Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
File:                     336sT6MToueS5UJjzGBf8xnzXBk.mft (raw, json)
Hash identifier:          UmL0A8huMQ/LlgVIVpBLj0hQ0b/Isbl+mCD6AHa5OQk=
Subject key identifier:   F8:5F:F2:61:48:EC:B0:B3:47:07:D3:6A:EE:02:94:AC:79:7C:BA:36
Authority key identifier: DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
Certificate issuer:       /CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Certificate serial:       01962F7476DB8B3BDFAEBD26E65A86B10E27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
Manifest number:          11AC
Signing time:             Sun 13 Apr 2025 14:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:23 +0000
Files and hashes:         1: 336sT6MToueS5UJjzGBf8xnzXBk.crl (hash: vuEfb5hPSYyzkabcCkyWx2uUWgHo/qolUwfXS6xfYeY=)
                          2: Xi7lkR0c05Etap_dSBWpiwrEM4M.roa (hash: AVQnmWgZkK9yLrT3rnvMnMOzEJkOrW4pUBp2ldNlySk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:76:db:8b:3b:df:ae:bd:26:e6:5a:86:b1:0e:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7eac4fa313a2e792e54263cc605ff319f35c19
        Validity
            Not Before: Apr 13 14:01:23 2025 GMT
            Not After : Apr 14 14:01:23 2025 GMT
        Subject: CN=f85ff26148ecb0b34707d36aee0294ac797cba36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9a:1d:1d:05:16:fb:78:34:6c:63:fa:a0:41:
                    79:89:10:61:1f:91:07:d3:a0:03:9d:0f:43:2f:04:
                    e7:63:fa:79:dd:3f:7f:20:fd:60:5b:77:bd:f8:d7:
                    a4:ad:9e:f4:8c:a9:73:2d:7f:68:b2:ae:79:6a:15:
                    a6:2e:7c:f7:3b:ce:53:2f:c6:da:8e:ad:b9:c5:ec:
                    78:b5:7a:9c:6d:bd:2d:21:d1:1a:b8:0a:5a:bb:2a:
                    fc:fe:d1:50:ad:0c:b4:00:5e:64:5e:a6:e5:7e:5d:
                    07:ae:99:67:da:79:63:a1:31:40:53:66:74:0e:f3:
                    c1:6a:73:94:7b:b7:cf:b8:9c:e8:6a:d4:ef:24:86:
                    87:79:e2:b2:73:b9:3b:87:06:77:02:f5:51:34:0d:
                    bd:44:a3:07:db:a9:c6:e2:25:dc:66:a3:44:e1:6c:
                    4d:d3:83:0f:f6:fa:09:dc:0e:12:6b:be:51:dc:66:
                    34:7c:23:b1:83:50:0e:1f:7a:0c:92:e2:ef:3f:d3:
                    bd:92:2b:1b:6a:ae:3d:db:dd:37:52:d3:cb:d0:3e:
                    f7:37:6e:e1:8d:0c:52:52:70:b9:fc:1a:8d:ea:ab:
                    be:0e:71:e1:38:73:36:1d:0e:73:a7:5a:55:6e:18:
                    19:16:fe:2a:70:1f:f7:04:35:79:7f:a7:8e:5e:85:
                    a6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:5F:F2:61:48:EC:B0:B3:47:07:D3:6A:EE:02:94:AC:79:7C:BA:36
            X509v3 Authority Key Identifier:
                keyid:DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:cf:e8:be:fb:7d:b4:41:75:5a:cb:4b:e9:f0:2c:cd:b3:9b:
         c6:23:f3:02:94:f3:b2:3a:20:fb:54:55:22:42:38:b2:65:03:
         63:f5:20:c9:d4:d0:65:45:5c:19:9c:ff:78:14:52:58:3f:54:
         86:96:51:e0:56:6f:ae:2a:89:b7:b1:85:be:13:7e:5d:65:9e:
         a7:10:df:25:fb:67:45:db:b4:79:56:53:ae:f2:3c:95:3c:40:
         cf:a4:62:db:84:af:ab:b9:fc:75:bf:62:dc:8e:ed:2b:fe:00:
         55:b5:5f:50:ea:27:9a:2e:37:ab:ad:2e:f1:24:fa:9b:90:36:
         45:4a:a2:1d:d7:7f:9c:c0:17:36:66:26:ca:14:d8:a2:ac:34:
         d4:e3:8e:69:09:07:75:41:74:8c:59:36:ce:48:c5:25:b6:1e:
         30:cd:8e:f0:af:2e:d8:59:9d:92:c9:7e:15:da:18:ae:eb:69:
         96:e1:2b:3e:1e:c7:ad:ac:ae:33:9c:ec:0e:93:82:ef:55:f0:
         2f:e5:f5:1b:9e:d3:17:11:89:b4:af:f2:09:be:36:ec:32:50:
         a7:7e:53:1b:e2:66:47:5b:ac:a7:f0:a6:b8:48:b4:23:6c:b0:
         2c:e5:2d:be:83:9c:8a:67:ef:fd:21:79:19:06:00:b2:f2:95:
         84:06:a1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----