Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft
File:                     dPs6a3_CjoZ05hHLCYB28OTFV8I.mft (raw, json)
Hash identifier:          n558TPtmbdgJ3scD9A/Pp8EnI/hmhNsPrJC+4t9hE5U=
Subject key identifier:   E3:E1:2E:FE:EB:67:5D:B4:D1:4D:2D:2F:F5:BE:2F:66:91:C1:A4:E5
Authority key identifier: 74:FB:3A:6B:7F:C2:8E:86:74:E6:11:CB:09:80:76:F0:E4:C5:57:C2
Certificate issuer:       /CN=74fb3a6b7fc28e8674e611cb098076f0e4c557c2
Certificate serial:       01962E2B1B440F7EFD05AAAE0A8184CD8318
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dPs6a3_CjoZ05hHLCYB28OTFV8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 08:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:39 +0000
Files and hashes:         1: EbZ-PzExvsrKZ1aOLdbMth19YQY.roa (hash: Y23B6h9Jehv4hPRBbE1Q/MgzAwC8F0dy1/k/s/bejkY=)
                          2: dPs6a3_CjoZ05hHLCYB28OTFV8I.crl (hash: e08S3qk05rqf3r2GK9auPsxqUTMWZFivPAzDoqTAc4I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1b:44:0f:7e:fd:05:aa:ae:0a:81:84:cd:83:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74fb3a6b7fc28e8674e611cb098076f0e4c557c2
        Validity
            Not Before: Apr 13 08:01:39 2025 GMT
            Not After : Apr 14 08:01:39 2025 GMT
        Subject: CN=e3e12efeeb675db4d14d2d2ff5be2f6691c1a4e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:55:69:d2:98:dc:f2:de:52:2f:2b:92:3e:d9:
                    d2:76:61:20:d8:d8:89:4a:48:9d:e7:45:63:25:9b:
                    d1:a3:ec:c5:97:e6:68:a0:2f:9e:a2:06:ca:2d:6b:
                    a7:3d:39:6d:8c:b9:17:29:47:eb:4a:b0:7b:d8:b3:
                    1c:72:b1:a3:4b:73:62:7b:59:74:f9:42:06:e7:84:
                    e5:ab:24:12:e6:b9:35:ab:84:b9:bb:c0:d3:0e:cc:
                    81:83:cc:e5:43:97:7e:98:2c:5f:cb:6d:a2:2e:8f:
                    24:32:ae:30:a6:26:c9:db:db:af:55:cd:14:5b:eb:
                    8b:86:1d:dc:c5:f2:c5:a2:5c:29:5f:dd:84:1b:f5:
                    a8:c4:9e:f1:67:74:e8:24:7c:b0:fe:a1:ce:26:12:
                    35:bb:49:60:5a:12:b7:3b:e5:7b:d9:d3:5e:eb:73:
                    fb:e0:8b:1e:3a:4b:8d:94:77:e6:b4:9a:aa:92:bb:
                    d5:c6:cd:8e:68:3a:47:83:ac:68:9c:5c:41:12:d8:
                    fc:4d:99:c5:8b:16:bd:d3:d0:44:9a:17:5a:ae:ea:
                    46:07:99:5c:8e:92:1a:3b:eb:85:11:16:30:85:0f:
                    27:49:ae:4a:d1:1d:df:64:73:11:65:2b:ac:e6:85:
                    ab:ca:51:4b:95:44:74:59:39:ca:ea:c2:84:a8:b7:
                    a7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E1:2E:FE:EB:67:5D:B4:D1:4D:2D:2F:F5:BE:2F:66:91:C1:A4:E5
            X509v3 Authority Key Identifier:
                keyid:74:FB:3A:6B:7F:C2:8E:86:74:E6:11:CB:09:80:76:F0:E4:C5:57:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPs6a3_CjoZ05hHLCYB28OTFV8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ca0f55-5774-45de-a6c0-782c780e7c1c/1/dPs6a3_CjoZ05hHLCYB28OTFV8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:6d:12:20:34:09:12:c1:93:69:c3:71:4e:38:60:07:73:50:
         ca:de:95:15:02:b7:04:52:b1:3d:6b:9d:51:a4:52:14:c9:b9:
         36:98:c2:17:72:b0:bc:90:65:6e:bd:87:b1:04:c5:6f:25:1a:
         16:32:4c:62:09:9a:3a:18:0c:d5:29:28:19:14:35:61:4c:b9:
         25:df:ae:8f:d9:11:39:81:c3:60:91:b5:43:64:81:0f:c5:9e:
         76:1c:43:b9:72:e2:34:01:f0:be:6c:91:72:2b:64:58:5d:8c:
         c8:bc:15:44:45:43:86:40:00:11:12:4b:44:23:e2:fa:f0:02:
         8f:eb:41:80:ba:cc:9e:71:1c:58:30:34:a1:34:31:37:8f:a8:
         b2:25:14:01:a3:4d:28:50:f7:2d:8c:46:05:1d:e2:e4:f5:3c:
         0b:9f:b5:72:bd:08:97:59:ec:ed:cb:b8:bd:9a:5e:11:05:5f:
         70:93:fa:8c:03:97:1b:af:81:d2:6c:fd:0d:dc:ab:5e:36:9f:
         ce:ca:7b:cb:5d:e8:97:58:b9:08:00:ea:e4:68:de:00:88:3f:
         82:55:70:47:f1:5d:f9:32:05:1f:e4:40:e8:e8:21:a6:76:bc:
         d9:30:c0:83:b6:58:56:6d:bf:df:20:4c:9e:56:6a:9c:8e:2e:
         ed:54:29:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----