Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
File:                     3svvNSysca1brg6LHAIkbjtlAlA.mft (raw, json)
Hash identifier:          lwDDHsTLGmuMntKV6AWeR7nSYNlP/ieuAYgcWjYzJIg=
Subject key identifier:   17:83:39:93:13:19:3C:82:FE:BC:47:80:0B:7A:A4:A6:12:F2:E2:9D
Authority key identifier: DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50
Certificate issuer:       /CN=decbef352cac71ad5bae0e8b1c02246e3b650250
Certificate serial:       01962DF3A9CF195D832D414E96B55E4E5F05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft
Manifest number:          0867
Signing time:             Sun 13 Apr 2025 07:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:05 +0000
Files and hashes:         1: 05EOtNo-Yw22y8nOEhjh34kR-xs.roa (hash: bx1cLzgI6GeSkKgZhlF0GUx8NZh0BLXhkqY0eigb2zc=)
                          2: 3svvNSysca1brg6LHAIkbjtlAlA.crl (hash: krBvzTs5/xghlvuWTYnIR+9GTD8p1u7zjoQ5Rg6a3dU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a9:cf:19:5d:83:2d:41:4e:96:b5:5e:4e:5f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=decbef352cac71ad5bae0e8b1c02246e3b650250
        Validity
            Not Before: Apr 13 07:01:05 2025 GMT
            Not After : Apr 14 07:01:05 2025 GMT
        Subject: CN=1783399313193c82febc47800b7aa4a612f2e29d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cf:c2:8b:a6:6f:0a:09:f0:b9:87:ac:c4:fb:
                    96:6c:1c:12:d4:75:80:e4:a6:81:45:ec:35:88:f6:
                    c4:b6:6a:0e:79:e3:0a:5a:9d:48:3b:df:a3:20:3b:
                    8c:c6:4b:a8:fb:0b:f0:ee:df:78:b6:e7:2b:40:68:
                    59:b1:81:3f:13:86:24:a5:2c:c8:48:b9:df:69:90:
                    1e:34:e3:6b:76:b4:d8:fe:09:45:b9:7d:62:06:78:
                    15:4c:55:ef:cf:99:2d:f0:fe:ee:3c:1c:30:2e:1a:
                    a5:9a:dc:44:60:4e:82:9f:48:f5:65:f7:6d:04:0a:
                    87:d2:c3:cb:56:4c:b4:ce:97:5d:48:bd:0c:1c:79:
                    5e:92:0e:e8:2d:a0:bf:a7:4f:20:be:5e:af:cb:9e:
                    b1:37:08:31:8f:d7:c5:d5:39:5d:25:be:32:81:9f:
                    2f:05:f8:30:fa:de:fa:b2:90:58:fd:15:57:fe:f4:
                    5e:57:6c:fb:08:6c:b9:06:cf:9c:18:d2:b7:9c:94:
                    bb:8e:ff:9a:be:66:ce:82:28:3f:9f:15:dc:ac:2c:
                    67:c7:40:cd:73:b7:b7:fe:f6:68:56:fb:2e:e3:41:
                    b9:1e:b9:10:a2:ee:c1:a3:32:64:9d:b6:22:c4:7b:
                    e2:a6:47:8f:2f:01:a1:e4:fb:63:0d:ab:b0:b8:f5:
                    34:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:83:39:93:13:19:3C:82:FE:BC:47:80:0B:7A:A4:A6:12:F2:E2:9D
            X509v3 Authority Key Identifier:
                keyid:DE:CB:EF:35:2C:AC:71:AD:5B:AE:0E:8B:1C:02:24:6E:3B:65:02:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3svvNSysca1brg6LHAIkbjtlAlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6bcf3f-5cac-4470-8aab-541f9fcba742/1/3svvNSysca1brg6LHAIkbjtlAlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:de:15:a6:7b:e4:25:7e:05:c0:a4:24:b2:bf:63:f8:b4:bf:
         a4:e2:5e:61:4b:ae:53:8e:99:e1:e0:98:39:9a:47:69:29:a2:
         dc:29:30:36:db:33:b3:6a:3a:a8:2d:c8:5b:66:f9:a2:05:ba:
         4f:cd:ff:3a:7c:1d:b3:34:bc:36:ad:c0:e5:35:80:ba:f2:53:
         b3:7f:08:2e:fa:59:4f:d1:f7:d5:24:32:55:cd:76:24:e6:42:
         c7:b0:8f:5c:5d:da:e9:6a:8c:a2:b2:04:a8:0f:f5:99:57:94:
         44:26:fe:24:12:19:a5:23:40:01:4d:56:36:af:69:55:75:90:
         27:be:c9:68:d2:4d:81:c9:fd:67:9b:fc:08:33:b9:4d:0c:f0:
         3a:91:45:56:dd:40:bc:aa:5e:47:5d:2a:9b:66:11:70:5f:81:
         88:31:42:a5:b2:51:eb:ea:fe:fe:ef:f8:88:4e:33:43:84:41:
         c3:c4:f5:6f:c5:6c:45:80:47:55:4b:4c:3d:50:ec:3b:a9:1a:
         a9:cb:27:4f:e4:1b:15:f0:8c:b8:46:08:5b:40:12:5f:3a:5c:
         0b:c6:30:47:16:4b:d7:a1:6e:8d:90:2c:90:01:4f:d5:18:db:
         32:3b:7d:6e:bd:75:0a:45:e8:c6:aa:63:4d:93:7e:dd:5c:e7:
         0d:55:18:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----