Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
File:                     481lehIFMt8z3lD-GsKzYgrErk8.mft (raw, json)
Hash identifier:          CQPx8pfnehnsBpnBso8NRXph0paCnBOR57cJUI6AvPU=
Subject key identifier:   3A:B7:07:BC:A8:82:26:C9:64:55:D0:59:47:D9:DA:F6:68:10:29:BD
Authority key identifier: E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F
Certificate issuer:       /CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
Certificate serial:       01962DF414F7D5C9FBA924BE024AB4E791A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft
Manifest number:          03DE
Signing time:             Sun 13 Apr 2025 07:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:32 +0000
Files and hashes:         1: 481lehIFMt8z3lD-GsKzYgrErk8.crl (hash: S/NMHyCqSdlAZVSnhkT7bncrjPudrKJa4lfMN/fbwOE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:14:f7:d5:c9:fb:a9:24:be:02:4a:b4:e7:91:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3cd657a120532df33de50fe1ac2b3620ac4ae4f
        Validity
            Not Before: Apr 13 07:01:32 2025 GMT
            Not After : Apr 14 07:01:32 2025 GMT
        Subject: CN=3ab707bca88226c96455d05947d9daf6681029bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:92:c7:d4:95:1b:7c:14:f2:77:cd:6a:ca:90:
                    ff:2d:2b:40:09:70:09:14:e0:35:3e:83:c4:b4:99:
                    5a:50:e1:43:8a:ec:43:f6:5f:d8:37:52:58:07:ee:
                    71:a7:de:aa:d2:01:27:e8:b2:e0:71:cf:0f:0d:41:
                    d5:0f:71:ae:eb:64:c1:52:d6:02:8d:57:f5:98:2c:
                    ba:e3:65:5e:32:7a:53:66:24:d8:3b:b8:5a:4b:de:
                    99:e3:da:a4:c6:6f:48:d5:99:d2:90:5e:a5:85:24:
                    51:8d:dc:99:32:f5:c7:68:0b:f5:c8:f2:00:36:da:
                    e6:c5:d5:ed:e9:d0:6e:45:ed:83:f6:82:e3:0a:08:
                    af:a3:f4:26:44:a8:9e:e0:2d:52:9a:1c:93:a9:dc:
                    42:46:8b:f6:4b:20:8f:f2:c1:d4:df:3f:87:8e:a4:
                    73:26:c8:bc:db:3d:0f:25:0e:8d:f0:77:ef:67:4a:
                    37:27:95:4c:98:5b:2b:f9:0e:b4:5a:60:c3:ff:09:
                    10:5f:22:4d:70:b7:e3:7e:d7:11:01:ee:57:bd:8a:
                    69:b2:73:99:3e:7a:d5:ef:48:58:ab:d1:61:5c:e7:
                    a4:b2:29:48:ab:23:67:53:09:ae:d3:df:8f:df:38:
                    52:bd:74:f0:38:82:8a:9e:7f:32:9a:28:0c:ad:15:
                    0c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B7:07:BC:A8:82:26:C9:64:55:D0:59:47:D9:DA:F6:68:10:29:BD
            X509v3 Authority Key Identifier:
                keyid:E3:CD:65:7A:12:05:32:DF:33:DE:50:FE:1A:C2:B3:62:0A:C4:AE:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/481lehIFMt8z3lD-GsKzYgrErk8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/772476-a283-4656-a614-0f956caf803c/1/481lehIFMt8z3lD-GsKzYgrErk8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:74:f6:d9:28:23:4e:ca:a3:a2:b8:b8:dc:19:50:1a:09:65:
         36:55:c3:fa:20:03:61:06:a4:9a:38:79:8a:58:8a:15:0b:04:
         04:50:c0:ed:58:08:d9:a4:16:2c:56:04:d3:aa:51:86:d1:ec:
         a4:59:aa:9a:ec:2c:8d:a6:38:b1:a8:70:33:37:1b:df:6f:e8:
         ee:27:a3:5d:a1:e7:23:8e:eb:b2:f8:e7:83:a2:38:18:b9:ae:
         a2:3f:0a:79:1f:54:20:27:74:6a:1f:28:b0:25:60:79:1a:cb:
         7e:5f:c1:a7:91:06:82:da:20:a5:be:b9:b3:ab:08:3d:ee:57:
         b3:97:3d:dd:23:a8:0a:f8:7e:58:e6:36:3b:7e:b6:e2:1d:f9:
         a8:ae:d0:bb:4e:c6:36:63:1c:42:f7:0d:7f:b1:1e:ba:38:8e:
         f4:13:1e:19:20:7f:e7:6b:5d:bb:ea:27:d2:80:18:9b:eb:a8:
         54:40:f3:34:2b:a3:f1:08:27:ad:11:22:b3:68:15:80:fa:10:
         77:93:5e:3b:65:a6:6b:af:cb:a2:0e:15:db:c1:33:77:cd:40:
         23:de:3b:5a:0d:48:e5:85:73:0c:91:1f:38:55:82:87:b0:a6:
         f3:bd:7b:d9:28:5b:54:10:ab:80:c6:f7:6e:ac:6e:c9:25:fc:
         2a:58:93:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----