Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
File:                     3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft (raw, json)
Hash identifier:          28oojJ7AelR/6qgxbNaxukkP2LYvnO8vsGJSuH4ZTH8=
Subject key identifier:   AD:EA:10:9E:C1:C4:AD:7A:BF:26:56:0E:45:18:4A:61:9B:A5:DF:A0
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Certificate issuer:       /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial:       01962E992DC218198BA43E203F0745F442DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
Manifest number:          0F88
Signing time:             Sun 13 Apr 2025 10:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:52 +0000
Files and hashes:         1: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl (hash: nWYVQIduBzxvJA6g4zeGItr7zx+36qpScRwtmc+KkD8=)
                          2: FmBFQOhNzhtYDdGU28d2mOWYxkg.roa (hash: AVAVJ+z2q5E9uU0vpHh6beNWBbBTBuDWNk3vwtJ8KHM=)
                          3: a8dfbuD_49og8AJXwHhNJcwaxsI.roa (hash: W1ipPbq868Ly393rgOf3eds1bM0F3aTAdVR1mM1YvM4=)
                          4: afkHGgkpnYuChER0buPhVqx5kXI.roa (hash: Tx1z4EJ2mEaA6VjS7e2DEwi0lCy0cpAZk+6Uv+5pnbw=)
                          5: mYlPJBjSVo-nMdiARP-4qGUEks0.roa (hash: jq8esI3cAJrQeZlA/zKhC8wm74GcNEo/R1+l+csXuU4=)
                          6: n11ZJorlH1hZHcOrMkN5woOVejs.roa (hash: qO1znHdZkcnjjGqE4Hx9Dgh/NFBxbtAoTeajvo0zDfk=)
                          7: rhaUzcqQYW4tC3EdQCdaNLWOPbA.roa (hash: PvCUNKVTR3gGQiqq6yWqtNwJ314FXo4VLynnYKTFbJo=)
                          8: uEehilTaJNTK6wTZHHdxxqFauYo.roa (hash: tRIraXpN8mX3nJ3uL7fIgHQ/edV3rhiXldnw6ddpk0I=)
                          9: x6Fr-1VeTypvMg38CuYZL6Aoelo.roa (hash: ajAlNUJcOgM2msZH/aiPOA3cqagu5/2Oq4Xgzqwcm3g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:2d:c2:18:19:8b:a4:3e:20:3f:07:45:f4:42:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
        Validity
            Not Before: Apr 13 10:01:52 2025 GMT
            Not After : Apr 14 10:01:52 2025 GMT
        Subject: CN=adea109ec1c4ad7abf26560e45184a619ba5dfa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:6f:9d:4c:9e:f5:68:d2:68:df:28:86:72:00:
                    e1:f2:33:fd:e9:d6:51:68:85:61:58:a4:1a:86:f7:
                    6c:53:91:0a:00:c0:f1:ac:c1:1e:44:3e:20:e7:c6:
                    ec:16:53:77:58:cc:6d:b1:52:5d:ea:3f:d0:00:c5:
                    97:6c:45:4b:17:b4:ba:d9:4f:f8:db:49:19:56:10:
                    35:f2:df:91:cb:67:24:cf:37:00:fc:37:50:cb:8c:
                    bd:4d:cc:74:61:d0:7d:96:ca:2d:af:e8:b6:14:ce:
                    11:b5:60:ce:d3:13:e1:ae:b8:d1:e4:59:78:43:49:
                    4c:6e:7d:93:36:17:fa:b3:13:68:4c:19:19:ec:9d:
                    aa:b1:8b:5d:3c:94:d6:43:0e:83:d6:08:59:f1:96:
                    2b:cd:00:1b:1e:09:a0:e8:25:80:ab:a2:fe:73:dd:
                    86:e5:95:b2:56:69:00:b9:90:0b:45:1c:f8:c3:66:
                    e4:ed:db:9b:41:31:2a:20:6f:e5:02:4c:45:f4:ca:
                    e3:8a:3f:5e:63:06:e1:a1:d3:26:6a:64:86:8d:60:
                    fb:e6:a5:c3:6e:5d:b1:38:ef:6a:39:69:e4:1d:e8:
                    59:7d:c3:8f:a5:eb:00:9c:d6:70:d5:73:d5:be:ca:
                    fa:7a:3b:a3:2b:43:2a:c2:b1:29:1e:12:54:f4:13:
                    e1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:EA:10:9E:C1:C4:AD:7A:BF:26:56:0E:45:18:4A:61:9B:A5:DF:A0
            X509v3 Authority Key Identifier:
                keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:21:45:14:d4:55:67:2c:f1:58:b2:d2:76:fb:8f:63:9a:72:
         05:ec:49:5f:93:87:56:b8:eb:a7:ec:09:b0:7c:ea:21:a8:a8:
         ab:2a:e5:f6:ea:62:bb:d9:d2:96:7d:26:e2:73:48:48:22:55:
         7d:d3:2c:dc:e6:d1:9d:83:6e:69:05:95:25:2b:2e:e6:89:44:
         30:29:f3:be:19:77:a0:9a:90:c9:95:aa:de:c9:a9:ec:df:15:
         bd:11:ab:9a:bb:f2:79:5a:b3:b1:8f:b8:82:31:55:92:4a:52:
         ef:40:d4:f8:ed:16:01:0e:cc:40:4e:8e:ca:5b:7f:e7:5b:87:
         21:ec:c8:29:9a:54:4e:35:6a:a0:dc:62:15:04:09:a4:1c:b7:
         8c:65:9d:e4:ce:01:4c:43:1d:a9:a6:5d:b7:0c:cf:e1:b9:a6:
         45:04:ac:b4:3d:69:84:20:e1:b1:5f:ab:f8:db:4b:aa:5c:28:
         27:10:de:6b:3c:ca:4b:81:eb:48:ca:16:dd:d0:ab:91:e0:26:
         8e:3c:c4:ee:1b:db:c3:db:03:08:2e:a3:1d:74:60:5f:2a:6d:
         db:c2:ce:f6:ec:66:47:3e:f1:69:81:9f:a6:10:48:d0:8d:6c:
         ff:15:5e:0d:ec:94:6b:87:77:1e:bf:4b:64:13:95:38:49:13:
         6c:5d:14:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----