Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
File:                     tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft (raw, json)
Hash identifier:          AkYZ10wpoZ936dRtd38TZMuhGVNn4wegWof6AVevgDc=
Subject key identifier:   6E:3F:93:F5:C4:A2:B6:48:C4:A3:D0:40:42:4B:CD:79:C0:C6:B8:C3
Authority key identifier: B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
Certificate issuer:       /CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Certificate serial:       01962FAB5596E38D4A26B75F71F74C44F30E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 15:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:19 +0000
Files and hashes:         1: F0xtYGfQ_s_LJkUkk89IHcL9J5M.roa (hash: JVjlGGRIJlPuTdOW/N8SfdRvr3fAH3HHybxJ5aP4RD0=)
                          2: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl (hash: 6xTph9Cx5STiX7I2CD/oC/45UclLPr3BcOOYnzn+we4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:55:96:e3:8d:4a:26:b7:5f:71:f7:4c:44:f3:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4bdc376a159d05e2af97176a3eba8360e60d176
        Validity
            Not Before: Apr 13 15:01:19 2025 GMT
            Not After : Apr 14 15:01:19 2025 GMT
        Subject: CN=6e3f93f5c4a2b648c4a3d040424bcd79c0c6b8c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:34:b1:1d:3a:6e:fb:17:70:24:5f:23:7d:c6:
                    bf:7f:36:d8:98:2f:10:14:49:6c:6a:33:e6:34:4a:
                    55:46:c7:69:a0:3d:1c:1c:1a:b8:5e:cc:58:52:0a:
                    ba:ab:40:99:ec:30:a8:b0:27:53:2e:7c:df:66:28:
                    b4:ad:45:46:13:64:06:c6:c9:0b:0c:b8:31:26:dc:
                    01:f9:38:3d:68:9d:75:3e:e7:01:4d:98:12:69:19:
                    b0:b5:42:04:bd:a1:ce:7e:04:c7:8d:c3:47:aa:2b:
                    3b:e5:97:89:b5:fb:ef:45:53:7e:0f:91:36:c9:48:
                    9f:38:63:62:14:09:c5:68:e6:93:b9:4b:f3:ff:da:
                    ed:97:67:d2:2f:16:f2:01:91:bc:dd:a9:ec:10:2e:
                    22:cc:61:dd:7b:90:7c:67:9a:5f:ca:09:fa:87:bb:
                    ba:81:c7:94:45:a3:25:40:68:c8:ed:47:cc:1a:69:
                    1d:99:9b:80:aa:47:85:6e:0c:e5:d8:0f:1f:36:26:
                    23:aa:7f:a6:26:b4:44:26:a1:7b:f2:94:55:e7:78:
                    68:ef:00:bf:b4:12:cb:81:f5:0e:ac:eb:91:b0:8d:
                    f4:98:9f:82:40:4d:f2:34:25:01:26:44:81:88:bc:
                    4c:85:90:d3:38:f6:37:11:c0:ee:34:7a:72:32:5c:
                    a7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3F:93:F5:C4:A2:B6:48:C4:A3:D0:40:42:4B:CD:79:C0:C6:B8:C3
            X509v3 Authority Key Identifier:
                keyid:B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:96:ea:2c:92:e8:eb:c9:f2:96:0d:38:04:97:d8:bc:a7:e3:
         f8:e9:9d:08:c1:45:bb:8d:5b:f8:29:cf:7e:5b:b7:ab:d1:18:
         f8:2f:ac:76:3f:a0:7b:b7:e6:fe:98:27:74:8a:b9:65:a8:2d:
         67:70:29:52:08:b2:f2:88:a0:1d:99:45:2d:50:f5:7c:5b:c9:
         cc:c9:a1:cb:c2:d9:fd:d8:3a:e6:3f:4e:8a:ed:da:e8:ab:04:
         05:1a:0e:3d:f0:d3:de:31:9b:cf:d6:bb:f3:70:7b:5e:8a:4c:
         28:1f:ca:74:3d:05:28:7e:98:fb:cf:72:cb:cd:c1:2f:fe:67:
         60:9f:af:81:06:21:fc:85:df:07:56:8a:06:e0:1f:bb:f2:38:
         bd:d3:17:aa:f6:0e:6a:c5:1d:90:d4:8a:6b:e1:97:ec:dd:5a:
         92:25:c9:e8:78:1d:23:f1:bb:0a:4b:3b:a4:04:40:76:3b:36:
         58:ab:f6:d1:bc:75:d5:0b:fd:f4:76:eb:bd:dd:a9:b6:5b:2d:
         05:ed:95:b8:11:53:ea:f2:20:79:1f:e2:12:dd:7b:76:77:1b:
         46:b8:67:ec:e3:a2:4b:7c:e9:64:c8:b7:2b:1c:0b:34:e7:d2:
         fb:f7:8a:0f:af:28:37:1b:28:5a:e3:b8:01:06:f1:c0:10:93:
         68:9b:91:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----