Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
File:                     Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft (raw, json)
Hash identifier:          +F7JIB+8gdRS+NCiq5UhtkSs6/FfZRW3IekwbBgXFe0=
Subject key identifier:   17:09:8D:AC:FC:EA:1B:78:BB:28:31:0D:02:98:CB:DC:6D:D9:CC:B2
Authority key identifier: 3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75
Certificate issuer:       /CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775
Certificate serial:       01962E9976E60BFBB1A29C929DB8B1129C06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft
Manifest number:          0895
Signing time:             Sun 13 Apr 2025 10:02:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:11 +0000
Files and hashes:         1: E5xFDK9_S5iJGP4sFeJ9ooZosHI.roa (hash: AbosUOGwDkylbwXsNTmNDaibnmXnMj0HIqZzxGPKQ6U=)
                          2: Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl (hash: /YRqxp4AT2NPnjRunaeCkZ9ri/BOgk/FinG7PSGBJRw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:76:e6:0b:fb:b1:a2:9c:92:9d:b8:b1:12:9c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebd5f8bb5a594d67b5ce807a84c59dde569a775
        Validity
            Not Before: Apr 13 10:02:11 2025 GMT
            Not After : Apr 14 10:02:11 2025 GMT
        Subject: CN=17098dacfcea1b78bb28310d0298cbdc6dd9ccb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3a:7a:f9:c0:97:ff:bc:f9:ef:06:15:d2:5d:
                    3a:60:cc:c8:72:70:b7:71:fb:ee:89:0e:9f:4a:41:
                    b4:40:c6:96:90:c9:4e:51:71:15:33:63:1c:67:7a:
                    f7:b5:22:68:bf:d3:17:11:af:93:8f:b5:63:1c:fe:
                    ae:79:5d:65:c4:c4:87:b9:2e:1d:e0:d6:69:99:f6:
                    18:26:70:1d:58:ad:5a:66:29:14:77:07:d2:04:dc:
                    21:36:71:d6:e4:38:6f:ae:bf:0f:13:c9:ed:a6:2c:
                    05:24:78:6c:51:d0:cc:17:40:62:27:ac:4e:5a:14:
                    dc:1e:f3:ee:19:0e:30:72:1a:1f:fd:55:f3:f0:fa:
                    d1:1b:76:d5:9b:56:ff:19:b6:a2:50:6a:ac:ab:ed:
                    6e:2d:f1:29:86:a7:4a:eb:79:89:b6:a2:31:f5:85:
                    ec:c7:88:cd:b5:73:81:9e:3e:7d:06:3f:53:4a:da:
                    7a:a9:ba:6d:4d:4a:11:ad:b8:04:c8:8f:2f:85:b5:
                    0d:b6:65:32:e4:1d:69:81:f8:1c:9f:d8:b1:b6:71:
                    a1:ce:de:95:3a:cc:ac:e9:5c:d5:b8:c5:cc:2b:3a:
                    83:80:28:f5:43:f4:15:da:a7:a8:92:38:dd:a8:42:
                    90:7e:54:01:a3:33:1e:fc:30:d2:b2:7e:dd:bb:e3:
                    d8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:09:8D:AC:FC:EA:1B:78:BB:28:31:0D:02:98:CB:DC:6D:D9:CC:B2
            X509v3 Authority Key Identifier:
                keyid:3E:BD:5F:8B:B5:A5:94:D6:7B:5C:E8:07:A8:4C:59:DD:E5:69:A7:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/cea5cf-0782-40d1-8913-92712f95e336/1/Pr1fi7WllNZ7XOgHqExZ3eVpp3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:46:15:7f:30:89:0d:2d:82:3e:41:a5:74:ec:da:a2:88:94:
         87:a6:21:7e:be:66:d1:e7:56:7d:6c:6e:e7:1d:3f:26:61:ab:
         da:ca:3c:45:d6:16:81:0f:2b:e6:74:2f:44:74:90:e3:a7:0b:
         66:ca:b7:3a:63:b3:8d:1e:59:d7:ce:0f:09:5b:c0:03:62:3d:
         db:85:f0:c8:8b:fa:d9:87:47:2e:52:10:b3:19:ce:29:02:5e:
         70:6b:0b:fc:e7:17:e2:a9:68:f2:10:a3:d5:f8:1a:5c:83:92:
         8f:82:d4:e9:6f:28:45:7f:f6:d7:6f:a2:70:fd:b1:5f:a9:14:
         b8:b0:b4:dc:ac:60:c0:d7:1e:e0:e0:9f:d4:18:56:ac:f1:ca:
         87:58:2c:be:1e:63:4a:5e:b0:47:42:86:9c:f3:58:ec:3c:7c:
         13:ce:ca:db:2e:ec:0b:cd:1b:5e:88:68:3c:74:43:6b:7b:13:
         d1:25:2a:ed:6a:8a:a7:ee:40:9d:19:e1:5f:94:16:d4:8a:19:
         36:8e:45:ee:54:fe:87:d6:5a:91:39:21:50:05:ca:ff:4a:1d:
         33:7c:7e:58:f7:33:dd:e7:cc:27:0d:ec:66:c6:57:37:be:24:
         52:12:7b:2e:c9:72:0f:41:4d:10:b4:17:00:f4:1e:93:75:75:
         ed:2a:67:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----