Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
File:                     37j_LzoL_EHq3BivnlKs0QBSQUk.mft (raw, json)
Hash identifier:          6poqxLIDCjSfS6FfDvNn6mbIVHwn5+Hx1e6gi1NiD3E=
Subject key identifier:   3A:5D:9E:FC:84:40:2F:26:FC:CD:D3:54:E3:02:FE:00:73:91:F1:80
Authority key identifier: DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49
Certificate issuer:       /CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
Certificate serial:       01962F06826795A4A48A87C357E90FFD3C13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:17 +0000
Files and hashes:         1: 37j_LzoL_EHq3BivnlKs0QBSQUk.crl (hash: R/zygMwxJWiTo/knA1whVlcjKuQNKA5PInBXmovieao=)
                          2: bz845M7CtyXT_KxSOoYnwM4ytLI.roa (hash: SiQzZh53SIt4QI0YXFwDqHIIaNvnYlzOH5arKhwG3CI=)
                          3: f9SSHAY0ScyW5AZG3u-f0ngGXZc.roa (hash: rDOXQ0c3zQtm3V3iG9O7bIWJmbqXnEDJDT0mmOn7+8Y=)
                          4: uwKuD1U0-ONC7lZAzrC62rEZLfU.roa (hash: UOd1qRZsqwUN4sVWfDx1X7tqqqPkCndn9MzXMov8ox8=)
                          5: wRlQRR0wjybotkSwm99MDtTpSls.roa (hash: XGI9y71SAIsuZ0k81l7U45+PwORlmFWuDUslXmVhPzE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:82:67:95:a4:a4:8a:87:c3:57:e9:0f:fd:3c:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfb8ff2f3a0bfc41eadc18af9e52acd100524149
        Validity
            Not Before: Apr 13 12:01:17 2025 GMT
            Not After : Apr 14 12:01:17 2025 GMT
        Subject: CN=3a5d9efc84402f26fccdd354e302fe007391f180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bd:f3:fd:3e:45:dd:2d:82:42:d5:c3:02:f2:
                    3b:83:eb:b9:7b:7e:c3:cb:68:aa:24:4c:ef:53:2a:
                    65:ae:ef:18:25:ac:b6:dd:19:9a:78:17:8f:42:1e:
                    f1:d4:63:20:26:88:ee:85:8d:6c:35:a4:86:05:31:
                    f1:ae:2a:a2:a3:f7:e8:36:e4:15:96:f7:91:28:04:
                    2f:c5:ec:02:83:ae:c8:b9:54:85:fe:4b:f2:10:59:
                    78:93:4a:36:5d:2f:5c:27:8e:55:76:f4:f6:4f:52:
                    3c:61:ea:df:7e:25:0c:ee:3c:07:29:02:bf:37:d1:
                    72:91:9a:94:c2:ed:5c:05:2f:a0:16:9a:2b:6a:e9:
                    7e:12:ae:e6:e5:27:82:d7:48:59:1d:49:93:e8:95:
                    fa:e5:44:53:30:6c:4c:4e:07:28:37:50:2c:bb:bf:
                    63:1d:41:b8:21:16:cb:f5:1d:f5:68:b8:9a:19:10:
                    21:d9:5e:dd:1d:b5:c9:bc:40:e7:34:7c:93:de:88:
                    68:65:4f:e6:ac:ef:5c:1e:d5:95:54:b8:1b:4f:59:
                    4a:28:d0:11:c8:99:aa:f5:95:a2:a5:c7:69:90:58:
                    b1:b2:e3:2d:15:c7:d1:05:62:0b:80:ae:49:09:3e:
                    05:d2:9f:04:be:65:ed:4b:a9:0b:9c:26:4a:67:27:
                    0a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5D:9E:FC:84:40:2F:26:FC:CD:D3:54:E3:02:FE:00:73:91:F1:80
            X509v3 Authority Key Identifier:
                keyid:DF:B8:FF:2F:3A:0B:FC:41:EA:DC:18:AF:9E:52:AC:D1:00:52:41:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37j_LzoL_EHq3BivnlKs0QBSQUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/6b87af-a212-480d-a4d4-a3df3b69ce5a/1/37j_LzoL_EHq3BivnlKs0QBSQUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:dd:75:89:56:c4:8d:c9:1d:94:7b:25:7c:3e:e0:a4:54:5e:
         60:ac:96:e4:db:3c:4f:97:d2:e6:c0:83:79:52:31:fc:2a:2b:
         5f:96:0b:bb:57:d1:67:03:34:3f:95:0e:37:88:13:6b:c8:80:
         07:87:e8:83:1a:ee:04:04:ce:00:19:39:bf:cc:a2:a8:c2:3e:
         9c:01:64:01:9a:0d:3d:90:0f:bc:be:e9:c4:62:f8:09:f8:cc:
         91:86:5d:21:64:28:30:73:50:64:78:2d:f1:23:5a:da:28:f6:
         ba:03:e8:c0:9c:5d:c2:05:4f:a9:02:cc:a8:5d:41:c4:2a:0f:
         6d:64:da:49:d7:af:9c:1a:f5:e2:ba:86:65:5c:18:c3:ad:cb:
         bb:40:99:f1:3b:0c:70:b6:68:8e:75:c9:d0:e2:f1:44:a2:f8:
         35:f2:df:f6:84:8e:b7:74:11:fe:b2:86:99:bf:61:3b:84:03:
         25:b8:15:dc:bc:cd:20:e5:d1:bd:a1:61:12:e5:03:3e:47:56:
         f8:57:74:99:1e:8e:70:57:f3:06:74:94:49:08:c2:2f:f1:f9:
         2d:69:a8:32:4d:95:18:32:b5:57:f8:b8:51:7c:b3:cc:16:c8:
         67:21:6d:87:f5:4e:d9:5f:15:65:da:7c:91:98:70:16:20:d7:
         5e:ea:50:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----