Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.mft
File:                     dCadQgSZl1rpNPNM45WTgRTJuns.mft (raw, json)
Hash identifier:          h/W0w14tZr0dCVo7N/MyQYYamHq3VKMGGZw3ZPFOuck=
Subject key identifier:   C3:94:97:4F:24:B1:5E:79:F8:BF:68:E1:E2:AA:4F:2C:57:A9:F5:D1
Authority key identifier: 74:26:9D:42:04:99:97:5A:E9:34:F3:4C:E3:95:93:81:14:C9:BA:7B
Certificate issuer:       /CN=74269d420499975ae934f34ce395938114c9ba7b
Certificate serial:       01962E996738177B7F6E2A03967B9D415522
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dCadQgSZl1rpNPNM45WTgRTJuns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.mft
Manifest number:          103E
Signing time:             Sun 13 Apr 2025 10:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:07 +0000
Files and hashes:         1: dCadQgSZl1rpNPNM45WTgRTJuns.crl (hash: wHvPRVEtaU6NTVTszIWoIDo9WjStlV6W8Z/TlevKedE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:67:38:17:7b:7f:6e:2a:03:96:7b:9d:41:55:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74269d420499975ae934f34ce395938114c9ba7b
        Validity
            Not Before: Apr 13 10:02:07 2025 GMT
            Not After : Apr 14 10:02:07 2025 GMT
        Subject: CN=c394974f24b15e79f8bf68e1e2aa4f2c57a9f5d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6f:bd:fe:31:6b:c1:a5:56:5f:ab:ea:25:e5:
                    7e:a5:2d:d3:df:15:d9:ee:b9:39:7e:63:8c:87:d8:
                    97:37:d0:17:e0:4f:9c:8e:4a:0a:6d:66:2b:4c:45:
                    81:4e:ed:d3:62:4b:e0:73:1c:cd:dc:d2:72:ad:5b:
                    05:9a:a9:77:25:52:39:0e:58:ca:e5:47:1d:17:28:
                    26:13:b8:ba:09:8c:4c:ab:48:c6:51:a5:1f:93:ab:
                    f1:8d:95:38:2c:41:1f:88:67:67:ef:d4:f9:bd:e8:
                    38:70:10:a0:9c:1a:49:40:88:37:34:f1:be:a5:18:
                    a0:21:0a:f4:d5:90:46:f2:21:8a:2a:7d:8e:4b:85:
                    72:dc:28:db:14:c9:c2:35:ce:23:df:e5:02:d8:7d:
                    85:2f:89:6b:a6:08:53:e8:db:94:e5:bd:20:eb:35:
                    72:e3:67:9f:f9:36:1a:a7:57:f8:24:9f:60:25:8c:
                    05:4f:cc:ff:30:d5:41:6e:15:59:4e:07:20:ef:c1:
                    b2:e8:6a:44:7d:27:3a:76:fc:f9:27:6f:d4:d6:f6:
                    91:e2:e0:63:37:27:2f:67:84:ee:9c:80:d1:01:2b:
                    90:ba:2d:9c:cd:fb:49:2b:40:0f:7b:4c:ed:64:58:
                    22:d1:87:86:87:b8:67:bc:ae:8f:67:86:a7:1b:8a:
                    ae:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:94:97:4F:24:B1:5E:79:F8:BF:68:E1:E2:AA:4F:2C:57:A9:F5:D1
            X509v3 Authority Key Identifier:
                keyid:74:26:9D:42:04:99:97:5A:E9:34:F3:4C:E3:95:93:81:14:C9:BA:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCadQgSZl1rpNPNM45WTgRTJuns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/49d813-2d9e-44b6-97ba-ea9c2c5222fb/1/dCadQgSZl1rpNPNM45WTgRTJuns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:82:cf:46:97:fd:cd:23:1b:5f:18:6f:23:eb:8b:3e:2d:30:
         2c:5a:cb:f1:a7:73:ad:4d:4a:3f:d1:b5:a2:50:e5:07:49:f8:
         17:99:71:d1:6c:a3:72:6c:7a:0a:0e:be:96:2c:e7:ab:25:de:
         f7:0e:75:62:db:bc:54:2d:eb:6a:83:4e:6d:67:2b:a1:f0:bb:
         f2:e3:82:b8:e9:3f:96:d7:68:6d:7c:01:0f:e9:d4:ed:c9:11:
         79:8e:b1:ad:3d:23:58:6a:a8:64:fe:40:8d:a4:4f:66:10:ed:
         03:e2:33:d2:e0:76:35:6b:d5:36:6f:17:24:51:22:92:b0:5c:
         f1:88:35:9b:a3:1e:db:df:c4:99:5d:07:64:63:a8:5d:66:57:
         bc:5c:a6:ce:0a:82:76:96:e1:14:6d:f3:f4:48:76:ef:65:fe:
         06:e5:e1:4d:4c:7c:6d:3b:42:05:e4:ca:1b:52:a5:db:51:ac:
         4e:8f:b7:ee:65:fa:0f:3e:91:d5:c7:80:73:8d:e5:a9:52:f7:
         5b:9c:3d:63:64:1e:8d:ad:b1:ec:45:9f:4c:87:b1:20:27:6a:
         12:76:27:8c:d3:5e:dc:f4:9d:e4:f3:5b:db:72:da:0d:76:be:
         c4:e5:7f:c8:18:d7:12:94:a2:37:68:38:f3:db:91:a3:4e:6c:
         0d:9e:20:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----