Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
File:                     0xQt8vZwlAzPWksnoNDJh-zIhlY.mft (raw, json)
Hash identifier:          G6Onv5RNIJdLRuVYlcbUZEzTAZxJLQ0E/BdGC7RCbHM=
Subject key identifier:   CC:EE:74:5C:94:6B:11:9E:98:44:5B:96:8C:A2:D3:41:C7:2F:A4:67
Authority key identifier: D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56
Certificate issuer:       /CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656
Certificate serial:       01962F3D3B0A43D58465891A22C2C89627CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft
Manifest number:          01FB
Signing time:             Sun 13 Apr 2025 13:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:04 +0000
Files and hashes:         1: 0xQt8vZwlAzPWksnoNDJh-zIhlY.crl (hash: 4nuk81sMdSyRNUzjBPkkR5Se7C8aqqzaehstjqojpA8=)
                          2: DxWkaJkNeo1GnfX8PTB6m_7NDo8.roa (hash: 1C13Qsc+uAlJmXy/kak788lVFXMyWIaA+AZiv7RcjGk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:3b:0a:43:d5:84:65:89:1a:22:c2:c8:96:27:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656
        Validity
            Not Before: Apr 13 13:01:04 2025 GMT
            Not After : Apr 14 13:01:04 2025 GMT
        Subject: CN=ccee745c946b119e98445b968ca2d341c72fa467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:99:c2:d1:b7:7a:45:07:7b:71:62:db:ca:cc:
                    8f:93:6b:ea:85:aa:2d:b4:ea:dc:42:55:2d:44:19:
                    70:f4:55:1c:26:4c:55:69:c0:05:56:e5:a7:d7:c0:
                    8e:d4:80:7b:13:6f:61:06:51:96:15:b1:9d:c5:fe:
                    c0:d2:34:e4:2c:eb:75:9f:86:40:0b:ab:85:a8:65:
                    48:b4:d4:ee:7b:ad:a4:38:d2:bf:f3:64:72:02:36:
                    c8:18:8a:b9:d1:2c:89:ff:00:8d:bc:ed:04:63:07:
                    87:60:1c:d5:22:22:5f:a2:d8:a9:13:74:28:39:64:
                    06:76:99:f5:7f:ac:84:e1:66:48:65:05:da:43:ab:
                    c6:a9:90:bd:79:0f:4a:af:dd:20:ac:4a:7f:39:c4:
                    9f:54:c6:00:67:ad:9b:e9:c4:bf:e5:09:e7:ca:c0:
                    71:2e:5e:83:40:04:2d:d5:bd:6d:5d:14:af:99:95:
                    46:59:fe:ee:09:f4:08:89:f0:20:43:fa:3f:3f:c1:
                    cc:22:ba:24:d6:22:b2:82:f3:8e:f3:ca:2a:0a:ef:
                    cd:86:0b:68:0d:e5:1b:f8:84:dc:30:09:c8:4c:7d:
                    48:ab:8a:65:08:75:4b:48:37:9d:c5:87:4e:9c:08:
                    f2:66:ea:93:5b:05:2f:2c:60:e0:ae:a9:6a:68:21:
                    9e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EE:74:5C:94:6B:11:9E:98:44:5B:96:8C:A2:D3:41:C7:2F:A4:67
            X509v3 Authority Key Identifier:
                keyid:D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:30:f8:f2:18:58:e8:b3:70:58:ff:5a:39:c6:fc:27:b2:13:
         3d:10:17:82:d1:f7:f8:53:0e:44:e2:9e:2a:43:95:64:2b:0e:
         16:29:6f:4e:19:7e:40:34:11:70:9f:cc:c8:fa:93:b9:9e:3e:
         d8:0e:b2:b2:a5:dc:15:8c:2a:09:e5:28:6c:ce:dd:0f:95:78:
         11:44:2c:0e:a1:a1:93:a7:e5:55:b5:af:7b:2d:02:c0:19:08:
         f3:01:6c:46:dc:6b:dc:77:fc:66:f1:a0:83:0e:e6:d0:42:d8:
         96:13:64:b0:f8:fe:4c:ff:f1:81:af:52:96:a7:ac:a6:41:6b:
         44:69:e0:ee:87:fa:df:6a:79:a8:35:44:16:0c:d3:cf:29:1f:
         e9:98:5d:9b:38:a1:f3:26:ee:db:67:6a:d7:f1:36:69:8d:ed:
         3f:9e:08:65:91:fa:61:99:32:d3:7e:99:08:08:32:b4:60:64:
         75:a8:f3:54:c5:57:5a:6f:8e:62:a1:ba:e3:f7:59:bb:a2:03:
         61:a4:4f:c0:d9:66:78:44:d6:9a:37:e3:95:bb:6e:09:fb:7b:
         91:50:de:09:30:e4:aa:34:0a:ad:a4:41:95:6c:53:78:9f:47:
         c7:ea:dc:e7:b0:30:35:8a:1c:d7:45:13:27:50:4c:69:ff:de:
         d3:f8:1f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----