Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
File:                     1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft (raw, json)
Hash identifier:          P2/ocGhQoRMDzXqj6M61QlrK1H5IWE0nukge2Uto/tU=
Subject key identifier:   F0:C8:F6:F0:FA:4C:AA:CE:25:5B:CE:52:E2:82:67:8C:3F:05:AC:64
Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
Certificate issuer:       /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Certificate serial:       01962F74DDF7A3F3EEF76C3BA95E1E8A2CE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
Manifest number:          0B
Signing time:             Sun 13 Apr 2025 14:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:50 +0000
Files and hashes:         1: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl (hash: KxViIW7XUtMlt9c6Bp9ITk9xHwa1+jwdEo2qo0bjy48=)
                          2: Mhhz4wUnWbhungV9qmdIiiClbC4.roa (hash: vs++Lho+ybbPqiNcZp7StywgPzEvRC+QjSZW2g6/U6I=)
                          3: NYmwF4mBpF0BkmMcJbcBfbb7mNw.roa (hash: 4P8DST75fp7YFw+joLinoBciFGEOW9RYd1ghEZUg2No=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:dd:f7:a3:f3:ee:f7:6c:3b:a9:5e:1e:8a:2c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
        Validity
            Not Before: Apr 13 14:01:50 2025 GMT
            Not After : Apr 14 14:01:50 2025 GMT
        Subject: CN=f0c8f6f0fa4caace255bce52e282678c3f05ac64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c6:20:ce:bb:94:7f:00:35:b3:1d:3f:71:7b:
                    07:6a:03:80:38:b6:0c:eb:c0:ba:dd:e8:a2:62:1c:
                    6c:fc:ca:28:40:e4:f7:66:5c:90:51:40:1f:24:20:
                    a4:e5:cd:19:f3:c1:8b:94:6f:0d:37:cd:4a:6a:c0:
                    47:e4:ee:f6:ce:2d:20:cb:f4:a9:10:04:b7:bb:02:
                    6b:14:c1:4d:70:2e:48:16:64:93:36:06:20:d3:8d:
                    cf:55:0d:c1:a5:33:e7:a6:bd:55:24:4b:31:71:f9:
                    47:50:91:78:de:4c:43:cc:97:68:ac:3a:32:13:e2:
                    bb:c1:18:4b:10:96:2f:cc:68:cb:6e:a1:36:13:8e:
                    83:31:aa:b0:b7:af:83:f6:15:e8:6c:ee:00:ca:d8:
                    ac:f4:7f:d8:f1:99:3b:16:0d:26:6a:7e:f0:d5:ad:
                    a9:18:0a:37:35:58:cb:c8:1a:c8:ec:c7:cb:3d:bd:
                    29:c6:d2:e1:5a:cc:82:f9:62:d6:e8:e3:06:77:d2:
                    7f:a9:f7:b7:4a:78:16:18:08:84:4d:fd:83:ca:53:
                    59:0a:0e:e3:07:60:d7:a9:b7:88:e2:d6:dc:e8:8a:
                    e1:29:cf:4b:fe:a0:8c:58:54:67:61:f7:8b:93:99:
                    5e:df:8e:9d:86:49:9f:7c:51:9e:01:3e:c5:3a:82:
                    42:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C8:F6:F0:FA:4C:AA:CE:25:5B:CE:52:E2:82:67:8C:3F:05:AC:64
            X509v3 Authority Key Identifier:
                keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:f6:da:20:3b:16:bf:8b:31:f1:20:1d:e7:16:9a:0c:a9:ae:
         67:ac:e9:16:ec:44:ca:7b:07:6e:31:00:bb:6c:25:7f:00:02:
         0f:9c:f1:83:63:d5:a6:07:a3:fe:d1:ba:db:c3:d7:87:20:eb:
         eb:80:ac:4e:ab:be:6e:a9:c7:22:89:be:1f:07:14:ac:86:27:
         57:91:57:e8:48:c8:96:28:8e:e5:d6:1e:64:4b:86:51:1d:00:
         67:71:48:b6:7b:a9:6d:cf:3c:d8:c5:f1:6c:55:8d:20:df:d9:
         94:4d:c3:fd:72:5e:09:d7:c8:52:68:5a:e4:ba:8a:57:4e:7b:
         50:9a:04:a5:53:63:65:7b:8e:91:d5:90:c8:6d:ed:76:94:fb:
         1e:86:ac:10:c4:a4:44:2c:6a:0e:b1:d4:97:02:68:3b:cf:d6:
         e4:9b:68:47:dc:f9:0f:de:4b:9d:32:0e:50:1e:da:59:a6:b5:
         b0:92:f1:b0:f9:fd:c8:4b:e8:d3:e6:0f:f6:f6:1e:70:f8:31:
         05:16:70:48:ce:29:c3:c2:b1:90:32:f5:45:ae:77:63:98:46:
         d8:7a:81:5e:6d:18:5b:3a:99:1d:6f:a4:b3:13:ad:58:db:fd:
         a6:b9:95:7a:6d:98:de:3d:4d:48:a5:dd:d4:b1:26:e4:56:e5:
         21:71:01:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----