Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
File:                     3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft (raw, json)
Hash identifier:          Fo0DA6MFkMvYgk+3ZJ02jRneQ6vGRCydujl8mrWgc3k=
Subject key identifier:   C7:48:EF:10:FE:4E:99:26:FE:85:FF:79:A1:57:87:C4:52:91:D0:4E
Authority key identifier: DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E
Certificate issuer:       /CN=de51da32762a6f9c126d63ba705d62c050b8484e
Certificate serial:       01962ECFDEBC6F6CFD11FD8EB7351C756C75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 11:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:36 +0000
Files and hashes:         1: 3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl (hash: q6N9hoNSXke5kS7S+icLkFNevRHcLXerB63HIniGWzQ=)
                          2: aUaxmc4yn8DWQgssucohLW2GTOs.roa (hash: SOdn4BM+lJeHsX2EdSBfNJjI/S1sYp7gdR+GcCunEpg=)
                          3: v8c3Ww_Eihi-LvyDOVvXBJwo9F8.roa (hash: 0sTmm1OvDNHW8cfRGw9gOppSFK5VfYqSrXVw8T0yJBM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:de:bc:6f:6c:fd:11:fd:8e:b7:35:1c:75:6c:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de51da32762a6f9c126d63ba705d62c050b8484e
        Validity
            Not Before: Apr 13 11:01:36 2025 GMT
            Not After : Apr 14 11:01:36 2025 GMT
        Subject: CN=c748ef10fe4e9926fe85ff79a15787c45291d04e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ed:9c:94:cd:c5:97:c3:3b:d8:b4:c9:e7:53:
                    07:10:68:09:c5:af:47:9d:60:9e:fe:6f:b8:f0:e1:
                    9c:65:e6:44:11:a3:7e:f6:47:a3:fe:cc:bf:f1:33:
                    6e:c0:eb:54:9a:8d:e0:5e:63:8a:c8:01:d5:19:be:
                    9e:23:d6:d6:92:15:e0:e0:22:9d:2a:7e:8a:d4:f9:
                    59:78:ee:81:3f:40:d2:23:b9:fa:52:ec:88:d5:0d:
                    fe:72:bc:3b:92:e1:19:7d:cc:51:87:b0:80:9d:10:
                    cf:63:f2:54:d0:e5:34:5d:b0:a9:81:12:18:00:19:
                    b2:39:a2:0f:0e:35:60:05:71:02:4e:1c:d1:b3:f4:
                    45:08:8a:66:e3:2a:36:35:ab:ac:65:c7:ac:ed:a3:
                    3c:a5:65:4f:08:f0:d3:65:80:b5:b2:e1:ea:f6:7f:
                    cd:69:1f:60:1a:f7:16:7a:bd:81:87:34:a5:cd:8f:
                    86:74:a3:de:81:e6:c1:25:5c:a1:21:f7:35:49:fb:
                    bc:db:1b:72:a9:54:ce:c5:33:21:9e:dc:ad:e7:9f:
                    fc:5d:36:71:93:34:94:6f:f7:a4:f0:8e:88:92:f8:
                    05:f6:aa:fe:d0:1a:b4:ad:b6:eb:76:02:40:f0:6b:
                    5f:15:37:09:c2:0d:25:25:aa:9d:52:eb:7c:66:20:
                    e5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:48:EF:10:FE:4E:99:26:FE:85:FF:79:A1:57:87:C4:52:91:D0:4E
            X509v3 Authority Key Identifier:
                keyid:DE:51:DA:32:76:2A:6F:9C:12:6D:63:BA:70:5D:62:C0:50:B8:48:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3lHaMnYqb5wSbWO6cF1iwFC4SE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f70db4-62ea-49db-8319-cdfa60122690/1/3lHaMnYqb5wSbWO6cF1iwFC4SE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:5a:4f:7b:8e:30:83:c4:60:b6:3c:a1:96:85:8c:ab:a5:37:
         f2:5d:8b:3d:88:66:23:db:05:08:8e:44:b9:4a:f7:44:bc:11:
         4c:a1:37:d6:d3:bd:96:c7:36:0d:d7:fc:de:a0:03:8e:11:ee:
         a5:14:fb:ca:70:5b:36:6f:7c:dc:68:33:01:21:5b:1e:76:1e:
         a7:c6:d7:87:c9:93:df:72:11:ea:c9:59:e3:f2:9d:2e:b5:04:
         b5:c3:49:f5:7e:31:91:42:de:d4:d9:b9:20:30:40:9d:5b:29:
         ea:9e:27:81:c3:30:7a:e2:ce:6f:a9:b8:3f:cc:ca:e1:06:51:
         64:7f:76:68:0c:f1:88:c0:62:70:70:1f:a2:93:4b:ae:c6:be:
         4c:47:f3:37:4d:15:de:3f:5f:82:c6:8b:2e:c6:ab:7a:77:32:
         69:c7:e7:fe:05:32:14:30:90:93:14:64:17:f6:c2:b9:bb:84:
         f9:b6:0c:01:d6:9c:a1:e8:be:94:6f:3e:fb:6b:0f:50:65:f1:
         8f:53:09:2e:be:c6:ab:3f:a9:82:c5:0c:43:5b:43:5a:5e:7a:
         3e:6e:7e:9e:ff:34:a3:1b:97:16:54:d9:5f:5a:01:c9:62:e8:
         b3:5b:f1:83:5c:c4:12:2e:0e:d6:64:f8:84:3b:d5:41:79:19:
         2c:5d:59:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----