Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
File:                     Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft (raw, json)
Hash identifier:          Pv2hy7lTTluXvNgUhXeIBEaAFv6Nb+JM/xWzojmJkyk=
Subject key identifier:   DD:02:BE:B3:82:91:B3:70:D0:FA:D8:8D:CD:7F:43:8F:9F:88:73:E2
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Certificate issuer:       /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial:       0195E00F4C668D5435D63009C999F54B4214
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
Manifest number:          14D0
Signing time:             Sat 29 Mar 2025 04:00:53 +0000
Manifest this update:     Sat 29 Mar 2025 04:00:53 +0000
Manifest next update:     Sun 30 Mar 2025 04:00:53 +0000
Files and hashes:         1: 5MqBF4i8BqhzlDGimWpaFWipxD8.roa (hash: MYEA5FchPdcQGymALvx1VvMPC8QAmCOTqUn7uw1S3z0=)
                          2: 9KZb39IEb0WWPyuJulLlRX0ZLfI.roa (hash: YnpShdCnZX/ire+BXl4T51E6H78mElMjOB6jDczjp6M=)
                          3: FLnErLvOpzZbsRT_gxw1xkGyG-k.roa (hash: hVcpYnUD1s1paKRtMc3s9Fba/ywgfiiofSMSn9fncl4=)
                          4: HXA-khxqd5TaAqh8eLrHhN2_LU8.roa (hash: zWZYj+sxS+SqeGEcqQJZ7ZzfpiEWQtCnX+c5IlcAdbA=)
                          5: Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl (hash: c5AJbSujG/gb7j8HmPnn0bF3FVk39LIzNa+MvvAjSI8=)
                          6: fHBWkmSFwq7LIW_ikf6imNT9GPM.roa (hash: vMQgcBUmEy5lwUWbnyfzmlIYcn2OcylWPP/mcEC7Ato=)
                          7: oxxYyMD9-MXd0OWiZhKW-CdMQTw.roa (hash: Y7mHGy+U3U1zSd6zRNzErqyDJ2hjbwn9SB30MoGbyUM=)
                          8: qG-WX1fopXDz0qQT0U9YtbS5nr0.roa (hash: 28PSMJL/ooEpgWs64Lr2agA+bTb7t6T/v6hQPgbSK14=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:4c:66:8d:54:35:d6:30:09:c9:99:f5:4b:42:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
        Validity
            Not Before: Mar 29 04:00:53 2025 GMT
            Not After : Mar 30 04:00:53 2025 GMT
        Subject: CN=dd02beb38291b370d0fad88dcd7f438f9f8873e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f9:f0:11:25:a2:71:6a:cb:21:86:55:de:f0:
                    ba:10:e2:60:29:d9:8b:83:93:22:9c:19:29:34:a2:
                    c9:86:21:58:43:df:3c:65:c2:41:83:67:91:4d:fa:
                    4b:f9:26:68:1a:47:b2:e9:43:60:a2:53:03:72:da:
                    d3:21:84:6e:d9:58:0d:77:b5:26:a6:ab:6f:ef:5e:
                    43:08:fb:e3:c6:38:ee:11:c8:41:7e:b8:62:d0:18:
                    11:f1:9e:38:ad:a5:1e:19:3d:94:b2:8f:6c:fe:f4:
                    8f:51:3b:ac:12:df:08:33:3c:f7:a4:f7:0b:d3:32:
                    db:5d:f3:78:95:f8:f9:86:e9:52:b0:26:19:5d:c8:
                    98:7a:a3:ee:6c:13:0a:98:8c:b8:d4:f6:fe:0e:78:
                    44:83:9e:93:88:ca:4b:9a:75:53:96:a1:5c:21:8c:
                    8c:74:e6:e2:52:e9:bd:77:92:40:35:79:46:8f:ab:
                    6c:ae:9c:db:9b:1d:c5:b9:4a:bf:d2:86:1d:92:46:
                    f8:a8:34:bf:04:4b:a7:d8:6d:3a:d7:45:11:00:c8:
                    17:31:9d:eb:e0:7b:13:02:77:96:f5:66:12:b0:13:
                    47:f1:29:62:44:2a:fc:6d:ee:28:31:dc:96:77:0b:
                    e4:78:73:22:98:7b:e3:e8:b9:ba:44:45:be:a8:f3:
                    32:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:02:BE:B3:82:91:B3:70:D0:FA:D8:8D:CD:7F:43:8F:9F:88:73:E2
            X509v3 Authority Key Identifier:
                keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:be:b2:8c:f6:e2:2d:09:81:b6:a7:e8:9b:e0:ce:10:6a:5a:
         ab:72:be:32:dc:08:a9:bd:44:d5:6c:ad:d7:d2:b0:5b:e5:cd:
         92:0b:72:35:e5:0f:f3:c5:e0:6e:27:c3:a4:18:15:78:3a:ea:
         8f:ad:ea:82:06:9d:58:e0:f0:e1:7f:bc:5e:e9:f5:76:64:a7:
         22:60:65:3f:73:ee:6c:82:52:63:73:89:84:80:24:dd:b8:d5:
         7c:01:c1:56:62:3f:38:9e:60:d6:c2:f9:6f:69:46:1e:99:1e:
         07:95:01:b3:45:97:7f:f2:63:95:50:28:c8:ac:dc:b9:e3:cd:
         48:11:24:e2:76:4a:94:08:54:51:e8:83:73:02:18:b1:bf:3a:
         17:a6:1b:15:e6:3e:e9:6d:5f:d6:3f:b9:c4:97:cb:bb:f9:3e:
         58:44:cc:b0:56:0f:09:f6:14:21:81:62:d6:6d:56:05:b3:d2:
         94:aa:ce:ea:40:27:96:c7:e5:d8:59:5b:20:87:ae:e4:bc:9a:
         ae:31:ba:fa:95:17:b1:0e:f5:b4:cc:d5:ad:ff:9d:ba:11:33:
         d9:f7:33:00:9b:ec:cb:6f:56:e2:ba:e7:57:07:ba:9f:9d:21:
         1f:4d:68:91:6c:21:62:af:5a:58:7c:06:8a:41:95:07:17:d8:
         13:e7:d0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----