Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
File:                     0x3RpRTTp-Pf24v7ddfSTtmNR58.mft (raw, json)
Hash identifier:          lxUFlJ9re7o5av9CbTgdt9ugoMuw4N5sfA/wV5F+vF4=
Subject key identifier:   1E:13:0F:7B:64:2E:CD:EB:6F:A7:A7:55:47:D2:F8:B4:E7:B8:3F:AA
Authority key identifier: D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F
Certificate issuer:       /CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
Certificate serial:       01962F3D74003621DFE10C14B4F0E5E7BAD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft
Manifest number:          14FA
Signing time:             Sun 13 Apr 2025 13:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:18 +0000
Files and hashes:         1: 0x3RpRTTp-Pf24v7ddfSTtmNR58.crl (hash: MAGElzOoo1uxDA3UFfJDuKpvEodXJ976bN71KgSjx34=)
                          2: JOdkDpvp0vkWhvJ9lV0dWUTL_74.roa (hash: Yn5hV+sSL6Zg2EJjKD6GZsY1cY5bsq3d8VKm7ARDueo=)
                          3: Mx0tomllVsmkxbnh1iU8_2PCyj0.roa (hash: 7kB7d7CTYtow392lbDCXYANcYe1E5mU3cWH2302D1Ck=)
                          4: TiEyxKmyiS65-0wzRPZF8VUxgEI.roa (hash: O61YlumzohkeBoQeKX9n1/69jzfPg7pNTilEHThyZVQ=)
                          5: UZGcM2ffX81NtAhfATE7LMKcmU0.roa (hash: IHojeJZnyEKNZzsFj36mgVJwIZkRWe7Nk65gWxDYXn0=)
                          6: gWauuati_t4mDyHK5P6-vGRw5tI.roa (hash: 8Gg051rcVEVxLbKS4zWCYakDmEwjk+i+o+ush3e3CSQ=)
                          7: rtkk5gT-jAJhBoaE_BQPXocOEfU.roa (hash: v/MP7pEa6ZGIvq0Wu6Fpus/nOHl8IEXjbt8QwhltqFU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:74:00:36:21:df:e1:0c:14:b4:f0:e5:e7:ba:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d31dd1a514d3a7e3dfdb8bfb75d7d24ed98d479f
        Validity
            Not Before: Apr 13 13:01:18 2025 GMT
            Not After : Apr 14 13:01:18 2025 GMT
        Subject: CN=1e130f7b642ecdeb6fa7a75547d2f8b4e7b83faa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6a:40:8f:49:91:e3:98:f9:d8:ff:eb:1e:71:
                    7f:d5:e7:52:1d:e3:d4:53:04:4c:21:11:0a:39:db:
                    04:25:9b:b0:e0:fd:b6:a3:5f:e7:26:87:3a:c5:ff:
                    60:65:c6:cd:f5:45:bd:ad:27:6b:ff:0d:d2:90:1d:
                    05:76:b5:8f:9d:d5:5e:5e:d0:d2:51:8e:a4:30:85:
                    bb:bd:77:49:1a:e9:11:6f:69:cb:2a:72:53:44:76:
                    d4:7f:95:d9:f1:23:8c:14:8b:d0:90:4c:8d:1f:04:
                    82:b9:6b:8d:d6:30:9a:7c:52:35:fe:6b:d6:90:2a:
                    c6:78:67:6d:b9:11:20:5f:73:29:98:02:cd:82:92:
                    77:1b:86:65:2d:0c:b9:5e:85:f3:34:61:1b:63:06:
                    f5:86:67:12:8f:f1:f1:83:7a:50:46:d6:03:3a:54:
                    4f:7e:9e:5b:91:5d:d1:67:77:aa:10:71:2c:ac:ad:
                    a3:53:0b:43:52:71:20:38:b6:96:65:45:4f:b6:ec:
                    30:9f:91:18:ab:40:e4:11:e5:80:1f:2e:e4:29:00:
                    12:27:9a:5d:4b:e3:aa:36:52:c0:4c:7a:8e:19:94:
                    83:75:21:7b:77:81:f6:3c:53:e7:73:3e:03:3e:a4:
                    8a:33:4f:79:c8:cd:32:c6:c3:cd:2d:88:1e:55:7c:
                    47:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:13:0F:7B:64:2E:CD:EB:6F:A7:A7:55:47:D2:F8:B4:E7:B8:3F:AA
            X509v3 Authority Key Identifier:
                keyid:D3:1D:D1:A5:14:D3:A7:E3:DF:DB:8B:FB:75:D7:D2:4E:D9:8D:47:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x3RpRTTp-Pf24v7ddfSTtmNR58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f2478f-c503-42c2-94b2-b166ae2ef287/1/0x3RpRTTp-Pf24v7ddfSTtmNR58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:3d:e0:99:08:91:45:36:d1:e0:e5:c1:72:10:c4:93:0d:98:
         33:62:3d:95:60:cd:73:8c:06:92:31:8d:ef:0c:4e:34:d1:ec:
         f8:9a:e6:0f:ea:ed:2e:aa:2c:dd:ca:78:b7:1e:5f:05:61:ee:
         39:9c:f3:10:7e:0c:a4:af:eb:c7:94:71:f8:bf:10:7f:26:28:
         b8:7b:4f:f0:14:3f:de:cc:0f:08:d4:1b:69:ad:e1:19:ec:90:
         83:56:50:51:2a:3a:15:f3:69:24:9d:fb:42:12:38:e9:95:04:
         c4:22:09:72:20:21:14:29:50:83:4b:6b:07:ea:38:9a:18:1c:
         d9:33:a1:84:11:b9:cd:73:1b:b2:43:43:52:2e:97:3f:63:07:
         f8:89:47:5e:0b:53:85:9a:79:63:ab:2b:a7:6f:bf:bd:4b:7d:
         37:12:9b:f7:e7:bd:c4:76:36:fd:65:57:11:71:7d:f6:f8:39:
         03:9d:84:b6:78:e3:64:67:69:29:8a:58:47:36:f4:c9:99:60:
         7e:4e:49:29:25:2c:c2:62:87:92:93:63:22:86:d3:88:90:40:
         29:9e:ac:52:5e:c9:bc:7d:1b:11:f6:18:41:d3:cf:9c:63:66:
         b6:29:bd:c8:aa:24:41:cb:93:15:9b:0b:a3:83:e0:59:c9:2d:
         d6:78:93:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----