Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
File:                     Kt1DinzjyzefKM-gUc9j1a2P48o.mft (raw, json)
Hash identifier:          eL7e6kxB2C01O5DDFWtNCSRJTyh0TgHNnldiUcmo+l0=
Subject key identifier:   F3:77:80:77:CB:78:1D:88:C7:6C:DB:56:AE:98:17:E3:7F:B4:58:ED
Authority key identifier: 2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA
Certificate issuer:       /CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
Certificate serial:       01962FAB8272578EA685D6FA1B554E3A91EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft
Manifest number:          0D38
Signing time:             Sun 13 Apr 2025 15:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:31 +0000
Files and hashes:         1: BTmSI3bKDyEio_o8HAFd3DpA8rw.roa (hash: 3z5V5nlo98dCHrSvU7v+ci/JP55YJA4F6NU227fMQdg=)
                          2: Kt1DinzjyzefKM-gUc9j1a2P48o.crl (hash: IYKBmYv+vpX2tRyNq0Hlr7TjCiPOqYOVMSeAEZPFUsg=)
                          3: Vl-BUyW_4i4W1Wnxmf0KDGW6dVM.roa (hash: qrkRzr8LSzDpFIdLrS23zNSmVx5+NOPtSLZdcnXxt68=)
                          4: oxi_ya_EdBtJCrjY1pYIsNptA_Q.roa (hash: /Rw4xq/Rq6iapjKpArPGVtAk2zVGOyS/eMr3PI823Lo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:82:72:57:8e:a6:85:d6:fa:1b:55:4e:3a:91:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2add438a7ce3cb379f28cfa051cf63d5ad8fe3ca
        Validity
            Not Before: Apr 13 15:01:31 2025 GMT
            Not After : Apr 14 15:01:31 2025 GMT
        Subject: CN=f3778077cb781d88c76cdb56ae9817e37fb458ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:11:9b:08:1a:02:27:ed:3d:7b:a7:cf:37:5c:
                    be:8e:7d:9a:8b:c6:4f:88:54:5d:79:ca:a3:36:7e:
                    7f:ce:0d:63:76:b7:49:23:c4:ea:65:8e:7c:09:9e:
                    77:da:67:d0:07:f3:7b:77:6e:7d:55:ba:0d:11:07:
                    f7:d5:0b:c1:5e:45:69:b9:8e:81:b5:b8:08:0e:32:
                    ac:07:16:28:e9:8f:79:9b:95:7a:cf:57:b5:9d:6c:
                    43:68:3d:f8:11:39:56:a9:20:b5:f2:34:ba:6b:41:
                    db:73:15:1d:9e:d2:f2:6b:83:ce:48:30:d4:78:0e:
                    45:07:b9:38:ff:c7:b1:29:36:bd:30:64:5d:54:11:
                    1f:1e:33:02:69:61:a5:4a:93:2f:3b:00:06:f7:21:
                    0b:df:ba:7a:6b:f5:7a:46:1f:9e:e0:34:b4:e8:32:
                    02:77:11:93:54:98:1c:8b:3c:88:c2:09:c4:6a:c8:
                    6b:70:d4:be:86:fc:53:1d:83:13:a0:f8:98:40:2b:
                    2c:a0:b1:b0:6c:fa:ba:d7:15:9b:44:ac:16:58:48:
                    23:d5:b6:c4:c5:8f:55:3b:3a:d8:ff:6a:5e:4c:f3:
                    ba:c5:f7:69:e8:d4:12:31:93:74:56:ff:6e:4d:78:
                    8e:9d:2b:7a:0e:cd:33:e6:52:98:91:f6:7c:72:e5:
                    23:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:77:80:77:CB:78:1D:88:C7:6C:DB:56:AE:98:17:E3:7F:B4:58:ED
            X509v3 Authority Key Identifier:
                keyid:2A:DD:43:8A:7C:E3:CB:37:9F:28:CF:A0:51:CF:63:D5:AD:8F:E3:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt1DinzjyzefKM-gUc9j1a2P48o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b61cf-80ba-4e8e-a2e5-20a0d130c456/1/Kt1DinzjyzefKM-gUc9j1a2P48o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:0d:65:58:0a:f9:8b:c3:54:c2:39:15:72:11:2a:32:8f:f6:
         97:4a:b6:bc:bd:a4:39:ba:3b:e4:b2:07:5d:8e:d1:d4:d4:c4:
         8b:9c:25:23:c9:59:7b:31:b0:b9:b6:94:2f:76:5a:c7:0b:36:
         4d:87:ab:bf:8a:b1:d8:18:2e:6a:74:35:89:a9:22:7f:83:e7:
         34:4e:da:72:c9:83:98:e5:c6:88:e0:37:a7:76:8b:6b:36:a9:
         0a:10:08:2b:83:1a:c2:34:ee:21:7f:16:b0:ae:78:e9:a8:44:
         7d:00:be:aa:21:8e:6b:50:e2:b4:a0:f0:d7:9c:e3:c5:6f:13:
         d6:c4:21:93:e2:c7:b2:5f:ea:b8:d8:b9:8c:b1:85:f6:e8:86:
         2b:55:a3:b4:5e:dd:17:34:97:56:e6:31:a1:43:f2:1d:8c:80:
         24:5a:9f:16:8a:01:1d:5e:37:3c:18:c5:be:f1:3d:69:cb:4e:
         fd:f1:9e:be:71:c6:ed:67:48:69:56:57:dd:d0:8d:69:fe:45:
         33:24:82:f1:d7:79:80:72:25:18:a4:bc:a2:ea:05:95:0a:24:
         1c:1f:d2:a9:64:e7:1c:c1:c1:d0:6d:74:43:89:9c:ed:da:92:
         de:e5:9f:88:5f:6d:73:27:04:39:e2:69:e2:87:73:85:f9:d6:
         aa:58:eb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----