Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
File:                     3_JHJt8-d_b0yOBDZhOzURDurzg.mft (raw, json)
Hash identifier:          bHOW6iKaz1rh4HpcZFn9GJ/3bmxpL9+YmMK07Fci2Mk=
Subject key identifier:   1B:FA:A0:70:0E:77:0D:84:A8:35:CA:4D:FE:6F:D6:C5:56:69:E6:D1
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Certificate issuer:       /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial:       01962F74B0D09A9DB4385732995C6087863A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft
Manifest number:          10DE
Signing time:             Sun 13 Apr 2025 14:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:38 +0000
Files and hashes:         1: 2t-i2kopwR52Z_Mpc2NKni29tLQ.roa (hash: tZUsUngIszxCM0ZEk2P0zYz3h8rOxng23uEouu0fEOA=)
                          2: 3_HM3LXI2dI7yCUkbwsS0LVmtPQ.roa (hash: dlvoBhBeGam9xbjGOiUpXKoso+XH3qNTVfnBCvdbd3Q=)
                          3: 3_JHJt8-d_b0yOBDZhOzURDurzg.crl (hash: KakaiWKM1VucNscgL+vIj95RouSkNdyf0mkxoe/mfQ4=)
                          4: E_7EA8UJkxlGETtzRt_qHmFJYsI.roa (hash: 407g7UlI6CqSY6AOA+kHrysQofaOwh0+lRwTxsDvEPM=)
                          5: EgzHUocwnSDaTR0mcH1N2AahbPA.roa (hash: qnns/hwFAonNH2cGnXK7MoaWY9Y+ZF5REF6qTFex00M=)
                          6: EqWJbW00yHom-8ojBy6QYR1H3FM.roa (hash: jchk7todvo3pxE5MJlQ/7M5jHRN15mY+WmGn6RIiL74=)
                          7: KByvn3G9xMi5zVMf2hfCx6ANxyI.roa (hash: h4AZQDVtiSftBpybDJxG4QIlGy8TOkA79xpxhxDweg4=)
                          8: LBBRl1_5PTCAndMsefaH2qIgsWI.roa (hash: P4yu/hSYw0dip59FJgO1wKqB51hJxMddEa7BdAJON18=)
                          9: SFJQLYtyuvLa-Z-_p6GETmClzzQ.roa (hash: TpY/D4v+35T3Gg8FMD0C6YxKf8fx/yuDpF1EWp6QNws=)
                          10: SW2UHW6XXrCRSFkNV0CVmfSilT8.roa (hash: OU29d/hqTbWW7Cob/3TqpwPxH+8rWvDwLVXV+Khg58o=)
                          11: gLpL93_717seB53wtn-PIYRSJpQ.roa (hash: BEBryS8Pk5M96RkjmV9ApUKiEfxXTgBuMMQoR0rPtvE=)
                          12: qIy8EEGEKThhCv4eyhu0aaS6jQQ.roa (hash: FTpKxy8SMv8Ii+e2R+cokRiry1onK0HB+M+lb5hU0DQ=)
                          13: sl5VJ3i7CbF6mq-XTH5pxWMmK5o.roa (hash: 4bfJxuYHYnVskQrhNVV+ZwN1afVTdgzyH0yWLAaqMRM=)
                          14: yiW-kmeX6T3jx-yL7EZZYoVvwps.roa (hash: QstF1sZuORe/6EM2aW5TGBrHuj8rjUHPJQAAamVQG0Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b0:d0:9a:9d:b4:38:57:32:99:5c:60:87:86:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
        Validity
            Not Before: Apr 13 14:01:38 2025 GMT
            Not After : Apr 14 14:01:38 2025 GMT
        Subject: CN=1bfaa0700e770d84a835ca4dfe6fd6c55669e6d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9b:ec:06:5d:c3:59:7e:1d:65:88:e3:83:12:
                    ee:ed:8a:33:b6:64:80:8f:3a:ff:1c:11:af:4f:c6:
                    9b:09:d6:39:37:09:d5:da:27:88:62:62:0b:8a:fa:
                    c8:49:db:2b:01:5e:4b:09:9f:65:d5:85:b4:72:2c:
                    6c:23:94:19:42:e9:0a:11:7c:30:cc:8a:33:73:ca:
                    b8:78:12:37:19:a0:ca:b2:48:b5:7d:2e:66:37:2f:
                    b9:05:82:6f:a3:7a:67:6d:37:02:b4:73:37:17:a4:
                    54:be:bd:c7:ad:5d:d1:53:ce:65:f9:3d:bf:78:9c:
                    dc:e9:d5:ec:f0:96:dc:c5:5d:12:37:e9:6c:bd:42:
                    b9:05:b4:14:0b:f5:1d:db:eb:80:0d:95:08:fe:af:
                    24:58:6e:d0:bc:9a:c3:21:57:47:83:29:dd:60:e7:
                    a0:34:d9:73:d6:38:fd:96:1f:6d:ed:07:a4:20:b0:
                    23:6b:43:b2:45:35:61:38:4f:75:73:f2:c7:d1:f9:
                    6d:07:97:da:71:ec:69:44:11:42:fa:c6:14:29:39:
                    a9:f2:a9:d6:88:9b:91:01:b4:42:72:14:8a:63:25:
                    03:f2:1f:fa:67:96:0e:50:07:8f:86:cf:42:91:3c:
                    cb:e0:ce:60:bb:a9:bf:cd:90:1d:99:50:75:bc:54:
                    85:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:FA:A0:70:0E:77:0D:84:A8:35:CA:4D:FE:6F:D6:C5:56:69:E6:D1
            X509v3 Authority Key Identifier:
                keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:83:13:70:8b:57:26:45:2c:72:06:be:3b:78:c1:94:49:f0:
         c1:18:f2:6a:ed:f1:df:d9:68:1a:97:86:65:17:62:2a:f4:54:
         ea:9a:5f:6f:d0:d4:09:7e:83:aa:1c:fd:6c:0c:07:e1:90:38:
         99:a0:53:9a:48:cc:52:34:5a:b6:5e:da:84:83:1b:eb:31:81:
         ed:33:4e:b0:5c:88:22:71:ed:b9:d7:85:dd:20:0e:8f:23:3d:
         ef:6b:fa:b8:7e:a2:4d:46:a4:bf:37:a9:ab:f7:26:b4:54:83:
         3a:0c:2f:48:11:3d:40:4a:f1:62:cd:ae:52:fd:a0:20:fc:99:
         77:cd:b7:55:7d:b0:13:18:ed:07:7d:72:ca:0f:06:fb:c5:77:
         2e:68:11:a5:0d:87:64:27:a3:86:3b:af:14:c5:c4:21:e0:56:
         53:14:e2:97:e3:d2:db:75:00:e2:0e:9c:b2:97:fa:9e:04:fd:
         af:f6:45:a6:ed:73:6a:58:d5:41:72:7f:6a:5c:ed:61:8f:4f:
         93:18:fc:d1:c4:94:d1:7f:d2:9f:c0:f8:85:bc:fe:26:fb:c7:
         97:42:eb:8b:ab:9a:45:44:f9:33:bc:93:46:f7:01:4d:86:8e:
         08:5f:32:0d:a9:39:04:60:e3:e9:8b:71:b8:46:42:d6:03:22:
         5f:64:ef:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----