Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
File:                     x3_gBdfljsAzypq6h-BgYCFTNhc.mft (raw, json)
Hash identifier:          X7NmnwctJRLtI5s0QxtVnT5gOaaX9nPQeihk3vTXtdw=
Subject key identifier:   4C:77:39:86:25:3D:6D:2D:DD:3F:1B:87:9D:5A:C8:C8:B2:F4:14:2D
Authority key identifier: C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17
Certificate issuer:       /CN=c77fe005d7e58ec033ca9aba87e0606021533617
Certificate serial:       01962E99223F6C9332E88B68E511AE86AD97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft
Manifest number:          0990
Signing time:             Sun 13 Apr 2025 10:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:49 +0000
Files and hashes:         1: 2HWaYe8To0qjjtVdcy7I7ttFbbg.roa (hash: va5+QSQ1VvFYIrECNgHjVJbI88Ftr5DD+GPYmuN05H8=)
                          2: 8RHKnf43EnDTyj22kIIfanQSEQc.roa (hash: HbgpO2hUs5v1oFq30hojEK1YQFHOK9Zr5sDwHkBpSCg=)
                          3: OHUMAhwuz8j9ycFP0uC93_9dMsI.roa (hash: K0wUqFGby+8hOwpjxyeCuygnkldFbJEc1krNUlngfaA=)
                          4: x3_gBdfljsAzypq6h-BgYCFTNhc.crl (hash: OWT4DsgdPVxoVdLxrd7pTIw/yn1JpYX7Rc8UhDhhPWY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:22:3f:6c:93:32:e8:8b:68:e5:11:ae:86:ad:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77fe005d7e58ec033ca9aba87e0606021533617
        Validity
            Not Before: Apr 13 10:01:49 2025 GMT
            Not After : Apr 14 10:01:49 2025 GMT
        Subject: CN=4c773986253d6d2ddd3f1b879d5ac8c8b2f4142d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:11:4d:8f:76:33:f7:7e:1d:f5:ba:c6:f9:41:
                    b5:94:47:ff:a7:42:12:8a:b8:50:6c:65:9f:c0:e5:
                    3c:ee:4c:30:94:0b:04:6b:cf:c2:ef:d2:75:f7:0c:
                    5e:47:ad:88:28:17:66:33:08:32:ff:87:50:77:7d:
                    dc:5e:d5:c5:06:04:21:92:ff:41:62:9d:cd:42:25:
                    69:9e:14:3e:8b:6b:ec:11:01:fb:16:32:84:4d:4d:
                    e3:27:cf:72:32:06:05:cf:b3:2c:5f:f7:08:93:88:
                    9a:86:40:38:e5:6f:4c:cf:25:3e:6a:f8:da:d6:df:
                    56:09:98:f8:19:6f:20:4f:6b:41:cf:14:15:b7:82:
                    90:37:e5:0f:08:e4:bb:8a:15:06:d3:25:0a:d2:5e:
                    3a:3e:5a:a6:bb:93:ca:a7:48:27:6d:85:63:57:5d:
                    18:3b:a7:9e:67:a3:b4:89:36:0d:c9:c8:09:4b:2c:
                    af:2e:9b:1e:05:2d:3c:f0:86:59:b0:5b:4b:b4:62:
                    00:fe:26:d2:69:f8:2d:b6:ce:71:96:2c:c3:5a:ab:
                    17:11:31:af:40:98:00:85:ef:0e:36:12:18:c9:33:
                    a3:06:53:86:43:89:c0:80:a4:40:df:96:8b:1a:5c:
                    6c:b9:33:bb:70:b7:93:c1:fe:7e:90:59:30:73:c3:
                    c1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:77:39:86:25:3D:6D:2D:DD:3F:1B:87:9D:5A:C8:C8:B2:F4:14:2D
            X509v3 Authority Key Identifier:
                keyid:C7:7F:E0:05:D7:E5:8E:C0:33:CA:9A:BA:87:E0:60:60:21:53:36:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_gBdfljsAzypq6h-BgYCFTNhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e32df8-3a1e-42fc-b351-0ed24ebc4ed8/1/x3_gBdfljsAzypq6h-BgYCFTNhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:07:61:4a:38:fb:34:a2:ab:43:82:a6:ee:55:ce:88:f5:5d:
         9f:09:f9:a1:9e:d0:5a:0d:64:8f:95:62:d6:a4:26:1f:56:90:
         ef:e1:cb:f5:9c:5a:34:97:33:b4:72:49:df:f7:13:c6:ce:6c:
         53:51:1d:47:7e:d4:5d:8b:8d:ae:d9:1d:f6:25:81:56:c9:9b:
         c2:2c:6f:2c:85:df:35:6d:eb:e8:46:c7:6a:fe:3a:e1:7b:06:
         94:01:3d:8f:53:0d:31:93:ff:52:87:80:1c:07:ff:c7:a7:0b:
         99:fd:86:fe:f4:98:57:3f:05:3b:02:9d:05:63:34:b1:20:8d:
         07:92:bf:d8:b7:ea:60:21:2c:39:7b:86:4f:24:64:ba:21:aa:
         54:4d:c8:eb:46:51:4b:fb:3b:b7:d0:f8:09:e4:76:6f:9c:96:
         39:f2:41:93:1a:ae:64:50:ea:f0:17:d9:f2:68:ef:ab:2c:42:
         12:22:01:fd:92:c0:e6:0d:1a:24:de:e4:fa:4f:fe:bc:1e:2c:
         84:28:ba:39:27:f6:9c:65:7c:6d:eb:da:47:f2:76:49:dd:f7:
         7a:07:bc:1a:e5:87:5f:86:19:84:c1:5e:44:15:0a:0b:a5:86:
         3a:2f:79:bc:a4:8e:69:f7:f3:56:8c:fc:70:87:7a:08:36:38:
         a7:1a:01:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----