Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
File:                     3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json)
Hash identifier:          lCypRBj/VblEjll6M00zgKCXrzBrFjOMjQ0L1YhOsEs=
Subject key identifier:   9C:21:5B:89:D7:46:B1:38:BC:92:6C:A2:D9:26:1D:BE:38:34:C8:C3
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Certificate issuer:       /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial:       0195E07D7DEEE0414ED3C126E999582D13F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
Manifest number:          14CA
Signing time:             Sat 29 Mar 2025 06:01:15 +0000
Manifest this update:     Sat 29 Mar 2025 06:01:15 +0000
Manifest next update:     Sun 30 Mar 2025 06:01:15 +0000
Files and hashes:         1: 1-r8ngTnAMIWnigi3kZKRlPxzAEg.roa (hash: 4upInjfh8BMDhZW1GMRFLRcUKFy4sgss61UjVbuCcN4=)
                          2: 3bHFI98fNrO-AI7iYMdoY6Cy4Ec.roa (hash: jNavEGcWKNfNKB84/MmKoUJXT5oHj4PAQhOkM5ErTv4=)
                          3: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: n7uTuKHNVbCTup1zMg8vCTJnnbecrxdZFmlWridJd9g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:7d:7d:ee:e0:41:4e:d3:c1:26:e9:99:58:2d:13:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
        Validity
            Not Before: Mar 29 06:01:15 2025 GMT
            Not After : Mar 30 06:01:15 2025 GMT
        Subject: CN=9c215b89d746b138bc926ca2d9261dbe3834c8c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cc:0b:a2:2b:fd:a8:73:63:90:d3:5b:a9:e0:
                    65:68:7e:47:2f:c2:f6:c6:e0:78:7a:10:02:05:62:
                    d9:b8:0e:84:be:1e:20:e3:83:65:83:1a:5a:e2:fe:
                    09:9f:47:84:be:b5:3b:9a:57:8d:a2:cd:92:bd:84:
                    e8:93:fe:13:c4:57:b3:65:6e:f7:27:66:1a:bf:8d:
                    88:c0:89:2f:8f:86:0f:32:b9:3e:34:ac:d6:68:81:
                    3e:8b:73:73:e5:8f:b7:c2:7e:49:55:8f:f2:42:ca:
                    97:0b:e7:c4:66:56:b7:c6:bb:5b:94:6a:5d:f0:39:
                    20:a1:ee:0a:be:a2:55:48:a9:58:7a:b7:25:67:6b:
                    44:fc:2f:a7:b4:b3:c2:10:f8:36:4b:4a:a3:98:b6:
                    5e:76:20:a0:25:61:0b:d9:0d:35:89:25:cb:f0:86:
                    b6:46:d3:1e:3b:0a:a8:db:06:5c:ba:f5:f1:aa:84:
                    84:7c:fb:64:d5:90:02:71:d7:d1:c8:c1:61:58:27:
                    ac:ee:bf:b3:d4:4e:9c:c0:1d:d9:7d:e3:8a:af:7b:
                    1f:5b:d6:5a:4f:95:af:ea:f9:b2:9a:e9:f5:29:9d:
                    ad:da:13:47:b4:53:7e:8e:1a:83:30:85:e0:7d:9c:
                    9a:0e:73:0c:23:81:b1:ff:2e:f2:64:f2:5a:83:9e:
                    34:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:21:5B:89:D7:46:B1:38:BC:92:6C:A2:D9:26:1D:BE:38:34:C8:C3
            X509v3 Authority Key Identifier:
                keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:12:ef:60:94:19:47:1e:f5:11:f8:97:75:78:34:a6:dd:14:
         f4:58:2e:73:57:8d:a1:c5:d0:b2:f8:96:2c:33:06:29:a5:93:
         06:76:85:3d:e3:06:ae:4c:37:49:fd:90:22:ce:bf:1f:cb:9f:
         03:df:e1:4a:f0:f2:ef:6b:d9:90:c8:1a:3d:d2:90:2b:f8:db:
         3d:5a:08:57:35:82:71:f4:99:81:74:0e:f2:bd:29:0f:7a:bd:
         ee:71:2f:1d:e9:9a:ac:3d:e5:16:71:95:1a:9f:57:36:29:4c:
         7d:f8:88:c6:3e:59:37:dd:9d:dd:06:5f:dc:0a:f0:74:a4:ea:
         30:e8:14:f5:49:19:b0:ca:a0:d0:2f:19:02:b0:f8:c7:af:2c:
         46:a8:72:4f:11:19:1d:81:f6:c8:58:7d:44:37:85:f2:b0:5d:
         b1:b5:19:1f:44:c2:97:b3:93:30:91:6e:9a:4a:41:1d:2c:dd:
         d8:a8:dc:1e:24:a2:8c:f9:91:88:2e:9f:43:38:f2:42:90:6e:
         9b:02:13:42:fb:ea:56:20:0f:9d:a1:71:a6:a1:2a:2a:7f:63:
         e1:fe:4a:49:78:72:83:2f:20:73:87:96:5f:5e:d2:70:4e:f3:
         6b:7a:98:2c:da:49:5e:5c:50:d3:00:ca:59:8f:62:84:42:89:
         94:7e:d1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----