Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
File:                     3O8ZrfppRVibwtEAFU5aWMRJihQ.mft (raw, json)
Hash identifier:          s5nP1WglxzCUxH1Wr/Qax8MMUyaX4cwtKyXAh1lu20k=
Subject key identifier:   FD:BD:47:83:A3:17:E2:DF:FC:21:F5:3F:D0:62:09:65:F6:62:A1:CB
Authority key identifier: DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14
Certificate issuer:       /CN=dcef19adfa6945589bc2d100154e5a58c4498a14
Certificate serial:       01962E2B2437A57DA87BDF99DD7AFEC9A41F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft
Manifest number:          12F7
Signing time:             Sun 13 Apr 2025 08:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:41 +0000
Files and hashes:         1: 3O8ZrfppRVibwtEAFU5aWMRJihQ.crl (hash: e+C53VRDM2i7bo8cDJHfIfBu9df3BgNbqqG2/FAJwMs=)
                          2: UXWSLhVlTXSrRh4vQjiJGZfTc28.roa (hash: GwWbj030dqXFgPoZUUmrOygMcwYdz6TWzzcKF95NLWM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:24:37:a5:7d:a8:7b:df:99:dd:7a:fe:c9:a4:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcef19adfa6945589bc2d100154e5a58c4498a14
        Validity
            Not Before: Apr 13 08:01:41 2025 GMT
            Not After : Apr 14 08:01:41 2025 GMT
        Subject: CN=fdbd4783a317e2dffc21f53fd0620965f662a1cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cd:fe:49:0a:b7:cf:a6:4f:da:71:fd:a5:2d:
                    3f:fa:65:90:cf:41:23:da:74:24:88:ad:ce:73:99:
                    7a:47:fc:b4:f3:a7:3b:db:6f:1c:43:42:1e:21:37:
                    fa:90:7b:75:29:95:c0:f3:56:dc:45:7d:5a:1c:26:
                    09:4f:8f:cd:ae:3d:34:71:2a:93:7e:10:be:e0:06:
                    96:a5:f8:6c:73:9a:cd:84:28:3b:23:8c:f4:bc:41:
                    8e:cc:e8:3a:61:4c:89:28:a2:84:bc:3b:47:43:5e:
                    33:98:f3:a8:db:24:a4:8f:78:cb:a0:eb:3b:f6:37:
                    13:3c:3c:56:6d:f6:d3:77:28:19:53:96:e6:0c:0b:
                    3f:2c:22:9a:38:e8:d6:03:2e:8d:b8:6c:87:f3:07:
                    69:84:ea:bf:f9:4d:96:20:c5:64:6d:d2:bb:05:f7:
                    64:2c:96:3c:c1:01:b1:8a:7e:a4:6c:d4:6e:46:39:
                    78:50:e6:e1:0c:55:89:cb:ba:a7:56:5f:79:12:14:
                    79:2d:ea:ac:e1:4d:bd:fe:72:3b:6e:ae:0f:dc:26:
                    41:12:66:bd:08:4a:5c:f5:a7:1e:51:68:bd:2b:b2:
                    bf:0c:3b:05:4b:bd:54:9b:08:05:e5:15:2b:d1:00:
                    6e:b1:e9:93:6c:67:55:0e:5a:52:32:44:3f:3a:36:
                    6c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:BD:47:83:A3:17:E2:DF:FC:21:F5:3F:D0:62:09:65:F6:62:A1:CB
            X509v3 Authority Key Identifier:
                keyid:DC:EF:19:AD:FA:69:45:58:9B:C2:D1:00:15:4E:5A:58:C4:49:8A:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O8ZrfppRVibwtEAFU5aWMRJihQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/602c35-d366-47c0-a334-21dead0c5e9c/1/3O8ZrfppRVibwtEAFU5aWMRJihQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:81:ab:cb:21:ef:95:e5:22:76:47:e1:ac:87:4a:aa:7a:9e:
         1d:33:45:e1:5a:0d:ec:76:89:e1:32:33:6a:f7:f1:0b:18:58:
         b6:a3:10:6d:6b:67:62:8b:f3:d1:20:7d:24:3a:24:4b:4f:45:
         5c:6f:9b:f3:07:e3:f0:dc:81:8d:49:8a:df:3b:ac:2d:89:a0:
         3b:c4:24:76:13:83:27:ae:55:de:92:0a:ee:c3:9f:75:21:d3:
         6b:a1:6d:05:61:b3:9c:79:43:a5:89:e7:58:e1:d1:41:a4:5e:
         68:b1:09:86:f5:29:f9:34:ea:ce:b9:b5:ee:84:0a:c3:df:ed:
         a1:de:2d:a8:4d:91:2b:ae:a8:4a:96:0c:6a:19:cd:a2:e5:31:
         c3:90:6c:60:0b:df:0a:ab:2f:f2:cd:1c:69:67:b6:fb:d0:ee:
         32:ac:38:45:8c:ee:2c:51:55:a1:7f:e9:99:a5:21:d2:b9:f5:
         29:98:23:c3:75:ff:0b:1d:b1:18:49:e2:41:3d:43:85:99:58:
         05:7e:a3:d1:03:1c:ed:84:a4:b1:5a:0f:97:97:c9:d3:88:c7:
         e6:ee:6e:3c:35:92:39:1b:fc:23:6c:c2:9a:f1:4f:dd:83:0e:
         fd:e3:c2:9b:78:22:c6:d8:9e:0e:81:4f:55:a8:13:da:aa:4d:
         17:d7:c4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----