Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
File:                     3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json)
Hash identifier:          L4szMczbSdpX6ZMfNhJU5zD6L1VGp+nbJPV22Gqc2KU=
Subject key identifier:   89:35:99:74:83:AE:6E:F2:7E:AA:60:69:37:8A:6C:42:3D:3F:50:27
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Certificate issuer:       /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial:       01962FAB2CF6F61C528EEDFBF9A69641EA5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
Manifest number:          14F3
Signing time:             Sun 13 Apr 2025 15:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:09 +0000
Files and hashes:         1: 1-r8ngTnAMIWnigi3kZKRlPxzAEg.roa (hash: 4upInjfh8BMDhZW1GMRFLRcUKFy4sgss61UjVbuCcN4=)
                          2: 3bHFI98fNrO-AI7iYMdoY6Cy4Ec.roa (hash: jNavEGcWKNfNKB84/MmKoUJXT5oHj4PAQhOkM5ErTv4=)
                          3: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: YIk8y2ChAJFRxvpMTPEljrzwIVOUqoq7JPUJeW2C9Cs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2c:f6:f6:1c:52:8e:ed:fb:f9:a6:96:41:ea:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
        Validity
            Not Before: Apr 13 15:01:09 2025 GMT
            Not After : Apr 14 15:01:09 2025 GMT
        Subject: CN=8935997483ae6ef27eaa6069378a6c423d3f5027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:14:16:a9:1a:34:93:99:56:cd:e3:26:1c:10:
                    fa:13:6e:97:07:cd:0a:5f:89:b8:89:75:38:b3:bc:
                    a3:80:9e:f2:48:74:f3:9a:72:92:39:51:b3:09:19:
                    b4:35:76:4f:9e:2b:ac:b9:73:cd:8a:59:10:7f:a8:
                    1c:91:f5:05:60:97:e7:2e:5c:5e:d8:33:92:a4:72:
                    d2:40:8c:28:41:35:2b:c6:0f:fb:55:37:df:da:ff:
                    57:73:cd:0f:db:ad:3c:dc:25:15:15:b8:02:df:8a:
                    d5:a0:8b:24:f5:80:4c:03:ed:86:d9:de:49:ad:60:
                    3c:c5:35:4a:b8:1a:c5:1f:51:88:d4:c3:65:36:78:
                    cf:1f:89:0c:a8:6c:08:10:4b:73:a6:5b:0b:cd:aa:
                    c4:87:35:bd:e3:de:7d:57:7d:53:3d:5f:e7:87:a5:
                    c2:62:f0:a1:0a:1b:c0:6d:03:6e:ad:68:91:34:2b:
                    3b:24:01:6b:61:69:c6:2d:65:a0:c9:43:17:fd:36:
                    99:bb:fd:6f:08:2b:e5:ab:cb:da:81:06:ec:bd:76:
                    34:dc:a0:47:b0:ab:af:0e:9a:52:98:87:59:1e:e1:
                    ae:fd:45:41:fc:c8:36:35:1e:25:f9:3b:23:4d:0a:
                    89:c2:50:7f:54:f7:04:8e:a4:a9:84:14:9d:5b:18:
                    bb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:35:99:74:83:AE:6E:F2:7E:AA:60:69:37:8A:6C:42:3D:3F:50:27
            X509v3 Authority Key Identifier:
                keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:2b:63:95:a0:e3:58:f5:df:a8:e0:c5:75:fd:7c:67:29:af:
         2e:f0:72:19:e0:a7:25:b2:b6:a0:64:62:67:54:3c:c0:61:0d:
         b0:f6:13:6b:c7:62:31:bf:9a:ef:f3:e1:b8:0a:fb:4b:95:81:
         07:7d:f9:27:38:78:99:f6:96:64:fb:58:41:b4:39:54:57:8d:
         96:23:bb:7f:e7:44:ce:77:72:84:af:9a:8a:4a:51:f0:b2:ed:
         b1:bf:b6:50:bc:1c:42:89:7f:c0:02:86:2e:44:09:16:48:a1:
         3e:25:f3:1a:84:19:02:24:a4:71:3d:3f:e3:24:07:82:a8:68:
         ce:3d:52:24:23:c1:a9:7c:52:bc:86:90:82:48:c4:20:5d:8d:
         17:2a:5e:35:21:bb:b5:27:8b:7f:5a:52:cb:d7:eb:07:0a:f2:
         e1:40:8d:03:08:c0:0a:d3:ae:88:28:bf:29:27:9c:bc:9c:af:
         90:68:03:8d:b7:7b:68:77:da:33:2e:1d:dc:e6:62:2a:7d:1f:
         76:4a:54:00:5f:3e:70:f6:dd:fe:39:b2:40:8a:c2:fd:ae:c7:
         ea:a9:ff:b0:c0:c7:64:4c:e9:4e:a4:84:92:bd:38:fe:07:08:
         7e:12:70:bb:e2:5d:44:cf:8b:ec:f4:90:65:ce:8e:69:b7:b5:
         40:e9:06:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----