Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
File:                     36acPZg4XUFUBfxv0wqAA2PAF8E.mft (raw, json)
Hash identifier:          qtldDvL8rfkAyqQtuT7dPwof9z912EprKmdM2cXbr6E=
Subject key identifier:   51:5B:BA:24:E0:2A:3B:EB:6C:8A:01:C2:CD:17:AA:90:14:76:6A:37
Authority key identifier: DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1
Certificate issuer:       /CN=dfa69c3d98385d415405fc6fd30a800363c017c1
Certificate serial:       01962F74DD5F2BC3D39EE3DBB1124488D538
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:49 +0000
Files and hashes:         1: 36acPZg4XUFUBfxv0wqAA2PAF8E.crl (hash: AN5qSuT+4c0U/xLdKUTJr6tEL5U3FjrUWrSGL0ZAbFg=)
                          2: G4W66DIS-tOhTOL4rAP2DQwRdL0.roa (hash: T0yTA2cPiVodR8G3AqqlUGuyKJW1C3bce+LSKeiweEY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:dd:5f:2b:c3:d3:9e:e3:db:b1:12:44:88:d5:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfa69c3d98385d415405fc6fd30a800363c017c1
        Validity
            Not Before: Apr 13 14:01:49 2025 GMT
            Not After : Apr 14 14:01:49 2025 GMT
        Subject: CN=515bba24e02a3beb6c8a01c2cd17aa9014766a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:30:99:3b:d2:73:f3:b3:15:da:a8:34:20:ea:
                    45:93:ee:b4:e7:f2:3c:04:a5:33:02:d0:ad:0a:e7:
                    33:23:c5:c5:fb:fa:2e:10:8c:21:8a:d9:48:cf:05:
                    55:13:e5:11:cf:46:b9:c5:4d:b1:15:86:25:d6:36:
                    ca:28:e9:90:7c:f2:87:1c:92:7e:68:81:79:0b:b0:
                    66:c7:1a:93:af:8f:c6:84:5e:07:ee:8a:95:e9:8c:
                    91:ee:3e:52:22:56:22:8b:ff:d1:2a:7e:36:22:1d:
                    69:dc:78:4d:6a:83:f0:56:58:d2:b3:59:5d:5f:8a:
                    e3:a9:ab:53:19:21:61:37:cf:d2:cd:98:ac:d7:12:
                    f9:e5:0e:f7:1b:08:86:4f:03:fe:0a:20:f2:c3:0b:
                    9a:2c:52:63:3d:46:46:8a:59:9d:2e:f9:e2:5b:69:
                    83:2d:a1:92:c2:69:ff:7b:f7:5e:ca:70:50:d6:4b:
                    41:8c:ce:97:b5:4f:ae:4e:9e:f1:69:c5:0e:c6:b3:
                    94:46:1b:c5:bd:5d:5c:98:99:3a:d0:b2:9d:bb:4e:
                    ae:90:72:65:13:28:30:65:2d:57:54:00:90:ee:6e:
                    dc:7f:e8:c8:8e:e9:55:57:1d:e8:dd:10:e0:c3:4c:
                    07:b7:a4:d6:02:df:35:dc:0a:4a:72:c8:a5:51:9b:
                    79:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5B:BA:24:E0:2A:3B:EB:6C:8A:01:C2:CD:17:AA:90:14:76:6A:37
            X509v3 Authority Key Identifier:
                keyid:DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:d1:d6:93:ea:ef:b8:e8:43:32:cf:83:50:24:59:04:04:48:
         6f:40:dd:5b:b0:8f:45:42:75:8f:9d:c0:fd:94:e2:ed:97:fa:
         64:dc:66:3c:68:45:9f:a9:e1:f2:52:b5:d8:9c:2b:32:59:5c:
         43:1f:8a:d2:62:61:0c:64:84:40:e2:65:3b:9f:63:3c:87:8b:
         f6:20:7a:05:5d:e1:e7:31:a2:8b:58:f6:6c:75:cd:4c:ae:34:
         12:69:59:10:57:ef:5c:7e:3e:e6:66:49:f7:29:e7:aa:5a:51:
         7a:94:3b:a0:69:7a:c6:1b:ff:bd:4f:cf:a2:3e:e3:e6:32:b8:
         2a:49:39:bc:de:f7:37:11:d4:64:a6:9c:ad:98:f9:d3:4b:ab:
         fe:5b:65:de:32:6f:c0:94:9b:30:06:c9:c7:19:cb:ae:ee:43:
         6f:25:23:fe:36:80:c4:08:83:92:96:cb:ce:5c:ca:9c:cc:a9:
         90:d3:1b:12:01:b5:0f:a1:d5:7d:6c:54:02:6f:62:cf:27:b5:
         76:cf:1a:3e:83:b8:2b:c8:1a:7d:ff:b2:fe:83:f2:a7:6e:69:
         42:78:ca:40:e9:63:ea:35:0c:9e:ec:4e:03:98:38:b7:4b:21:
         be:c4:53:61:0b:fc:11:2a:1e:d5:ff:87:f8:6a:66:71:4d:b8:
         1b:b2:f3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----