Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
File:                     3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft (raw, json)
Hash identifier:          CRcVybgaJtT+ByK3civGvF89dtnLKO0Tgv/DZCpocbM=
Subject key identifier:   DB:AC:E5:EF:BA:CD:A6:1E:6D:E5:00:6A:ED:91:9E:1D:5F:79:6B:A8
Authority key identifier: DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21
Certificate issuer:       /CN=dceb548762c7d4caccb616d819ce95cf627b2021
Certificate serial:       01962DF41241A4DA7E6E7AF970A841FD0A9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft
Manifest number:          112C
Signing time:             Sun 13 Apr 2025 07:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:32 +0000
Files and hashes:         1: 3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl (hash: rRiSnrqOmUWugSeEJBsGXdYMS+1vYBF9cjhSLKVB3cs=)
                          2: yvHmtz-vd__QGyK6PoEkr_n-Dok.roa (hash: K4rgADfkHdT22x5s6vfWG3HXGINmJUAubhmd+BDk2vo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:12:41:a4:da:7e:6e:7a:f9:70:a8:41:fd:0a:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dceb548762c7d4caccb616d819ce95cf627b2021
        Validity
            Not Before: Apr 13 07:01:32 2025 GMT
            Not After : Apr 14 07:01:32 2025 GMT
        Subject: CN=dbace5efbacda61e6de5006aed919e1d5f796ba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e9:0d:3b:07:7b:97:13:8d:55:86:86:3b:42:
                    8c:a8:19:25:05:0d:c9:52:e3:75:95:36:d8:e7:0b:
                    c0:0e:27:9f:62:e2:84:a9:29:77:c7:24:74:c7:57:
                    4d:45:60:b6:23:80:86:c2:68:1d:6d:9f:8c:39:dc:
                    bd:4d:18:9f:5e:79:4f:68:1e:dd:bd:4e:5d:04:cd:
                    66:cb:fa:08:d9:9c:77:fb:09:c5:e2:e9:05:d1:51:
                    6b:fb:1b:ce:3b:71:9d:fd:12:94:70:0c:a1:39:c3:
                    a6:bf:a5:7f:80:09:1b:c7:51:17:3f:ad:40:18:16:
                    e1:6f:59:fa:41:29:30:b8:42:f2:03:47:e1:2e:b8:
                    66:23:4c:53:87:c8:a3:cf:72:f9:79:57:0e:37:f5:
                    ea:30:81:5f:79:de:83:64:7c:c5:6d:d8:4b:fe:c6:
                    3a:c6:cb:98:61:ce:85:1d:63:b8:9d:c2:4f:3b:3f:
                    34:5e:58:cb:6e:8f:b6:ca:e0:98:a3:2c:0b:1b:94:
                    fc:59:fe:eb:98:b8:83:10:47:da:2e:59:0a:b7:1f:
                    20:9e:e2:0c:03:a7:64:ee:69:bf:3a:f2:ac:38:86:
                    b3:e9:14:13:2d:4a:e9:75:d0:ec:61:dc:30:a0:1a:
                    b8:72:98:6d:35:88:0f:db:79:df:70:46:c9:80:1e:
                    a7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AC:E5:EF:BA:CD:A6:1E:6D:E5:00:6A:ED:91:9E:1D:5F:79:6B:A8
            X509v3 Authority Key Identifier:
                keyid:DC:EB:54:87:62:C7:D4:CA:CC:B6:16:D8:19:CE:95:CF:62:7B:20:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OtUh2LH1MrMthbYGc6Vz2J7ICE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/be2236-c2ba-478a-abc3-b4cea51456b4/1/3OtUh2LH1MrMthbYGc6Vz2J7ICE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:0b:2d:44:ee:23:8c:fa:16:2d:e7:c3:40:01:7c:97:3d:c3:
         65:c6:22:19:02:47:39:d1:12:8c:51:13:b7:28:cc:19:c0:47:
         aa:7c:62:03:36:c9:ea:29:ad:d0:bc:39:56:95:22:59:8a:a9:
         f4:bb:9b:08:d4:0e:eb:22:f0:1c:76:0d:77:dd:71:ff:04:2f:
         c8:69:3c:3b:4d:a5:a7:37:5f:18:09:c4:e6:a9:09:8a:75:2a:
         c0:6f:38:0e:b0:0f:81:d3:0c:45:ee:7a:bc:12:e7:71:e1:23:
         ee:c6:4b:86:a2:ac:11:6a:91:86:ec:92:79:e1:c4:f8:b1:53:
         e1:80:0c:c0:3e:12:2b:19:1d:d0:48:58:46:66:08:54:d0:d0:
         e4:7c:69:2b:f2:20:dd:57:a4:7b:d9:9d:2b:d4:16:9b:ec:6a:
         87:22:f7:12:bb:4e:bd:fd:a5:98:27:1f:7f:d5:4f:7f:d9:a2:
         26:04:e4:18:7f:89:27:33:ff:b6:72:39:74:ef:a2:34:ea:b7:
         be:d3:19:7c:6e:2d:a8:6c:2b:2a:cd:73:7e:c4:91:1e:7b:2d:
         2c:3b:ec:ad:b1:b8:18:9f:a5:88:c0:70:f8:90:d2:f0:16:90:
         cf:01:5c:1a:47:08:0d:e6:23:16:7d:e8:bf:02:3b:c9:82:2a:
         8d:d3:94:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----