Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
File:                     3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft (raw, json)
Hash identifier:          GOqGZVDvSOWYhRbebOa4x0J84yF3ZbkOM3IGAtQPwLc=
Subject key identifier:   58:68:C0:92:90:DD:34:6E:75:4F:13:83:C6:54:F0:D0:15:96:D8:4F
Authority key identifier: DC:C5:0A:2B:97:43:49:94:8B:04:EE:38:9B:2A:99:D1:75:4F:B4:64
Certificate issuer:       /CN=dcc50a2b974349948b04ee389b2a99d1754fb464
Certificate serial:       01962DF3C215CB17E0EA041583431A933060
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3MUKK5dDSZSLBO44myqZ0XVPtGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft
Manifest number:          10C6
Signing time:             Sun 13 Apr 2025 07:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:11 +0000
Files and hashes:         1: 3MUKK5dDSZSLBO44myqZ0XVPtGQ.crl (hash: OTbjVEcEnlCQZ5VyyobGjw5WypZclcSet/eu/ypsXvE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:c2:15:cb:17:e0:ea:04:15:83:43:1a:93:30:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcc50a2b974349948b04ee389b2a99d1754fb464
        Validity
            Not Before: Apr 13 07:01:11 2025 GMT
            Not After : Apr 14 07:01:11 2025 GMT
        Subject: CN=5868c09290dd346e754f1383c654f0d01596d84f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:29:2f:9f:65:71:59:68:6d:b3:8c:08:be:60:
                    c3:05:c7:9e:88:b0:c9:bb:40:4e:8e:68:10:ab:ae:
                    db:5f:73:b3:6c:a8:4d:d7:9b:83:9c:25:dc:dd:d3:
                    49:5b:2d:db:14:1d:08:db:69:b1:50:11:ca:d1:13:
                    be:c4:8c:2d:9c:8e:62:a5:00:a1:24:6b:3e:b7:58:
                    54:7a:84:64:0f:94:19:2b:78:ca:6b:2e:e8:80:c2:
                    a9:59:23:fc:2b:46:04:f7:0d:53:5b:0b:0d:f3:d3:
                    c5:68:db:a7:53:d7:04:c8:a3:21:aa:79:10:8e:9d:
                    7b:cd:76:64:29:aa:33:b4:d3:fd:4f:18:b2:3c:8a:
                    19:09:b6:a0:f8:ff:23:2e:bb:eb:38:70:af:54:e4:
                    19:7a:92:aa:85:d1:da:5d:63:51:81:33:9e:53:a0:
                    d4:31:38:27:d4:16:e6:3a:84:4a:23:4c:a9:2a:44:
                    bf:37:07:2b:3e:5b:9c:ce:2c:d9:f5:58:37:e8:9f:
                    ab:8f:08:78:51:b4:78:66:5f:43:c9:37:03:c7:52:
                    02:6f:4f:bf:28:03:41:dd:19:e8:6c:1e:32:4c:14:
                    5e:15:52:13:d5:3e:23:c2:98:61:a1:c5:1d:e7:85:
                    a2:8f:d6:5c:55:bf:a7:33:c2:f0:34:dd:d5:83:ed:
                    b4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:68:C0:92:90:DD:34:6E:75:4F:13:83:C6:54:F0:D0:15:96:D8:4F
            X509v3 Authority Key Identifier:
                keyid:DC:C5:0A:2B:97:43:49:94:8B:04:EE:38:9B:2A:99:D1:75:4F:B4:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3MUKK5dDSZSLBO44myqZ0XVPtGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/707158-d1e2-4fcb-81cb-5979d00486fe/1/3MUKK5dDSZSLBO44myqZ0XVPtGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:b7:f6:d9:a4:35:3f:1f:88:b3:c2:86:29:8e:1e:19:dd:38:
         a7:fb:c9:5e:78:65:3b:bf:28:80:12:30:fb:61:0c:b2:b7:f8:
         75:39:40:8b:40:68:a2:73:c1:68:da:ca:a3:29:f9:8f:8c:bf:
         90:6c:2a:00:a3:48:d4:59:84:f0:d8:4a:17:11:fa:15:17:59:
         d2:74:12:09:58:0c:20:47:ba:61:aa:c6:1c:18:d0:a6:02:cb:
         02:ca:75:f1:40:1c:a5:93:e0:a1:25:5e:b1:c1:12:bf:72:09:
         eb:d2:53:c7:26:56:f5:45:87:15:65:0c:db:22:da:83:e6:7b:
         7a:32:10:7d:08:0f:fe:b2:74:63:01:25:ad:59:eb:a0:d4:72:
         85:b6:00:93:67:45:57:5d:e9:82:34:f7:16:b3:13:94:08:c2:
         24:0d:87:7f:40:d8:b9:af:6c:fa:e3:50:1a:d7:a0:bf:c6:6b:
         2a:10:d4:98:a9:15:77:30:3d:ef:e5:f6:46:94:1f:7c:75:13:
         f7:04:8a:cd:e8:53:64:c9:9e:dc:d3:b1:c1:1f:ab:74:60:85:
         43:8e:61:25:3c:6f:1b:cd:35:b6:65:f6:e7:40:ec:3a:54:ca:
         71:9e:53:8c:1b:98:80:94:46:55:8a:4e:94:db:e9:d2:45:bc:
         b6:2b:91:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----