Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft
File:                     itKTDR_h3UMEkf17gx3pxhaSreQ.mft (raw, json)
Hash identifier:          VriJV9AMEmnnOtBA2TbQiRao5zHe7F8NdmRxnxMzuiE=
Subject key identifier:   E3:A1:A2:6A:D0:F7:7F:31:67:7A:C2:DF:D1:30:FF:EF:C8:DB:FC:AE
Authority key identifier: 8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4
Certificate issuer:       /CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4
Certificate serial:       01962F3D995D6A5841B66919852936DC57B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft
Manifest number:          1219
Signing time:             Sun 13 Apr 2025 13:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:28 +0000
Files and hashes:         1: BAzsPPCBy1zDTboFw5Sl-2syIOA.roa (hash: 3HXxwP+fQhhVnJuWOZekRFhU3Q46kmrc9Y0dZLDklcg=)
                          2: bYpyeHiVOX2l8iPl-uPkAX9zfmw.roa (hash: clblsPlZTuaRgRGxz58OPeCdg4rL7htkupWPy4rOhKg=)
                          3: itKTDR_h3UMEkf17gx3pxhaSreQ.crl (hash: 2BVzsT1GkkCWi6QRg+Ek4DHn9ff4BnwK2LHqpi/XTgw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:99:5d:6a:58:41:b6:69:19:85:29:36:dc:57:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad2930d1fe1dd430491fd7b831de9c61692ade4
        Validity
            Not Before: Apr 13 13:01:28 2025 GMT
            Not After : Apr 14 13:01:28 2025 GMT
        Subject: CN=e3a1a26ad0f77f31677ac2dfd130ffefc8dbfcae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:00:65:fd:16:11:cf:e7:c6:35:b3:16:4e:9e:
                    44:1f:80:d9:be:a5:12:67:4a:25:ce:21:f8:7e:84:
                    08:bd:d3:56:af:2d:56:e2:5b:6d:eb:0f:e1:36:7a:
                    ec:7a:cb:78:47:74:d5:75:2b:7c:90:e6:0a:a9:dc:
                    03:e4:4b:ce:e6:7d:d8:08:5f:d5:54:51:25:e7:18:
                    f4:e0:0b:3f:04:0c:60:9d:72:4a:cd:c7:6c:20:65:
                    a5:e6:3d:28:e8:99:d1:87:4f:c0:83:cf:76:5d:10:
                    95:b5:5b:86:2c:7c:dd:85:be:d7:b1:0b:d1:1b:bc:
                    20:58:d4:10:96:c2:6e:52:5a:55:8f:41:d5:e3:28:
                    af:43:75:86:01:26:45:18:73:bd:c1:69:ba:c9:b4:
                    a9:35:e2:37:7b:1b:d9:58:d2:55:ff:fa:1b:38:a9:
                    d2:c1:a5:a1:c8:1d:17:9d:d6:f7:a6:ea:50:32:43:
                    fa:f8:5b:44:da:9f:ff:9d:e9:a3:5c:92:85:2c:26:
                    b3:e7:47:ac:85:ed:83:28:68:7c:54:83:49:d6:8f:
                    94:ce:d7:e5:0a:c5:de:2c:5c:74:00:fc:98:37:a1:
                    12:20:55:97:0c:95:1d:da:84:3f:6a:08:f1:84:72:
                    d0:6d:7b:d5:76:69:a4:62:9a:7e:df:5a:fc:04:eb:
                    bc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A1:A2:6A:D0:F7:7F:31:67:7A:C2:DF:D1:30:FF:EF:C8:DB:FC:AE
            X509v3 Authority Key Identifier:
                keyid:8A:D2:93:0D:1F:E1:DD:43:04:91:FD:7B:83:1D:E9:C6:16:92:AD:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itKTDR_h3UMEkf17gx3pxhaSreQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/be7894-0ccc-4fbd-880b-9758cb2b844e/1/itKTDR_h3UMEkf17gx3pxhaSreQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:3b:94:e5:17:93:a1:22:29:b8:b5:2d:94:8c:f3:e0:80:21:
         22:d4:1b:3f:fd:4d:65:8d:b9:60:80:d3:0e:9e:4b:d6:71:39:
         dd:ae:a2:ce:e0:68:74:ee:8f:cc:a5:c1:41:95:e7:81:e8:3d:
         89:d0:fe:89:c4:db:fa:5a:17:cb:21:7d:12:3b:01:50:d7:3d:
         3c:a6:4f:e8:38:dc:6e:ec:ab:7e:5c:f8:00:8f:a3:8e:11:29:
         e3:e4:39:54:e7:67:0e:a1:8d:c9:68:ce:c7:be:6b:8e:6d:45:
         9f:09:4b:0a:4a:30:ac:f7:64:f3:01:11:2f:88:53:48:b9:13:
         9f:0a:a6:50:2d:d1:a4:c8:ce:ca:29:1c:01:d9:63:38:a4:e9:
         77:db:ff:6c:10:65:19:e1:5f:ce:aa:c2:f7:35:6c:9d:6f:d6:
         c9:12:39:ce:38:29:6e:1f:05:b2:ed:93:56:e4:e7:c8:c9:3f:
         e3:bc:02:14:27:97:9a:32:37:98:e0:2d:8c:08:50:df:b1:6b:
         99:b3:5a:f0:6d:cb:6c:d6:53:91:ca:cd:84:d0:c6:06:ac:58:
         e2:fe:25:1d:d1:18:6f:3c:1a:ce:5b:35:5e:03:42:0b:c9:13:
         aa:04:7e:66:c4:b2:83:00:30:b6:5c:02:e2:fa:8d:5a:1d:b7:
         a5:83:2b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----