Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
File:                     1-cGMsaUCf6FybxFLPv5io6l5zhs.mft (raw, json)
Hash identifier:          6dZCgSK3RhxhP4usPe+UTP1wXkfhrS/tcU0+mXQ/a/c=
Subject key identifier:   3C:2F:D5:91:2E:B8:F2:1D:69:84:D3:04:1C:F8:9B:3C:F6:FF:79:56
Authority key identifier: F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B
Certificate issuer:       /CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b
Certificate serial:       01962E990129FC39FBECF906088003B97A66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
Manifest number:          046D
Signing time:             Sun 13 Apr 2025 10:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:41 +0000
Files and hashes:         1: 1-cGMsaUCf6FybxFLPv5io6l5zhs.crl (hash: cfj3NgVdBlvE6FMOglSWXd7RWf61JNpl9Ymp1Mpv54A=)
                          2: oKBWeiCdr72OFTmQ9qAC_2ODyWc.roa (hash: S0rlxTkwKd8+RpY5lx0VofPErbqrcMDFmRtkG28exLA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:01:29:fc:39:fb:ec:f9:06:08:80:03:b9:7a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b
        Validity
            Not Before: Apr 13 10:01:41 2025 GMT
            Not After : Apr 14 10:01:41 2025 GMT
        Subject: CN=3c2fd5912eb8f21d6984d3041cf89b3cf6ff7956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:26:c2:64:79:6a:05:9e:a5:f7:bd:03:c4:9b:
                    c0:5d:2b:2b:57:cf:6e:19:2f:01:a8:10:3b:b8:1f:
                    87:45:f0:85:18:0e:f7:71:4d:d6:bc:ce:ef:25:c1:
                    12:51:3a:06:65:8b:14:fd:97:06:e2:06:42:24:f8:
                    0d:d7:4c:ae:59:12:49:01:45:5c:a7:0c:77:ea:e3:
                    ad:76:b0:34:d9:7d:9c:75:3e:e7:52:bf:82:2f:92:
                    70:d1:c6:a0:b6:0a:a7:19:75:b6:cb:25:8f:ba:6d:
                    ff:20:a1:2c:5c:71:22:02:ab:98:9e:16:81:0c:3a:
                    45:48:b7:cd:3d:db:54:eb:ee:61:d3:6f:09:03:ae:
                    d6:47:7c:e1:b2:80:48:80:63:c7:5d:91:80:a8:41:
                    21:53:1b:a2:c2:8a:7f:61:a3:70:27:92:af:20:99:
                    eb:37:19:52:87:a4:9a:7d:3f:f0:72:c5:43:6b:8e:
                    63:ab:af:72:5a:32:f8:c2:37:87:e9:2a:bb:44:cd:
                    d8:a0:d8:fb:58:72:c7:3a:61:e7:22:f6:f5:6d:73:
                    78:4f:6c:df:bd:0a:da:96:f0:11:7a:c6:2e:5f:5d:
                    e6:33:e1:81:c4:34:94:61:62:d3:01:71:23:36:fd:
                    42:68:e7:79:45:d6:5b:9c:64:ef:a2:96:eb:e5:59:
                    f9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2F:D5:91:2E:B8:F2:1D:69:84:D3:04:1C:F8:9B:3C:F6:FF:79:56
            X509v3 Authority Key Identifier:
                keyid:F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:cf:ec:ce:5f:53:1c:f0:8a:25:dc:78:35:0a:ea:8f:0a:d9:
         81:47:7b:a5:df:92:a8:72:27:a8:cf:3a:04:07:82:17:00:1f:
         9a:1c:4b:d7:c1:c7:b4:c1:42:2e:9f:b9:02:65:d2:07:e1:ea:
         8c:3e:38:15:aa:66:96:9a:fa:9d:55:c8:9b:e0:c5:75:3c:f9:
         f6:19:60:84:81:94:5c:3f:34:e4:0d:72:04:30:be:9a:b3:5f:
         53:7c:3f:83:5d:c1:61:13:dc:6b:56:18:57:61:a9:e1:b5:9d:
         fc:9b:bc:cf:dd:2f:b0:c8:e1:f4:eb:11:46:59:92:17:d0:a3:
         f5:27:4e:8b:71:95:2b:ce:df:45:dd:0c:e3:49:ab:40:c5:1c:
         91:44:2c:08:52:9c:31:9a:9e:a9:1f:5d:a3:bb:bd:fa:4e:85:
         ba:cc:0d:33:ae:4f:7b:f7:f5:15:ab:cd:56:af:fd:fe:63:68:
         42:20:95:6c:50:27:95:36:40:9b:3b:fb:97:3a:fd:3f:69:4a:
         ca:9b:44:eb:49:14:94:9e:4d:84:f6:23:dc:45:19:a4:04:a0:
         a2:bb:44:ed:fa:34:60:15:e2:c7:d6:91:39:5d:0f:12:7b:c0:
         a0:fc:a4:b7:50:97:95:01:5a:b6:64:c9:9c:49:92:6e:e5:32:
         fb:5d:c7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----