Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft
File:                     3ofTW9yrEjr_wakdFzaGeWlwmiM.mft (raw, json)
Hash identifier:          2QEgadhfMB2tqXTePppoXcCk9VqWlZHaaPsX43oT0HM=
Subject key identifier:   EB:02:0C:F1:60:8E:41:F3:40:C1:97:EE:B2:BF:71:FF:F8:12:24:F3
Authority key identifier: DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23
Certificate issuer:       /CN=de87d35bdcab123affc1a91d1736867969709a23
Certificate serial:       01962E2B214881919787744E43B9A274012B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft
Manifest number:          0C33
Signing time:             Sun 13 Apr 2025 08:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:40 +0000
Files and hashes:         1: 3Y1BHZUILEomegZ6I-JOe2EDqas.roa (hash: nyAIzspdbGpqX40B5GkCbeW1pebw48sxfeKC18TMLdE=)
                          2: 3ofTW9yrEjr_wakdFzaGeWlwmiM.crl (hash: jdLuaSrKGqcLEdXB0kBOtQqpBFMuPxAdyJqvYN8AYZA=)
                          3: MI6QTYgXUnVHZJtFKBJ6j87d9nY.roa (hash: ogLPbxQnwTSRD4Ngu1+xrXPhGTFDPzl73EchbVTj+Fk=)
                          4: m2FaQjqwdirKnIXjWYvZqBXz6X8.roa (hash: T2eJCXBDxAgsoT/g2qbdU7r93yFYU14KBtRd6n9GR68=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:21:48:81:91:97:87:74:4e:43:b9:a2:74:01:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de87d35bdcab123affc1a91d1736867969709a23
        Validity
            Not Before: Apr 13 08:01:40 2025 GMT
            Not After : Apr 14 08:01:40 2025 GMT
        Subject: CN=eb020cf1608e41f340c197eeb2bf71fff81224f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b0:e3:3f:b6:98:f7:44:aa:85:81:57:cf:94:
                    a5:29:d1:c0:52:46:0e:13:14:a4:1d:e3:33:14:d7:
                    62:58:b2:c1:37:a6:e5:d0:dc:2b:c1:f4:75:4b:8e:
                    4e:39:1a:07:c4:2b:91:58:be:a4:11:34:5f:c8:78:
                    d0:e0:80:92:ef:41:a0:9f:4c:3a:e5:6e:db:8f:81:
                    df:59:ac:89:d1:12:99:05:fd:78:bf:35:ce:e6:6f:
                    34:f7:2d:39:73:a6:2b:09:51:e1:1d:35:9b:49:78:
                    de:1c:f5:5b:e9:ea:b6:61:6a:a3:f0:e3:db:99:8f:
                    a3:0c:d8:cd:73:e2:83:34:5b:ac:25:49:43:5a:dd:
                    ed:ec:c2:0f:a4:5e:10:be:f4:5e:12:90:0e:3e:95:
                    10:4b:19:6a:c8:10:17:84:10:aa:02:c3:96:a1:3f:
                    3e:3e:6f:9b:23:0e:49:5c:e2:c7:9c:4c:94:d9:7f:
                    b7:a5:43:90:98:11:6c:bc:a4:86:1e:b0:8b:39:99:
                    ac:4d:36:b2:a6:bd:e1:33:6e:1f:af:7a:2c:56:a6:
                    d8:d8:ae:6c:ad:fb:60:bd:d2:70:ca:0f:da:72:8e:
                    bf:b4:18:51:6e:45:17:87:42:f9:03:79:c0:a6:29:
                    1e:37:f5:da:2f:03:2a:f1:e6:a4:c1:49:52:99:c5:
                    e7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:02:0C:F1:60:8E:41:F3:40:C1:97:EE:B2:BF:71:FF:F8:12:24:F3
            X509v3 Authority Key Identifier:
                keyid:DE:87:D3:5B:DC:AB:12:3A:FF:C1:A9:1D:17:36:86:79:69:70:9A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ofTW9yrEjr_wakdFzaGeWlwmiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/910716-f266-47f0-9bad-c22390e8d9a6/1/3ofTW9yrEjr_wakdFzaGeWlwmiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:fe:86:ef:ab:63:32:47:d1:ef:2e:fd:f1:70:b6:c2:f3:48:
         ba:e8:af:7b:83:f3:d6:34:bb:ab:d5:09:f0:91:41:8a:e6:c5:
         e6:c9:c4:9a:8d:db:62:9c:81:77:c4:3a:ec:c0:f3:42:0d:4b:
         60:b6:da:da:d1:68:da:4c:13:c1:43:25:52:ad:06:95:11:63:
         de:78:cc:2f:89:96:cf:87:46:3f:fa:82:8c:0c:be:c4:45:8a:
         16:40:b2:61:2e:97:de:25:b3:d8:f7:22:ad:2b:f9:e1:9c:15:
         a7:47:1f:92:9f:a2:b8:b6:d7:b5:5f:df:bc:7c:bf:b6:37:ef:
         46:bd:f5:5f:52:38:6f:e3:cf:11:97:fb:d0:f7:d0:26:05:52:
         11:af:13:a9:cf:c8:78:52:ac:67:3b:a0:61:9b:c2:93:1c:1f:
         d9:6e:71:26:9a:67:3d:82:fc:6e:9f:e9:40:c1:2d:07:cb:08:
         09:47:ba:06:f3:cd:64:e1:2f:20:24:b5:e3:31:a4:48:ab:37:
         69:91:fa:3d:87:a0:ac:9e:3f:50:d9:36:fb:2c:f4:d5:ed:82:
         2f:25:ce:6f:5a:6e:a7:de:5c:42:25:3a:e0:da:be:6f:a6:a5:
         5c:5f:f1:fc:c6:cc:82:8f:6d:1a:e5:7e:ca:7c:8c:84:34:60:
         97:21:2c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----