Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
File:                     3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft (raw, json)
Hash identifier:          w2Ke513nsuoiLp8avua69a0wQfiotS5RA6SpqC2Oa4I=
Subject key identifier:   79:A4:3A:C2:1F:1D:91:23:42:3F:75:71:88:9D:66:E2:61:92:9E:A6
Authority key identifier: DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43
Certificate issuer:       /CN=deb046b6e309e9a866522c2a40c66ffc42fbb843
Certificate serial:       01962FAB423DAC3A506724B077C451A1E45D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 15:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:14 +0000
Files and hashes:         1: 3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl (hash: KfJUvHs/E0Y/hBvgmEZh0uJXatsQmCkA9h3AurOU7zs=)
                          2: W1OC8DXA-JBLcfhFPFVeaJnmF2M.roa (hash: Bn11GLaQo8vWxTsyNwP3g7O7jm760Wf0FQskPZIbPmo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:42:3d:ac:3a:50:67:24:b0:77:c4:51:a1:e4:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=deb046b6e309e9a866522c2a40c66ffc42fbb843
        Validity
            Not Before: Apr 13 15:01:14 2025 GMT
            Not After : Apr 14 15:01:14 2025 GMT
        Subject: CN=79a43ac21f1d9123423f7571889d66e261929ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e0:96:03:a3:18:3e:12:41:78:ae:90:84:46:
                    00:a3:25:ff:3f:a4:ba:81:54:35:cb:bf:a4:9e:78:
                    d6:ee:5b:e6:59:0f:23:72:a4:e8:41:0f:f4:0e:b4:
                    36:dd:51:88:da:9a:cf:f0:5c:cd:24:37:eb:a5:45:
                    b3:9e:d9:21:7d:cd:d9:7a:fb:58:e3:07:dd:17:ea:
                    b7:3b:cc:ef:2b:e4:84:4e:4b:98:fd:ef:5e:e3:bc:
                    6a:16:2d:1d:a6:9f:bb:5b:27:15:fd:0c:c1:f8:d6:
                    2c:8c:38:d0:cc:b0:49:ec:0d:39:46:e2:ac:58:d3:
                    4b:61:c4:37:c4:44:be:e5:c5:13:16:78:73:80:dd:
                    41:87:b5:75:19:1a:dd:e6:9d:83:a7:17:76:dd:d8:
                    2c:5c:3a:18:21:32:f9:89:0e:93:72:58:17:01:ee:
                    0b:15:b0:f5:1c:b8:30:5d:46:14:e9:fa:a0:a0:e6:
                    04:a4:a4:17:cb:5e:cb:56:95:3d:f2:17:e2:d0:75:
                    a4:51:b6:95:0e:e0:dc:3d:f7:4f:b5:0d:a6:91:28:
                    e7:11:75:2d:38:87:81:95:a7:37:c0:13:99:d7:fc:
                    98:7c:57:a4:5b:5c:2c:b5:94:8a:2c:55:08:0e:01:
                    6d:c9:cf:b4:36:a6:bb:36:8d:0b:c8:b7:76:3b:ae:
                    7c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A4:3A:C2:1F:1D:91:23:42:3F:75:71:88:9D:66:E2:61:92:9E:A6
            X509v3 Authority Key Identifier:
                keyid:DE:B0:46:B6:E3:09:E9:A8:66:52:2C:2A:40:C6:6F:FC:42:FB:B8:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d24bc2-42f3-46d9-bdd9-1c9492245cab/1/3rBGtuMJ6ahmUiwqQMZv_EL7uEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:2e:db:51:9b:71:8a:5f:e4:1c:63:87:ee:dc:a8:32:1a:00:
         2e:d1:dd:a0:f8:9f:64:a9:64:be:b2:3e:23:0c:30:52:72:9c:
         1b:78:df:6f:81:05:d3:0a:e9:69:2b:e4:de:d1:15:69:ef:c2:
         36:b1:9b:3e:8b:c5:b9:48:94:41:01:2b:6a:2f:60:49:70:0f:
         56:00:61:76:71:5b:43:88:87:f6:22:be:b0:28:36:c3:7b:ef:
         f7:1a:62:ab:2d:c9:7e:69:43:06:ff:d5:68:e0:29:e7:82:87:
         e0:0c:5b:fb:50:c6:df:f1:3a:32:27:74:95:b3:81:b5:3c:6c:
         0e:2c:87:20:44:ab:3a:7c:3a:69:dc:3a:c3:4d:e4:c0:03:a8:
         c8:93:63:a7:2c:ee:4a:db:f5:40:78:7c:d9:04:4b:0e:c7:85:
         da:30:f1:34:bd:50:25:9e:17:16:71:bb:7e:d1:8e:53:68:3b:
         1d:d1:19:c4:86:d8:1e:8b:d4:5c:16:38:4c:09:76:b9:94:14:
         66:cf:96:f8:0b:bb:66:11:38:c6:b2:cc:80:18:6a:d8:3c:77:
         d4:62:f3:b1:0e:ce:fe:71:80:96:b3:0c:83:99:fe:b8:03:e7:
         db:ca:2c:0a:d7:28:67:95:ab:7c:29:26:d1:03:8d:9d:bb:91:
         11:e1:20:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----