Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c56917-2cc3-4067-850a-b937d1205ab1/1/3frtS0AyNuLKi-twkcug4GpUPQo.mft
File:                     3frtS0AyNuLKi-twkcug4GpUPQo.mft (raw, json)
Hash identifier:          QnOtQcok9qzoJqyLhNMvOBlOxjlAawjMpo1glnXui1A=
Subject key identifier:   67:F6:B1:35:9C:AD:AC:37:75:0C:FA:92:06:43:B5:2D:92:B5:D8:CD
Authority key identifier: DD:FA:ED:4B:40:32:36:E2:CA:8B:EB:70:91:CB:A0:E0:6A:54:3D:0A
Certificate issuer:       /CN=ddfaed4b403236e2ca8beb7091cba0e06a543d0a
Certificate serial:       01962E98ADEC18AFD2A576C60E277E138FC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3frtS0AyNuLKi-twkcug4GpUPQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/c56917-2cc3-4067-850a-b937d1205ab1/1/3frtS0AyNuLKi-twkcug4GpUPQo.mft
Manifest number:          2D
Signing time:             Sun 13 Apr 2025 10:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:19 +0000
Files and hashes:         1: 3frtS0AyNuLKi-twkcug4GpUPQo.crl (hash: RDFmOHZstuPm0lx9Ryyhwnx8ok3C+v/ey09PNPD+M9s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ad:ec:18:af:d2:a5:76:c6:0e:27:7e:13:8f:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddfaed4b403236e2ca8beb7091cba0e06a543d0a
        Validity
            Not Before: Apr 13 10:01:19 2025 GMT
            Not After : Apr 14 10:01:19 2025 GMT
        Subject: CN=67f6b1359cadac37750cfa920643b52d92b5d8cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:45:a8:5c:21:2a:39:9f:a2:c1:8b:f7:11:48:
                    f1:62:09:e5:08:b5:db:62:e9:b0:4e:82:54:26:82:
                    00:68:45:43:80:96:d7:5a:ea:34:d4:6d:33:a2:02:
                    c9:a2:af:83:a9:95:5b:d8:64:5b:49:83:4d:69:c9:
                    7f:ed:a5:60:f8:ea:0c:d8:90:42:99:91:b1:79:28:
                    be:95:87:3b:ce:03:19:55:b3:63:2c:85:53:90:3d:
                    fe:3b:6c:c6:92:c6:73:2e:bc:12:90:09:53:19:2c:
                    9e:c9:e4:36:95:de:6c:ea:f8:35:7a:0c:cf:03:80:
                    af:05:bd:78:6b:0a:dc:5c:f2:96:aa:ac:6f:f4:b8:
                    3e:3a:5f:65:7c:c1:12:4e:0e:7e:93:f7:fe:72:ee:
                    77:03:1c:68:b3:a8:9a:b6:61:d7:d9:eb:fb:14:cf:
                    55:62:8a:2f:c2:58:f9:a4:a1:dd:73:69:ed:1f:b8:
                    a0:72:06:e5:c6:35:3c:a4:02:8a:5c:fb:5d:ae:12:
                    5e:0b:0f:1d:e8:4f:c6:80:c1:77:20:0b:9b:f6:f3:
                    89:b3:b9:bf:0a:59:61:31:82:df:21:0d:c9:78:b5:
                    ea:8c:d7:3c:70:49:b4:7f:71:b3:f3:70:8c:b8:51:
                    18:1f:71:69:14:7c:94:c9:07:6d:f5:54:49:2a:5d:
                    c8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F6:B1:35:9C:AD:AC:37:75:0C:FA:92:06:43:B5:2D:92:B5:D8:CD
            X509v3 Authority Key Identifier:
                keyid:DD:FA:ED:4B:40:32:36:E2:CA:8B:EB:70:91:CB:A0:E0:6A:54:3D:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3frtS0AyNuLKi-twkcug4GpUPQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c56917-2cc3-4067-850a-b937d1205ab1/1/3frtS0AyNuLKi-twkcug4GpUPQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c56917-2cc3-4067-850a-b937d1205ab1/1/3frtS0AyNuLKi-twkcug4GpUPQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:5c:f5:e9:f6:17:71:3e:23:74:cf:00:18:61:65:84:59:52:
         a2:20:49:75:7a:f1:cd:01:62:43:7a:64:47:2a:b6:7c:2f:09:
         c5:2c:df:1b:22:6e:ba:07:6c:fa:26:03:2a:b3:e2:9a:01:da:
         fd:bf:fe:61:5a:58:9c:ab:b4:c1:32:8e:c4:2f:c3:8f:85:f4:
         5f:26:1f:02:a4:6d:3a:dd:f7:80:f1:77:74:90:83:c0:69:25:
         f2:14:71:ed:fd:20:e0:0f:be:73:3d:be:12:f4:df:f6:89:7d:
         cc:0a:ed:cd:c2:6d:34:b7:2f:8b:54:8f:19:6d:a9:d8:42:f7:
         c4:b4:0e:de:71:20:a7:bd:60:e8:ad:5c:ac:80:32:af:e6:99:
         19:b6:6f:fd:e9:40:4b:e5:f8:38:9e:74:1a:9e:55:37:e0:ec:
         43:6a:1b:02:ff:f0:3d:47:a9:d5:a1:10:49:68:01:1c:b3:33:
         f0:ec:da:47:41:98:f2:4c:0c:a4:85:70:6f:f5:5b:8c:1f:59:
         d9:19:90:9e:7e:4c:83:ad:e9:a6:eb:8d:3e:15:18:b7:ea:de:
         34:c4:2a:b6:36:7e:b6:ee:15:4d:1a:e2:34:34:f1:42:75:61:
         60:ca:58:fc:74:ec:ba:2c:62:b6:14:cd:5e:36:f9:34:03:db:
         ad:6a:55:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----