Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
File:                     t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft (raw, json)
Hash identifier:          E+rNLTB/iAr3L+ypyLGIw+HEckVLRHpcd3Yy9hthhKU=
Subject key identifier:   01:C9:E6:25:AC:C9:28:8F:6C:AB:B6:F7:D1:FB:B2:87:B5:18:7F:D8
Authority key identifier: B7:73:0C:83:22:11:8C:81:CA:84:BA:B1:B7:E0:89:0A:9C:85:E9:F7
Certificate issuer:       /CN=b7730c8322118c81ca84bab1b7e0890a9c85e9f7
Certificate serial:       01962F74C2B6366E5588F24F019F8914D21A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft
Manifest number:          03ED
Signing time:             Sun 13 Apr 2025 14:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:43 +0000
Files and hashes:         1: CrtWfCL7i9NVihI1TfWhriARtZk.roa (hash: GvkPNrJjcp+5LqZSEnG2rMaRPFf5goGwB+oAHuiRPHA=)
                          2: t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl (hash: vYofgsXVTYeGQSlS1jJbP5YjRqdW63+vIVr+v+h3k1I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c2:b6:36:6e:55:88:f2:4f:01:9f:89:14:d2:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7730c8322118c81ca84bab1b7e0890a9c85e9f7
        Validity
            Not Before: Apr 13 14:01:43 2025 GMT
            Not After : Apr 14 14:01:43 2025 GMT
        Subject: CN=01c9e625acc9288f6cabb6f7d1fbb287b5187fd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:af:6e:62:2a:91:8a:ec:72:95:0f:70:6a:8a:
                    04:a1:4d:a4:86:d8:2b:23:ad:9e:6d:62:ca:ed:93:
                    31:4a:bf:8d:89:e8:28:c6:f0:86:66:4e:a2:9d:01:
                    0c:a9:de:f6:a7:29:42:62:0e:56:de:3e:17:1f:85:
                    13:92:a1:38:ec:83:99:e2:95:84:f4:28:48:1f:9e:
                    11:86:ae:7e:f2:bb:e7:9c:a5:95:61:ac:99:2c:19:
                    37:27:d2:54:14:ff:b6:66:a6:48:d2:f1:61:a0:3a:
                    64:a9:64:70:a9:33:bf:30:64:0c:97:4b:ba:8e:ea:
                    ae:99:1f:51:fa:af:5c:56:3d:f1:cf:0e:83:86:7b:
                    7c:bc:91:7c:6f:d0:cc:2f:1e:9f:94:90:cc:70:d6:
                    cb:7a:92:1d:d0:e2:2c:2a:bd:b6:da:ff:81:a2:59:
                    b7:23:e6:fe:b5:08:f5:e0:f7:17:f6:26:42:fd:27:
                    30:73:73:ce:08:9c:4a:32:b0:0a:d0:f1:08:b8:66:
                    1c:84:74:c3:cd:f5:2e:65:06:e6:51:b3:ed:5f:79:
                    52:55:4c:4d:26:a0:f2:d4:62:35:30:74:93:62:ab:
                    3e:93:5f:d7:37:39:c2:f0:9e:b1:9a:0b:21:a4:da:
                    05:6f:69:77:4f:41:9c:a7:f6:f0:e2:a9:61:54:5c:
                    64:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C9:E6:25:AC:C9:28:8F:6C:AB:B6:F7:D1:FB:B2:87:B5:18:7F:D8
            X509v3 Authority Key Identifier:
                keyid:B7:73:0C:83:22:11:8C:81:CA:84:BA:B1:B7:E0:89:0A:9C:85:E9:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3MMgyIRjIHKhLqxt-CJCpyF6fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/b38fd7-9e68-426b-a100-1c0fd89dbcb4/1/t3MMgyIRjIHKhLqxt-CJCpyF6fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:9c:98:28:f0:3f:8b:ef:62:c3:b0:cc:a7:99:6f:4e:86:6c:
         76:9d:9c:70:6b:01:6f:7b:74:28:ce:39:e9:60:9c:98:1e:41:
         bb:26:81:30:54:2e:18:a2:9c:e7:61:5e:76:9d:6a:84:d2:d1:
         50:ee:c3:bb:9d:31:c4:4b:2a:c5:2d:54:b6:db:c6:86:2e:6c:
         4b:97:57:97:bc:8d:2e:8f:c6:71:10:f3:0a:98:af:1a:77:3a:
         c6:67:83:84:7e:8a:4a:28:ca:b8:59:c9:21:92:46:40:8d:8f:
         03:17:12:6f:64:65:f0:04:da:73:76:65:fb:cf:da:be:16:f8:
         5f:a1:f9:1f:8b:e9:06:3f:39:77:83:6a:24:6d:f0:27:86:12:
         9d:4c:3b:5e:c2:37:de:5d:f9:0f:4d:e0:7a:fc:bf:43:c2:c2:
         cd:19:9f:56:b5:f6:04:db:9c:30:c3:52:97:9f:a3:2b:c5:2f:
         7c:ea:0c:4e:44:9a:74:6d:e5:be:b4:62:8b:e7:13:70:d7:f1:
         31:de:66:69:b4:9e:e4:ac:d5:9e:18:5c:3c:4c:da:1d:bf:2a:
         81:d3:88:8a:c3:ca:00:08:48:95:55:a4:1f:5c:eb:cd:fc:96:
         17:ee:6b:b7:b1:02:6f:c3:5a:a0:91:d5:61:fa:75:d2:80:af:
         55:32:e8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----