Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
File:                     3YqroPRrqhRP2wk46RwU-UxhZQw.mft (raw, json)
Hash identifier:          XsJsmI9MV5p18Le77j9861TA/DG2r4wbu77SvrOTSd4=
Subject key identifier:   4A:FB:56:58:4D:EB:65:BC:89:14:BA:A7:0B:31:24:58:4A:0B:8E:44
Authority key identifier: DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C
Certificate issuer:       /CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c
Certificate serial:       01962DF39F46F1A57F3AF5238A41305B94C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft
Manifest number:          0C4A
Signing time:             Sun 13 Apr 2025 07:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:02 +0000
Files and hashes:         1: 3YqroPRrqhRP2wk46RwU-UxhZQw.crl (hash: qisXUhQ/HuSkoj0pHyCLhVAuZu7mcTeh9DDYxUU90c8=)
                          2: jyRFM9_T_syhJNdrBbZtEXQjBxY.roa (hash: 3sN/6EgdGuf6mYlFqORSiJaf85S1hh85EE3f4pncjgo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:9f:46:f1:a5:7f:3a:f5:23:8a:41:30:5b:94:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd8aaba0f46baa144fdb0938e91c14f94c61650c
        Validity
            Not Before: Apr 13 07:01:02 2025 GMT
            Not After : Apr 14 07:01:02 2025 GMT
        Subject: CN=4afb56584deb65bc8914baa70b3124584a0b8e44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:79:99:60:e6:3c:19:c5:fc:26:53:dd:69:55:
                    1d:48:e4:7f:93:8d:2d:56:45:f3:70:af:ba:72:c3:
                    eb:5b:c0:c6:dd:18:e4:65:c1:76:7d:ad:a2:dd:3b:
                    77:89:98:c0:00:86:33:99:38:18:0a:95:2a:3b:f7:
                    7b:5c:7f:6b:ec:32:8e:1e:b3:a3:64:6f:4e:52:5b:
                    3f:26:2e:da:16:3c:ba:54:11:b7:8c:7f:f0:49:c0:
                    a3:c9:73:44:8f:8e:86:27:7d:fa:d5:cf:12:8b:e1:
                    0c:27:5e:82:f9:f7:98:a5:4d:78:aa:2d:51:98:35:
                    bc:cc:ae:2c:3d:57:9a:cc:56:f7:9e:a7:9c:14:38:
                    f4:a8:99:34:63:ad:e0:47:e7:6c:f6:70:05:3a:ae:
                    ea:71:f0:db:cc:88:2f:d2:b2:10:2f:41:b0:85:14:
                    82:f3:dd:88:6b:62:cb:08:47:3a:ef:11:ce:75:dc:
                    c4:bc:e4:ae:54:42:40:ae:a0:17:82:ab:74:a8:a4:
                    d7:e0:a0:9e:a2:f3:a9:f3:ff:16:9e:0a:d5:71:d4:
                    bf:1d:6b:44:2d:53:fb:2d:49:9a:89:50:ed:c9:a0:
                    b0:b7:58:76:3d:d1:9d:90:3f:63:ec:b6:ae:82:49:
                    ec:01:c0:4b:42:5e:34:87:c7:a0:00:98:14:50:df:
                    7f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:FB:56:58:4D:EB:65:BC:89:14:BA:A7:0B:31:24:58:4A:0B:8E:44
            X509v3 Authority Key Identifier:
                keyid:DD:8A:AB:A0:F4:6B:AA:14:4F:DB:09:38:E9:1C:14:F9:4C:61:65:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3YqroPRrqhRP2wk46RwU-UxhZQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/1fa27e-aaf0-4be2-a522-a80c94761d23/1/3YqroPRrqhRP2wk46RwU-UxhZQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ec:36:4f:d9:1c:f1:73:27:9b:3e:e7:7c:2e:fc:02:7f:dc:7a:
         1d:e7:be:94:c1:6a:3c:0b:00:94:25:6d:4d:af:fb:65:30:48:
         80:28:33:be:0e:83:7e:d6:3d:1a:1f:46:18:69:67:37:54:5d:
         da:03:d8:e5:ea:6a:d0:2b:5a:a7:b4:cb:2e:af:93:59:76:52:
         31:d3:aa:87:4e:75:24:ea:d2:29:53:98:af:d6:ed:eb:f3:8b:
         88:43:6f:a1:01:72:b2:7d:aa:66:e3:ac:a5:b9:52:26:50:9b:
         32:e2:2e:4b:9c:1f:5c:81:ef:5c:e4:b7:97:9d:e5:81:0e:c7:
         0d:d3:64:71:b1:12:58:4d:19:ae:cc:7d:37:a5:f7:5a:42:dc:
         ca:8e:f8:f0:b3:f1:65:f1:52:6f:76:a1:de:64:7f:08:11:22:
         fd:d1:ac:dd:c0:ec:01:8f:17:76:47:59:9b:11:f1:0f:29:eb:
         b4:01:e4:07:80:0e:b1:d5:d3:ad:0b:af:7b:2a:d5:d9:44:8c:
         e2:80:80:cb:39:fe:3f:29:37:6e:83:ea:d6:6d:28:eb:6e:90:
         6c:71:6f:9e:b4:3c:e3:b7:e4:ab:33:80:5b:84:f9:79:58:43:
         78:99:39:16:fa:d6:fd:05:3f:fe:60:1d:74:e1:26:52:14:c6:
         fa:c1:96:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----