Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
File:                     3l428Vn1dpiPtOUdQQG7hdDQyYM.mft (raw, json)
Hash identifier:          j/iWb+B3VHEHdTlUm4M+NYL82Gv0CRUhTBr1f0eUFIk=
Subject key identifier:   75:FE:9A:D0:6C:82:52:CF:11:65:DB:2B:7B:28:16:9B:39:03:1B:E6
Authority key identifier: DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83
Certificate issuer:       /CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
Certificate serial:       01962F071FDB3AFDB10ABD943AD0FA5F0AEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft
Manifest number:          0EED
Signing time:             Sun 13 Apr 2025 12:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:58 +0000
Files and hashes:         1: 3l428Vn1dpiPtOUdQQG7hdDQyYM.crl (hash: Wji03RLhgaPSUN7Dtakbpp/y6r1OYQsNYyj2qnLlf40=)
                          2: CXuHSCaFxVaRaAru4-iFvdd0d-g.roa (hash: po3EKI/Ie4MxQDtGyWIOYbTAnH49FsuKgvn3GW+cz7k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1f:db:3a:fd:b1:0a:bd:94:3a:d0:fa:5f:0a:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de5e36f159f576988fb4e51d4101bb85d0d0c983
        Validity
            Not Before: Apr 13 12:01:58 2025 GMT
            Not After : Apr 14 12:01:58 2025 GMT
        Subject: CN=75fe9ad06c8252cf1165db2b7b28169b39031be6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6d:ed:1d:3d:bc:e9:f9:43:d0:b9:f2:28:ce:
                    f6:36:3e:0c:53:c8:8e:fe:ac:60:5e:60:b0:72:81:
                    dd:72:5a:b5:ae:36:3e:e0:f8:d5:c3:e0:7c:ae:50:
                    99:3a:52:ef:1e:a7:3f:89:df:c8:e9:40:37:94:aa:
                    14:bb:0e:4f:f6:de:da:97:a1:5f:80:b1:fa:f9:08:
                    69:9f:3a:e8:8e:f5:e4:b5:3c:75:a6:91:8a:2e:37:
                    02:65:e4:2d:cb:58:7e:53:97:20:37:dc:7c:03:d8:
                    6a:88:d2:e5:5e:9b:7e:65:89:f4:8a:83:b8:89:ba:
                    c1:9b:f8:e5:39:85:3e:60:c1:e4:e7:d1:76:00:f3:
                    c3:fa:10:b8:8e:0f:d9:be:92:af:6a:36:29:2a:ba:
                    ab:c3:7d:a5:0d:46:15:33:19:9f:b7:d9:68:09:66:
                    21:ac:4a:19:87:6b:a1:2f:24:72:b4:d3:fd:a8:fe:
                    f6:46:60:df:c2:31:13:74:2f:7f:ae:94:bb:db:2d:
                    5b:aa:1c:30:87:23:ed:13:89:4d:ce:e4:0e:af:11:
                    58:30:ae:e2:41:68:a8:56:eb:0a:9a:65:70:88:03:
                    fc:12:27:52:1e:fe:da:0e:5a:39:6f:5b:2e:e2:a0:
                    77:80:e8:7d:22:9e:b3:da:d4:71:3b:63:ce:ac:8c:
                    ce:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FE:9A:D0:6C:82:52:CF:11:65:DB:2B:7B:28:16:9B:39:03:1B:E6
            X509v3 Authority Key Identifier:
                keyid:DE:5E:36:F1:59:F5:76:98:8F:B4:E5:1D:41:01:BB:85:D0:D0:C9:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3l428Vn1dpiPtOUdQQG7hdDQyYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/1ccbfd-a651-4c8e-9d60-ebbbb444286e/1/3l428Vn1dpiPtOUdQQG7hdDQyYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:5a:07:51:09:a2:da:13:dc:e6:8d:76:ca:5f:5c:3f:1d:86:
         9c:a7:47:f7:e3:38:5d:ac:4b:f8:4e:f6:58:fd:90:53:5b:0b:
         97:48:0a:72:01:14:e4:63:43:39:a2:72:b1:a2:32:08:dc:51:
         85:38:57:15:58:1b:a1:61:3b:0c:e1:25:ae:49:d6:7d:ab:d4:
         46:8d:4c:a4:b5:a0:3c:be:8d:f1:f7:ad:11:35:45:7d:e5:0d:
         c6:6d:43:6d:76:ac:a7:9e:ab:d2:7e:ab:2e:52:e8:0c:10:d4:
         8f:42:c8:94:19:31:d7:f3:8c:a2:d1:2d:bd:e9:a7:9a:17:2e:
         b7:84:3f:9c:ce:5d:99:88:d1:aa:9d:08:9f:3b:cb:f7:ea:51:
         b5:ac:85:ed:35:d6:57:ec:5b:1d:84:38:99:2c:21:08:61:3a:
         47:c2:2a:39:c8:5c:a3:1e:35:75:78:7e:cb:a9:cf:9f:dc:f2:
         3b:10:3c:00:83:b3:50:aa:c0:64:ee:4d:c6:91:ed:5e:bc:53:
         f4:f3:6b:8e:22:10:50:ea:ef:6a:07:ae:6e:f4:be:a9:56:fe:
         a1:79:11:9d:05:0c:1a:fe:ae:eb:3f:40:37:be:2b:4b:67:b7:
         61:ff:4e:ff:b3:49:71:13:2e:7f:04:a0:ad:f8:10:5f:73:94:
         7d:87:b8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----