:A8:66:D4:A1
            X509v3 Authority Key Identifier:
                keyid:DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:d3:78:d7:f1:52:5c:b4:03:52:4f:a9:f7:99:56:bf:02:46:
         96:69:06:f1:26:07:54:f1:67:4a:2b:b7:33:1e:85:31:30:43:
         9d:0e:5e:e7:bf:3c:0e:89:20:80:85:22:66:a2:46:4b:e4:41:
         99:dd:4f:b3:9e:f6:ce:52:5a:1e:da:d9:8b:49:d1:09:09:cf:
         4f:91:5c:e4:c4:c3:90:88:2b:1c:69:8e:13:7b:36:39:71:99:
         cf:3c:1c:78:75:97:b3:3a:a4:6e:ab:1a:46:1f:a1:b2:23:f9:
         1d:b3:b5:71:19:ac:62:30:86:c8:41:ae:58:40:bc:53:83:72:
         c3:64:29:97:c8:9c:6b:fa:1e:15:37:a1:23:3f:55:4b:6c:58:
         9c:bd:da:17:1c:16:3e:4e:61:cd:57:c8:af:95:91:27:8f:3f:
         e4:99:14:53:2c:17:6b:d6:a9:12:cc:72:12:eb:97:63:38:21:
         58:e8:6b:3d:bf:0d:d4:75:0e:76:14:70:1f:44:aa:5f:c8:2f:
         0d:de:87:46:f6:ef:9e:f4:72:83:1c:6b:06:73:97:d8:80:bc:
         41:bc:16:c8:1d:35:c7:5a:a7:28:f8:9f:eb:00:fa:ee:42:65:
         90:05:80:c6:92:b1:00:f8:6e:11:ec:dc:24:92:00:6b:6e:5c:
         18:7a:39:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----