Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
File:                     88t3pwdfknzEAY1W5s11xZjcOlE.mft (raw, json)
Hash identifier:          7M3n9RpDxGZHyUZfsXnH8EL1U7qWJq1/efLJEt60e6s=
Subject key identifier:   28:1A:0F:FF:2A:09:E3:39:51:6B:91:B0:3E:DA:1E:FA:E7:B4:BE:89
Authority key identifier: F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51
Certificate issuer:       /CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
Certificate serial:       01962F06959CF2C8FAF5E1452E291C7B7FD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:22 +0000
Files and hashes:         1: 88t3pwdfknzEAY1W5s11xZjcOlE.crl (hash: nOVWU1N76JFKRzc0Ic6FghRmhj8GkAOkXDbbgNBQ2SQ=)
                          2: HuqhC6vYeI3U9LbLd2vPzvJJgjY.roa (hash: wSYDAGLK1hTNyvlQrxhKmWYaQ0H+BBeF5/EeuiOBKAA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:95:9c:f2:c8:fa:f5:e1:45:2e:29:1c:7b:7f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3cb77a7075f927cc4018d56e6cd75c598dc3a51
        Validity
            Not Before: Apr 13 12:01:22 2025 GMT
            Not After : Apr 14 12:01:22 2025 GMT
        Subject: CN=281a0fff2a09e339516b91b03eda1efae7b4be89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:49:78:10:68:64:b8:ec:55:ef:ec:8f:23:be:
                    72:c0:76:4f:4e:48:53:10:14:b8:f2:df:82:fb:b8:
                    36:d9:52:21:8d:2a:9a:9b:58:11:aa:30:fd:a3:5f:
                    b6:50:c6:64:c7:69:70:73:8d:65:75:77:9d:b3:b3:
                    14:5f:00:fd:0f:9d:9e:5f:1f:05:68:94:12:40:a8:
                    47:b8:83:1d:c3:f7:5a:f9:e8:23:b6:af:bc:81:01:
                    62:b7:58:56:aa:ac:c8:ee:2a:3d:88:3b:fe:55:1a:
                    c9:81:d7:0a:41:46:42:5d:85:17:95:d8:4f:0b:46:
                    a6:71:41:99:a6:f3:7c:04:24:e8:d3:99:9a:4e:1b:
                    43:08:d0:5f:8d:25:ad:79:9b:ba:8a:aa:5a:54:4a:
                    de:0e:14:72:63:3d:8d:9f:f0:27:68:9a:f2:20:05:
                    e1:56:b3:06:d7:4f:88:51:5a:69:25:32:16:8f:d4:
                    94:a7:f2:11:4c:f8:ef:eb:e5:64:1e:c5:e0:e9:2f:
                    a8:43:50:75:d8:56:08:06:a7:80:c1:a8:c8:f5:c9:
                    26:72:e4:b1:53:ac:6d:b0:7e:15:f2:4d:ff:ee:3c:
                    f2:46:5c:11:08:a1:4c:60:ad:fc:2c:0d:19:08:88:
                    bf:fb:5c:0a:34:3b:57:24:5e:0a:14:eb:18:bf:2e:
                    dd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:1A:0F:FF:2A:09:E3:39:51:6B:91:B0:3E:DA:1E:FA:E7:B4:BE:89
            X509v3 Authority Key Identifier:
                keyid:F3:CB:77:A7:07:5F:92:7C:C4:01:8D:56:E6:CD:75:C5:98:DC:3A:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88t3pwdfknzEAY1W5s11xZjcOlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/dd01ad-6c27-457f-b064-707711b81ef7/1/88t3pwdfknzEAY1W5s11xZjcOlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:3c:6f:6c:1e:3b:5f:e1:e9:f0:c7:a1:41:7d:83:93:03:26:
         2c:4d:1e:72:52:95:52:c4:8c:be:aa:5d:6d:72:79:89:67:cd:
         9c:96:18:7a:be:80:29:b3:4b:a0:aa:31:ad:f9:b6:bf:ef:2f:
         14:9a:e8:8c:00:86:f1:5a:17:fc:5e:a7:18:2a:5f:a4:c0:e7:
         e5:c0:be:67:d4:b3:76:89:30:54:d0:33:26:99:fc:d8:2f:3c:
         bd:ab:b5:3a:c7:fe:ed:d0:f5:1c:d3:4b:27:61:52:8e:d4:4d:
         9a:b9:61:ed:b8:e2:ff:3d:e5:a8:98:b3:81:46:31:04:3d:db:
         3a:e7:bb:56:29:16:b3:83:3d:50:60:05:c3:43:f4:48:98:5e:
         d0:18:2f:23:92:ab:a0:77:ef:e8:e4:19:25:fe:e4:5e:0a:82:
         77:f4:9f:14:5f:7e:ac:dc:e0:34:b4:ca:b6:3a:3e:f9:6c:d5:
         21:a7:ef:83:36:ca:ae:eb:bc:85:09:d8:a9:64:d8:3a:4b:76:
         01:4c:bf:84:51:84:95:95:c4:6f:20:b6:4e:f2:ca:33:a2:09:
         c9:7d:79:1a:c3:fe:d5:af:e9:cb:2a:91:66:fe:58:b2:09:c6:
         ff:91:4a:60:be:1e:d2:0b:3d:93:28:10:72:cc:9b:b0:e3:f5:
         e2:30:4e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----