Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.mft
File:                     3dStS_QUF7o4OE1lvC0HwPaFCeE.mft (raw, json)
Hash identifier:          f8e2oLzoY0nuVkDa3Ht6nIwJMX/0GYqSJ4BirWjo+/8=
Subject key identifier:   4F:77:5F:A1:E7:0B:14:47:20:40:C1:10:19:49:94:DF:33:E4:00:92
Authority key identifier: DD:D4:AD:4B:F4:14:17:BA:38:38:4D:65:BC:2D:07:C0:F6:85:09:E1
Certificate issuer:       /CN=ddd4ad4bf41417ba38384d65bc2d07c0f68509e1
Certificate serial:       01962F06DDCBD6DC3858F22EAC76C5D65CFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3dStS_QUF7o4OE1lvC0HwPaFCeE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 12:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:41 +0000
Files and hashes:         1: 3dStS_QUF7o4OE1lvC0HwPaFCeE.crl (hash: uFE0JtZbWpcD9qssOF+9egbKBtUOKezsVa+sxBmO3LY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:dd:cb:d6:dc:38:58:f2:2e:ac:76:c5:d6:5c:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddd4ad4bf41417ba38384d65bc2d07c0f68509e1
        Validity
            Not Before: Apr 13 12:01:41 2025 GMT
            Not After : Apr 14 12:01:41 2025 GMT
        Subject: CN=4f775fa1e70b14472040c110194994df33e40092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:86:ed:f5:ce:1b:41:55:2a:de:cc:86:74:78:
                    5e:f2:b9:4b:87:8b:ac:25:7a:27:32:1a:e1:a7:e1:
                    0a:8b:fb:ac:cc:6f:d2:d8:77:16:65:2a:4a:e3:fa:
                    57:db:f5:76:1e:dc:a8:64:5f:1f:4b:9c:02:f3:97:
                    64:3b:d8:7e:69:50:2e:7b:6b:1f:df:ba:15:01:3e:
                    76:21:5e:9f:6b:6b:bf:a8:ff:c4:07:89:93:04:09:
                    6e:6e:fe:8d:d9:9a:9a:4c:13:4b:8a:9f:b5:d1:75:
                    40:79:bb:73:90:30:e4:df:17:14:20:ad:ac:f0:7b:
                    17:9b:bf:06:6a:29:05:18:91:f5:bd:86:82:48:aa:
                    8f:8e:15:85:4d:51:46:c1:3e:b1:a3:94:c3:17:39:
                    6c:6b:e7:28:d3:0c:f9:79:be:33:65:dd:38:a2:32:
                    9b:f8:a1:17:80:11:39:ed:d9:84:84:ea:fc:03:1f:
                    0a:a3:2c:a0:ee:d7:b6:b8:f8:2d:01:4b:34:c8:f5:
                    e6:34:4e:25:41:1e:b3:ce:9c:f0:72:5b:c3:3d:a4:
                    22:dd:91:2f:72:64:fc:c0:fc:43:f9:54:c2:2e:cb:
                    9e:7d:c5:e1:9f:a7:0a:34:ff:b7:29:32:3c:2b:12:
                    7a:c0:0c:f3:f3:26:80:32:bb:50:71:fd:5b:d9:18:
                    ae:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:77:5F:A1:E7:0B:14:47:20:40:C1:10:19:49:94:DF:33:E4:00:92
            X509v3 Authority Key Identifier:
                keyid:DD:D4:AD:4B:F4:14:17:BA:38:38:4D:65:BC:2D:07:C0:F6:85:09:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dStS_QUF7o4OE1lvC0HwPaFCeE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/094969-13ed-4c14-8575-7bc8c20a235a/1/3dStS_QUF7o4OE1lvC0HwPaFCeE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:7d:9d:f0:f1:d3:18:c7:76:82:2f:f3:2b:f3:63:dd:ee:21:
         f4:46:b7:d1:eb:55:a0:b4:50:ca:92:0f:be:46:f8:4b:09:9e:
         42:27:8f:1d:71:0f:24:5d:8b:13:b2:33:43:b4:15:84:d9:31:
         15:82:0a:09:64:63:d4:15:c6:29:df:13:c8:d2:c5:41:0b:74:
         80:a6:72:28:20:18:10:01:68:6a:fc:42:c2:17:c9:e3:94:a4:
         01:fa:91:c1:9e:8e:ac:b5:e3:b7:e7:03:5b:e4:2d:0c:74:07:
         ce:f4:e6:10:bc:86:00:86:d9:7c:5a:97:1e:d0:81:8b:39:c1:
         c0:99:92:7b:c7:d4:68:b6:3d:05:87:2a:f0:e5:39:fa:57:31:
         9e:aa:01:9b:c3:2e:c6:a0:84:bb:7b:88:12:60:49:eb:b1:fe:
         92:88:3c:c9:bd:8e:9a:b7:b9:04:a8:85:91:9d:f0:4b:e8:be:
         ce:db:15:71:3a:58:14:dc:53:8e:6a:6e:67:b4:b9:36:ba:6d:
         b1:85:07:94:5a:62:da:62:0e:ba:32:17:25:03:f4:b4:8b:c1:
         f6:98:18:45:37:71:0f:8f:32:03:eb:cc:d7:d4:61:64:1a:04:
         d6:71:8e:55:8d:85:71:49:24:53:0b:be:8f:a0:8f:18:0a:ea:
         de:43:de:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----