Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
File:                     s8k12EMWos9WpllXttebevgRpwc.mft (raw, json)
Hash identifier:          15ERUo3fMPM+BsmyzDbRmv/iZUDf8SriIyRg4T9gvf0=
Subject key identifier:   11:39:4D:88:FB:91:9F:76:60:93:22:BE:73:2C:5E:EE:D1:D0:93:B2
Authority key identifier: B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07
Certificate issuer:       /CN=b3c935d84316a2cf56a65957b6d79b7af811a707
Certificate serial:       01962E999B7DA00A095A4A2262CE3F961BBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft
Manifest number:          07DC
Signing time:             Sun 13 Apr 2025 10:02:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:20 +0000
Files and hashes:         1: s8k12EMWos9WpllXttebevgRpwc.crl (hash: WBDaSYWBNT35XKyOCw9jXGJc+Y2pGo0Suhsc/XUDcWs=)
                          2: udh3xGDNJXhOcF-5H4cWJu3ktiY.roa (hash: ocPGT+ldVCPhS+IwJUZcLKrDX+p6H2fIq+UgAUlkPrU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:9b:7d:a0:0a:09:5a:4a:22:62:ce:3f:96:1b:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3c935d84316a2cf56a65957b6d79b7af811a707
        Validity
            Not Before: Apr 13 10:02:20 2025 GMT
            Not After : Apr 14 10:02:20 2025 GMT
        Subject: CN=11394d88fb919f76609322be732c5eeed1d093b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:66:6b:3c:8a:a6:96:8c:d3:d5:a0:08:7f:a4:
                    36:3a:9d:7a:21:c6:a3:bd:3d:41:e2:cd:c3:45:9a:
                    b3:1d:be:46:db:b4:bc:bf:66:77:fc:ce:f0:24:53:
                    d0:f2:b1:3b:af:54:89:1e:1a:48:2e:1c:a0:ef:67:
                    59:97:8d:9a:28:fd:6c:8d:e6:77:99:85:1a:34:94:
                    1e:c2:5b:d1:41:d0:ec:cd:f8:0c:2e:2c:a8:cc:7f:
                    e6:76:6c:e5:25:62:88:bc:ce:a3:b5:2c:28:81:c8:
                    e7:67:01:22:0e:f1:77:67:7f:f1:4f:2a:a3:ed:df:
                    7f:b3:db:70:15:bb:e6:49:20:d8:dc:4d:a4:d5:32:
                    2c:34:6b:0a:83:b5:71:86:b8:40:62:1b:c1:55:81:
                    f4:8e:68:c7:63:3f:da:72:92:22:8f:77:81:e0:39:
                    5e:09:03:10:93:b9:d3:d4:7a:69:7c:5c:a5:c0:19:
                    42:1f:50:0b:af:0f:90:3a:13:ce:5a:df:b5:4e:b5:
                    a0:b7:ce:ec:a1:2a:0a:12:1c:3e:cf:47:84:7e:27:
                    29:26:4e:3c:8a:5b:90:31:5c:8e:95:e7:2c:0c:63:
                    5b:34:b9:2b:3d:c7:9e:92:61:a1:c8:af:9f:f8:a7:
                    2c:28:7f:63:06:cd:9c:e3:68:4a:14:ac:22:dd:4e:
                    76:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:39:4D:88:FB:91:9F:76:60:93:22:BE:73:2C:5E:EE:D1:D0:93:B2
            X509v3 Authority Key Identifier:
                keyid:B3:C9:35:D8:43:16:A2:CF:56:A6:59:57:B6:D7:9B:7A:F8:11:A7:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8k12EMWos9WpllXttebevgRpwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/557962-051a-46c5-8a93-1cc1a538c3ce/1/s8k12EMWos9WpllXttebevgRpwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:c3:6a:c5:68:54:a5:86:52:73:c8:51:8a:aa:00:c6:9a:05:
         20:62:c8:a2:5f:70:5a:80:5b:3a:ab:27:51:29:7c:4f:4e:9e:
         f5:84:3a:09:17:2a:50:ec:7a:4a:5e:d7:94:4b:da:07:39:36:
         2f:c2:38:12:08:b5:7e:21:57:94:c1:b3:c2:20:ca:33:d9:82:
         f9:8a:4e:d5:85:88:c0:9f:4d:18:41:a6:ef:5a:61:f9:1b:e2:
         7b:e2:52:18:45:24:3c:a4:aa:15:89:4f:5c:bc:3e:45:35:d9:
         25:cf:ca:8b:56:ec:e8:7d:65:29:d6:01:17:77:82:3d:f7:18:
         89:cf:90:88:ca:82:a3:d5:84:e0:04:d4:13:b7:32:08:dd:b0:
         84:ac:1b:b2:32:60:65:c2:a2:d9:c5:16:51:08:72:2b:ba:59:
         85:a4:9f:1f:11:73:05:f2:78:64:1b:37:a9:42:3e:29:36:0d:
         7e:f9:58:84:43:80:26:8d:86:72:62:f3:99:9d:91:eb:8a:7a:
         89:5f:12:3c:41:f6:67:12:e8:a8:88:c4:dc:e4:a4:10:56:a9:
         d1:1c:60:c1:aa:26:aa:36:70:e7:3c:07:84:d2:fc:06:17:40:
         59:ea:05:f3:47:19:5c:2c:26:c9:eb:b6:0d:bf:52:e0:1a:0e:
         45:87:80:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----