Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
File:                     3RiOwuSayUWFJFtLh0Whu3oc3GY.mft (raw, json)
Hash identifier:          OfSfV3X6xeBgoUnEFfgDxNl15c9ylsf7qVcJYRA0NSs=
Subject key identifier:   0D:83:0E:CA:4A:32:12:FA:53:1F:D7:62:88:BA:3A:FB:D6:12:8E:36
Authority key identifier: DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66
Certificate issuer:       /CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
Certificate serial:       01962E617F1DD39FDAB19B6B04539748E71E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft
Manifest number:          075C
Signing time:             Sun 13 Apr 2025 09:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:03 +0000
Files and hashes:         1: 3RiOwuSayUWFJFtLh0Whu3oc3GY.crl (hash: 1zEDaXX++EenoEBuFofWrMAo8M3hA+mEuiFn7gdiJps=)
                          2: pDLly0sn53PLZlgmqVTYD5L2Et0.roa (hash: MLKk0AIXSDvV1SnhwkIbUGP+qcSM6FHopsKcU6yMV74=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:7f:1d:d3:9f:da:b1:9b:6b:04:53:97:48:e7:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd188ec2e49ac94585245b4b8745a1bb7a1cdc66
        Validity
            Not Before: Apr 13 09:01:03 2025 GMT
            Not After : Apr 14 09:01:03 2025 GMT
        Subject: CN=0d830eca4a3212fa531fd76288ba3afbd6128e36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:91:51:60:25:1e:38:f9:e8:85:3e:57:4f:bb:
                    c7:86:28:b7:08:e2:56:69:96:2c:91:a0:92:7a:50:
                    7b:c2:58:1e:a6:e1:94:4b:c6:fb:b4:98:fc:14:ac:
                    2a:3e:dd:9b:7c:d3:87:bf:0c:f3:15:b5:ce:fe:da:
                    87:d7:52:0b:26:d0:3e:b0:bb:77:70:94:02:ef:89:
                    d9:86:30:bd:76:ca:96:33:84:ee:9f:34:eb:2c:ac:
                    8c:03:57:2f:b8:4e:03:90:52:5e:c8:ab:58:3b:92:
                    6d:b6:77:26:c7:e8:ce:14:67:fc:e8:d2:40:97:f1:
                    d1:c9:aa:b7:12:43:4b:24:1d:48:f2:ae:a8:37:05:
                    dd:09:ca:33:64:71:f0:10:a8:67:67:29:8a:38:e9:
                    b0:c7:bb:13:ab:98:25:93:3b:84:0c:15:95:9e:26:
                    39:c8:78:16:a8:e3:dd:50:6f:5a:45:e0:58:46:9d:
                    17:bd:99:b6:76:f5:03:2e:ac:7d:0b:6f:01:61:43:
                    52:e7:8d:f8:66:2b:f0:19:a4:4a:2a:6f:12:e8:20:
                    65:e7:70:9b:74:2d:3f:3b:52:bf:92:1a:ce:16:99:
                    76:9c:17:16:63:c8:d2:b4:93:f0:1c:69:8f:a9:1f:
                    41:f4:d1:e2:70:44:79:51:30:2a:d9:61:9f:80:e5:
                    0f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:83:0E:CA:4A:32:12:FA:53:1F:D7:62:88:BA:3A:FB:D6:12:8E:36
            X509v3 Authority Key Identifier:
                keyid:DD:18:8E:C2:E4:9A:C9:45:85:24:5B:4B:87:45:A1:BB:7A:1C:DC:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RiOwuSayUWFJFtLh0Whu3oc3GY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a41edb-9df5-40f9-9ece-b59198b9155d/1/3RiOwuSayUWFJFtLh0Whu3oc3GY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:1c:37:d7:e1:2b:22:6d:13:53:d5:9e:ca:10:fb:fc:57:c6:
         18:b7:5e:52:67:71:e7:77:37:25:d6:ea:2f:dc:85:de:6d:f5:
         a3:e5:f2:8b:ed:4a:93:85:d9:5a:c4:3e:e9:43:77:55:32:8f:
         72:d6:e7:a5:a3:20:fc:ed:39:7e:1e:c3:da:cd:7e:ae:30:ab:
         b8:7e:d9:1d:2b:ba:42:ad:70:69:b6:ea:7f:df:38:0c:78:22:
         e4:1d:b0:b9:59:1b:5d:7b:a1:c2:a7:e0:a3:36:77:fb:1a:0f:
         0e:82:13:74:4e:4d:c9:30:fe:1a:c7:0d:30:01:54:a1:19:33:
         46:d5:49:51:2a:0f:1c:2c:d3:4f:f0:53:10:90:a6:bf:fd:5a:
         2a:7c:c5:e4:0d:11:47:32:c6:a2:28:32:d9:b0:9d:04:c7:02:
         77:b5:93:cf:39:57:09:a3:a4:7b:a6:d3:b4:1c:cc:ab:4d:09:
         c2:d3:f5:8c:90:fa:70:1e:df:8a:77:c9:73:cd:41:31:3a:00:
         c3:11:28:a3:0e:b0:63:8c:80:69:3c:10:61:4c:bc:b3:98:c7:
         b5:60:04:57:09:72:ec:3a:0a:03:59:7d:55:9c:7f:02:59:da:
         fd:a5:68:ed:7d:4b:e6:0f:be:c0:d6:bd:97:94:d4:16:a0:ba:
         b0:24:73:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----