Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
File:                     3thYKwJDhjxXLOJXhsyzb_eVsi4.mft (raw, json)
Hash identifier:          YYNDsTRC4euyQ52L7+/wCTA6N4YgcUrS8GlPq2EJdhE=
Subject key identifier:   9B:1A:A0:F9:C2:7C:92:01:3D:B4:62:44:6A:E6:2E:CD:0B:22:EE:2F
Authority key identifier: DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E
Certificate issuer:       /CN=ded8582b0243863c572ce25786ccb36ff795b22e
Certificate serial:       01962E9934B235966A373CFF99C04DB214EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft
Manifest number:          0C20
Signing time:             Sun 13 Apr 2025 10:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:54 +0000
Files and hashes:         1: 3f1U8HcG3gg1d7c-AMV0OeLqnk4.roa (hash: 6g/YiGFM7SXH1avma+AWhdPQYeSM8xFquer6wIrnMrw=)
                          2: 3thYKwJDhjxXLOJXhsyzb_eVsi4.crl (hash: CijELNvCRjMTO14fSQISYvPI/yPiPO1TQ58RO+3uBIo=)
                          3: LKSIMzg2qS8EWL02SO5YPjrz_I0.roa (hash: ZtwqDuK6zfdHnP5iApdAnlCr/naZTEL8mOtuOOiHgUY=)
                          4: uKO3HquanWKUmJ90M8YK1DIe1PA.roa (hash: XUrZ548wn+DveWLDDAs++NbjxnozKfTkNs4dRtLEX4w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:34:b2:35:96:6a:37:3c:ff:99:c0:4d:b2:14:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ded8582b0243863c572ce25786ccb36ff795b22e
        Validity
            Not Before: Apr 13 10:01:54 2025 GMT
            Not After : Apr 14 10:01:54 2025 GMT
        Subject: CN=9b1aa0f9c27c92013db462446ae62ecd0b22ee2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:01:27:71:84:06:99:f7:74:25:1c:56:97:f8:
                    7d:b7:72:13:04:ac:22:eb:ee:96:27:9a:36:24:09:
                    e4:7c:1c:10:01:ec:81:f7:7c:ac:b7:5f:7b:58:d7:
                    b3:22:62:34:0f:81:99:3d:bb:3b:4b:93:ea:03:2b:
                    ba:49:9b:6a:ef:98:2c:89:72:45:ad:2d:65:aa:fb:
                    55:c5:8e:8a:0c:be:e3:c6:26:9e:57:95:40:75:df:
                    b3:65:28:8a:1e:37:72:f4:86:d1:13:9a:66:64:96:
                    f1:2b:7b:e8:55:7d:76:16:13:83:f2:be:80:a9:6e:
                    e6:ff:bf:8e:29:45:e2:64:b8:ac:b7:15:27:4b:ee:
                    b4:a3:79:9a:d2:b1:35:9a:02:3e:2b:bf:f5:b5:e4:
                    dc:a1:e3:c5:4d:27:aa:e8:3a:a3:01:20:aa:8d:97:
                    15:7c:66:d8:9c:a3:b3:c4:2f:4b:d9:d8:4f:1a:b3:
                    92:c1:a6:36:1b:07:4f:2d:a1:c8:c2:98:a3:06:2a:
                    1f:6b:74:67:aa:81:9b:87:23:cb:1b:d4:5e:c2:6f:
                    65:43:b6:63:1c:30:9a:7e:c3:d9:0d:80:38:08:af:
                    f6:62:43:dc:97:22:37:4b:de:95:b0:11:e1:0a:e5:
                    61:b7:4b:c2:eb:52:8d:87:25:f4:69:85:c5:b3:3f:
                    f9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:1A:A0:F9:C2:7C:92:01:3D:B4:62:44:6A:E6:2E:CD:0B:22:EE:2F
            X509v3 Authority Key Identifier:
                keyid:DE:D8:58:2B:02:43:86:3C:57:2C:E2:57:86:CC:B3:6F:F7:95:B2:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3thYKwJDhjxXLOJXhsyzb_eVsi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ca510c-b6d1-4eb3-8dd1-498f4c10b655/1/3thYKwJDhjxXLOJXhsyzb_eVsi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:9f:09:86:48:f9:52:5f:0e:23:28:07:7c:e1:ca:a8:38:11:
         88:0c:5e:85:a2:f6:8f:9e:c0:97:6c:81:6a:52:5d:eb:9e:65:
         ff:66:27:8f:58:8f:0f:93:4a:8b:74:0e:44:25:e9:3b:08:50:
         f4:6f:68:57:f1:44:0b:08:90:45:e5:84:40:a8:0c:a9:80:d5:
         4a:7e:5e:56:bf:94:ae:4d:ad:3f:74:39:ec:04:f4:ca:cd:51:
         d0:49:99:26:d8:65:19:85:ed:b2:0f:9e:c9:47:69:26:04:f4:
         a3:3a:24:6e:f0:e6:63:ec:92:ed:1a:85:75:36:80:c6:fc:a5:
         cf:07:4e:d4:95:23:7a:b5:f2:da:73:de:6d:0a:dc:6e:e2:a6:
         03:cb:de:b5:7d:d8:a0:36:33:ae:b3:23:24:3f:6b:36:71:75:
         da:ca:01:c4:94:bd:a5:bc:81:00:f2:a4:26:23:af:23:20:06:
         68:0b:99:6b:82:29:73:c8:1c:9f:cb:a4:af:e5:17:c1:9e:0b:
         5f:bb:e7:ed:45:ff:f3:13:e3:cd:b9:f3:e5:80:fd:51:da:e5:
         03:92:bb:45:9f:ab:6e:bc:81:fc:90:af:94:40:24:61:43:2d:
         4e:6b:b1:a0:fb:e2:13:5e:ba:da:f1:2c:1b:d0:47:49:50:85:
         9f:93:70:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----