Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.mft
File:                     d_bMQsdY59p8S_q8ISEtHSghYDE.mft (raw, json)
Hash identifier:          ECJ8bLZTAxtKzfThfuib1zALeO5LOCsRXt6ub7wkMlI=
Subject key identifier:   3D:5D:37:A3:34:61:F0:3C:A7:06:86:8A:DB:31:22:2E:7D:87:B4:CC
Authority key identifier: 77:F6:CC:42:C7:58:E7:DA:7C:4B:FA:BC:21:21:2D:1D:28:21:60:31
Certificate issuer:       /CN=77f6cc42c758e7da7c4bfabc21212d1d28216031
Certificate serial:       01962F063FED024F620EE03B454C103607B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_bMQsdY59p8S_q8ISEtHSghYDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.mft
Manifest number:          04B3
Signing time:             Sun 13 Apr 2025 12:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:00 +0000
Files and hashes:         1: d_bMQsdY59p8S_q8ISEtHSghYDE.crl (hash: IeCc+SLyGDyQTNhj2VqI/pw0IwosOcQWA3erwfE3xLc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:3f:ed:02:4f:62:0e:e0:3b:45:4c:10:36:07:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f6cc42c758e7da7c4bfabc21212d1d28216031
        Validity
            Not Before: Apr 13 12:01:00 2025 GMT
            Not After : Apr 14 12:01:00 2025 GMT
        Subject: CN=3d5d37a33461f03ca706868adb31222e7d87b4cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:65:02:d7:44:98:dc:8f:d2:ae:49:a5:62:ad:
                    a6:7f:a6:1b:9d:e1:4b:79:b5:5f:19:af:0e:13:ea:
                    4d:f9:bd:81:49:f6:84:ff:5d:b0:97:5f:a2:9c:1c:
                    32:d3:6e:5c:04:ec:d1:4a:3f:31:c9:69:ee:4a:8a:
                    5e:1c:14:44:cb:ec:73:50:3d:7d:3a:14:e6:12:d1:
                    5a:3c:6b:bd:4a:02:72:d7:e5:8e:ca:9f:0c:41:d3:
                    cf:d4:60:ad:5d:f6:e8:d1:88:4b:7f:72:75:60:dd:
                    33:09:8f:c9:c9:4e:e4:5e:65:90:94:8d:b7:94:a4:
                    51:83:2b:0f:df:86:5f:a3:4c:ca:9c:d9:d0:14:69:
                    a8:67:e4:6f:14:20:66:19:ef:bc:a0:1d:f7:9a:51:
                    2c:f1:97:29:95:49:89:db:ab:9e:76:c2:50:da:5f:
                    c7:6e:7e:20:af:03:e9:23:ff:d2:82:83:89:73:d5:
                    36:71:1c:a8:a0:1e:b9:55:2c:06:e4:a0:02:49:27:
                    4c:51:1e:bf:10:cd:d3:10:a6:33:f5:dd:76:bb:7e:
                    11:dc:39:d6:00:b1:36:56:57:b5:e8:89:d9:92:89:
                    58:fe:67:7c:62:65:15:56:09:8b:5f:9e:6a:1d:77:
                    d1:fb:d1:f3:7a:d6:b4:92:07:30:22:4c:a5:72:0e:
                    3e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5D:37:A3:34:61:F0:3C:A7:06:86:8A:DB:31:22:2E:7D:87:B4:CC
            X509v3 Authority Key Identifier:
                keyid:77:F6:CC:42:C7:58:E7:DA:7C:4B:FA:BC:21:21:2D:1D:28:21:60:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_bMQsdY59p8S_q8ISEtHSghYDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/974264-8eab-467a-a2dd-4becb3369dec/1/d_bMQsdY59p8S_q8ISEtHSghYDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:8c:bb:ae:dd:ec:60:41:1c:34:0b:36:9e:ea:8b:88:a3:0a:
         3d:60:00:90:c9:58:a0:6a:e4:2d:5d:22:2a:36:e9:c4:17:d6:
         b4:8d:67:8c:bd:0a:43:0d:f8:83:7d:63:33:b5:c2:e9:1e:94:
         41:f5:ca:a3:d6:76:e5:a0:ce:43:ad:df:bc:ce:a4:17:52:fd:
         6a:89:db:cd:80:5d:04:c5:2b:ab:fe:ed:be:de:ea:7a:71:ac:
         0f:ee:9b:1f:ad:13:0c:8b:95:c6:f1:c5:25:0e:4a:01:ad:1c:
         82:39:f1:e0:2d:ca:f1:7f:37:95:0d:08:6d:d5:b0:eb:5e:6a:
         18:e0:1b:53:50:55:08:f7:a3:61:19:a0:30:29:d1:2a:aa:68:
         af:59:e3:80:33:91:d3:ae:5c:d6:99:db:35:15:d3:38:78:3e:
         f8:3e:4f:ed:3a:ce:f6:1d:5e:8f:bb:9a:12:02:3b:f8:57:aa:
         7b:98:5c:aa:3c:fe:50:93:ef:8f:68:a9:88:a7:32:ed:0b:f4:
         b9:27:29:d6:e2:d4:84:ea:df:c4:ef:19:6b:fe:d0:16:d4:a0:
         87:80:8e:d0:98:d2:ad:5c:7c:bb:60:2c:cf:0f:67:77:f9:25:
         9a:53:1f:76:10:36:2d:db:cf:a1:2f:6a:84:45:24:a2:5b:1e:
         ee:ea:a3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----