Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
File:                     3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft (raw, json)
Hash identifier:          RWGiv0ot00gezfm1wstId0Hre+KTHMwG+SRfnTYIG3o=
Subject key identifier:   11:FE:2C:0E:2A:DC:77:AC:ED:C9:AA:8E:81:FD:92:A9:CB:14:BA:B1
Authority key identifier: DC:73:BE:38:7A:F5:52:97:0C:F6:2F:69:51:7E:3F:3C:9C:12:D2:F6
Certificate issuer:       /CN=dc73be387af552970cf62f69517e3f3c9c12d2f6
Certificate serial:       01962F7438A8E8ACFBB91F934629F7B31CE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft
Manifest number:          0DEC
Signing time:             Sun 13 Apr 2025 14:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:07 +0000
Files and hashes:         1: 3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl (hash: tn6GPBHt5dE33k/+z5foAg9Vo9BLPMzP5CN7CEBZanE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:38:a8:e8:ac:fb:b9:1f:93:46:29:f7:b3:1c:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc73be387af552970cf62f69517e3f3c9c12d2f6
        Validity
            Not Before: Apr 13 14:01:07 2025 GMT
            Not After : Apr 14 14:01:07 2025 GMT
        Subject: CN=11fe2c0e2adc77acedc9aa8e81fd92a9cb14bab1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:db:34:21:eb:f7:67:ed:4e:49:f5:4c:24:07:
                    ab:19:73:f7:fd:51:51:83:5d:16:b8:8f:3e:27:8c:
                    01:3a:a7:59:f0:c9:9e:9d:63:a8:6e:7f:6c:ee:8b:
                    27:d0:51:e8:69:6f:b4:8a:c7:d1:58:d7:0f:f9:2a:
                    37:4f:7c:38:30:62:c3:35:52:47:ec:ab:20:bf:eb:
                    0a:92:cb:9f:ff:0a:61:0a:90:30:df:af:8c:53:0a:
                    50:7d:5a:b2:99:4c:97:c0:a9:0d:19:e0:96:bb:fe:
                    1d:92:46:8d:48:b9:bb:99:8f:86:3c:b5:f9:b7:78:
                    27:ea:89:b2:15:4c:a9:6c:30:a6:e3:ef:c4:71:0c:
                    10:31:e3:09:90:4e:fb:2a:06:3c:b1:11:fb:69:2a:
                    32:39:72:ba:10:f9:f2:f5:88:ff:e1:46:f9:a6:dd:
                    47:a8:85:17:87:a3:25:1e:c5:a6:ab:a6:91:98:0f:
                    ec:be:63:cc:5d:f3:a9:b3:05:a9:4e:95:a4:8f:c5:
                    cc:01:cb:48:77:17:f5:dc:c1:3a:0a:44:ae:ea:35:
                    66:73:0a:c2:43:75:b8:88:5c:8e:e9:a7:80:ea:c3:
                    b7:4c:02:e5:2a:94:1b:d4:bf:8f:6c:93:e2:ff:4d:
                    28:e0:04:7b:de:e0:fb:b9:04:49:23:0e:c6:75:c3:
                    15:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FE:2C:0E:2A:DC:77:AC:ED:C9:AA:8E:81:FD:92:A9:CB:14:BA:B1
            X509v3 Authority Key Identifier:
                keyid:DC:73:BE:38:7A:F5:52:97:0C:F6:2F:69:51:7E:3F:3C:9C:12:D2:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HO-OHr1UpcM9i9pUX4_PJwS0vY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5bbd32-a540-4708-9925-c71f17afc749/1/3HO-OHr1UpcM9i9pUX4_PJwS0vY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:14:7b:a6:8d:2f:d9:4c:da:86:da:d4:17:db:36:71:c2:01:
         52:0a:57:36:26:1a:8b:95:3a:87:c3:d1:39:e1:2f:d8:0c:e7:
         e8:6a:99:6a:da:81:7e:68:38:42:ae:6d:e1:79:01:a0:70:fc:
         2e:61:da:39:ce:77:c3:02:ac:b9:88:b7:8c:75:e4:ea:24:4c:
         9d:9a:e0:6a:b3:af:01:06:d7:73:2c:8d:74:78:0e:c2:f0:12:
         87:6a:2d:d4:c8:70:ac:1c:d1:eb:7a:ed:a1:e6:ab:b0:5f:5b:
         10:2a:77:62:a9:30:e5:81:38:fe:24:c2:ed:59:82:f0:2b:4b:
         b2:92:83:1b:86:7f:14:c4:90:49:ee:76:9f:07:5f:2e:4d:71:
         97:4f:4b:ce:af:fe:fc:e8:65:f3:23:06:36:51:bb:fc:2c:0f:
         2c:6b:2f:b7:8e:12:87:8e:0e:c5:c9:d1:2c:e8:a2:dc:4c:55:
         9f:1a:63:ed:c7:a5:3d:7a:5d:85:58:99:13:2c:cf:2d:d7:44:
         a6:54:1a:86:12:19:95:0c:5d:9d:73:e4:1a:ee:9c:13:1f:1a:
         d6:cd:47:1d:5a:e2:f3:d8:83:76:ff:b7:c9:77:c8:ef:07:c6:
         a8:01:6b:fa:0a:8b:ef:d9:ab:41:c9:5e:1d:c5:5a:00:d5:f7:
         26:58:1e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----