Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
File:                     Cex03AtsLVudMOrzzSIpT3EZA58.mft (raw, json)
Hash identifier:          Ly6UuAy+VZmVG6mqe9Fv6ZzC3bovXjugN3kJAWwyH+0=
Subject key identifier:   B3:97:02:B3:C2:AF:45:45:B1:15:3B:0C:4F:3F:BC:76:D8:FB:B7:7B
Authority key identifier: 09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
Certificate issuer:       /CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Certificate serial:       01962E98A0CD5004A367A19C779C31C6D040
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
Manifest number:          0685
Signing time:             Sun 13 Apr 2025 10:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:16 +0000
Files and hashes:         1: Cex03AtsLVudMOrzzSIpT3EZA58.crl (hash: w0YjP5NbT9kxFeinkIBD2G7TEKbJqebbSkkGhInBsyE=)
                          2: vQYaMoR9txyndSYv7p8Vy1-ysWo.roa (hash: q7GID5FIOuixp8y5Io1pyufdLHt0l/VDVy3RytUEJPc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a0:cd:50:04:a3:67:a1:9c:77:9c:31:c6:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
        Validity
            Not Before: Apr 13 10:01:16 2025 GMT
            Not After : Apr 14 10:01:16 2025 GMT
        Subject: CN=b39702b3c2af4545b1153b0c4f3fbc76d8fbb77b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:80:60:36:58:7d:a4:25:90:ed:74:9c:63:20:
                    d4:87:31:20:ce:6f:09:30:e9:23:30:3e:1f:0d:37:
                    8c:f2:50:ef:dd:72:32:14:43:5c:51:de:06:a2:09:
                    8e:b8:22:3f:67:42:82:90:fc:4f:a1:5f:6a:8d:d2:
                    6f:00:d1:52:67:80:81:bd:a5:75:7c:d6:c2:34:85:
                    7f:5b:26:48:b8:95:01:aa:69:0a:a2:20:67:74:ca:
                    ff:ae:67:33:cb:37:8b:d8:3b:df:9d:4a:d2:f3:50:
                    c9:ec:2b:b2:1e:f5:44:ac:98:2f:a6:39:a3:8e:b3:
                    b6:14:5a:38:22:0d:ac:7d:90:03:c9:eb:db:65:4f:
                    71:5a:19:99:c2:64:71:90:17:a8:00:30:2d:76:a5:
                    40:75:2e:d4:6d:2f:76:29:fd:6e:86:6f:fa:9f:b0:
                    f8:94:bc:52:c1:f6:07:f6:bd:a0:3c:43:21:61:75:
                    37:24:ed:9a:4f:78:96:46:69:8a:e3:f8:14:ad:60:
                    3d:5e:ee:cd:10:d9:8c:e4:9c:84:7d:65:4f:70:aa:
                    25:02:93:cd:64:3c:11:96:b7:7a:38:e5:2c:5b:25:
                    ab:fd:e6:2e:ad:95:83:ab:9c:7d:e8:37:df:89:69:
                    5b:82:f2:c1:33:c8:67:f8:7d:86:0d:dd:88:bd:10:
                    60:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:97:02:B3:C2:AF:45:45:B1:15:3B:0C:4F:3F:BC:76:D8:FB:B7:7B
            X509v3 Authority Key Identifier:
                keyid:09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:4a:85:40:c3:5f:4f:bf:6e:26:4c:c9:6d:aa:bd:f5:9b:f2:
         9f:67:66:30:0a:7c:29:77:46:6f:b5:5a:a2:14:55:52:29:c1:
         5f:08:71:5d:08:8f:17:04:81:b6:cc:e0:79:6f:29:01:b4:a3:
         09:a0:98:6b:09:93:13:1b:e0:bc:9b:16:df:32:e0:33:b8:f4:
         a5:d2:66:c0:10:0b:43:5b:2a:dd:89:e2:81:a3:7e:95:13:cb:
         15:8f:f1:6f:d8:cb:a3:03:a7:08:b5:9d:7a:5e:05:48:11:68:
         34:95:67:d5:0a:52:07:12:e2:18:1d:85:a8:9e:3c:5b:ea:62:
         e2:6b:82:43:49:95:18:66:47:2c:36:56:38:b5:d2:08:9f:8a:
         6a:ba:b0:f3:03:f5:f1:af:9a:16:73:ba:bc:f1:9c:24:89:11:
         64:87:96:09:f3:f4:37:0a:38:4d:ad:54:96:60:05:99:2b:f0:
         1b:f0:58:e3:4c:31:25:66:02:d0:a6:2c:b9:3f:ad:0d:6a:d2:
         98:d4:c3:de:6f:a2:11:72:5d:54:1a:48:55:93:89:b8:3a:61:
         9d:d9:49:a3:f5:8a:24:40:2d:d9:9a:5c:41:9c:b7:a4:24:0a:
         68:b2:45:02:9f:3d:f1:e2:e9:9e:e7:14:e6:a2:52:27:4b:e3:
         b8:95:50:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----