Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
File:                     CIRls3stTp9BOjHce35suioz25Y.mft (raw, json)
Hash identifier:          fq7rgOhVXX0ZPLE5oC3MncyryolrusmkMxOudJ/0aG4=
Subject key identifier:   4F:5B:F3:FC:17:83:15:C0:06:5B:23:16:DC:71:03:EE:53:A8:CE:1D
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Certificate issuer:       /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial:       01962F74A7DC18DC5AAC96EFC5D465BCCBCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
Manifest number:          08A6
Signing time:             Sun 13 Apr 2025 14:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:36 +0000
Files and hashes:         1: 0NFiTmuSyQvbIvanJiLjWHvt4RM.roa (hash: luko6CdhO6PPQy8mRMEAKBgkFwNJM+Gi1UFJ4ngvy+Q=)
                          2: 0SX6tguCPbTedDIJv_v61mNVvPQ.roa (hash: OkN/xXnA9ztS0yO9CPbdPXj9DcZxVLy9MCAhSe7Y+Vs=)
                          3: 1Au5Z5nGoqTJTIUg3MEmF0l6qLQ.roa (hash: IvdLtqnBMyGRWSVQH7Ip2GpcjvgrFZiBYsuGVCM6qKU=)
                          4: 4nU8t9nFwIiWzcROGA6bDv2HTiA.roa (hash: QIYEjvQS5BHu7T+tElBrKTGFMYY7X1GdGDqPR3ESe8Y=)
                          5: 7DPyUtc9n8WTweBBkrOb_SjAkcE.roa (hash: ZoSn5vUNB/wa1uBbMDCP16ELaz+Q0L0GTnc/wHeaX0o=)
                          6: 7NoekW-HkxHn4P8-jBcdVtp5hPY.roa (hash: y374UyHAmZutF/EVdVEF8nRMAlnmcdvOeQf/dEszG8Q=)
                          7: 7_Pam1zCWMSxN35Hg3GoolAI0gM.roa (hash: lswJSDHwS490ZDhaMLtu12CoEJf1WU4AZd47lIYMptI=)
                          8: CIRls3stTp9BOjHce35suioz25Y.crl (hash: d8xrtvjiq/S4SVFAuw5SN70Y7n8/0S0uOXR5BCgb0Ko=)
                          9: DQ9Y2TKIQQfnAkl5dD1WYgGZfTI.roa (hash: i3PppcVXNlfJ81Wt3dyqjPX5lC6AsicinQTUdq1qZBE=)
                          10: GnQoHq2ALkHnA-1hM45uzLeJnlg.roa (hash: 56wbhZ1KfSgNZ2QOQ2O1i7JWNQODxAT5JXlghcuIe+0=)
                          11: IBa2FfCm0NXr_jkTnl9W4lKJHbQ.roa (hash: g/fWzUMptSij5CbXIEyMw6oyGmVps6iOuy9vK1HPOHA=)
                          12: IROFoAzRYfAyAuh137ZUKRo16o0.roa (hash: pE3NB8j3VAGJYXXKqsPuAAxosijoArjuXWM4LMmqg5s=)
                          13: MOhuKkKFUOCJzvGkfVg3ZmGMV9g.roa (hash: GRcY4hPKLNCKWz8KxAbe1WQmkZqEk9LZq4sJ8uzaP8k=)
                          14: RkVV0EjcjxNBWcvA8hIWquuWiTE.roa (hash: gg70g49DwuFI9SyU14ctAnLmER/u5gvtmm3cshRekd4=)
                          15: TVkYtOBX4jlPadPB8EN37oM_ejY.roa (hash: t9s/wGBhF7eWwaYIxIzGF9nQ4YCwfq2jMNA0hkpmxHY=)
                          16: U9NaOvKZniiNhl5zE3KqQScFT6c.roa (hash: i2z1+tj2AfSPC//fYo07n/HYknAsXyAjlQF2God3G58=)
                          17: XlFQTjC7481aLM5EMChR3qT8AcE.roa (hash: f0DnksinMMergPKlFXbJU92z0zwQyKjG50p2FrrrbAU=)
                          18: al4U2JPxxiid9aONoVxE42bXtsM.roa (hash: XIfhyTCn1Ywozl9yi5YvzH2FdKI/ST5gD2VgyepHB5A=)
                          19: exlEKANutgG_vDp1CnyhUG3YUe8.roa (hash: NHAlDoUxYtYveHw9TLM5p3WftexDT/jlIeiCrEjifQ4=)
                          20: f59xenCUDXDDeMwa_nEJN7nMCGQ.roa (hash: QsZCsEt6m6rV691+Xfz+nKfAfIU4tpPtr3jZyy6Pr0s=)
                          21: ioysk0ftWjx-jvTK_mUAr3k5SvY.roa (hash: znQOMEgFeNb76hPOT3FmNAqIGMsZ9VESxWyQ87/R9E4=)
                          22: oDni1EJm1ojLAR69a31uPncLns8.roa (hash: Vg8O7m2AgHh60b93FLyO9wy8Nzk9z4F/YYUyXCnmzmk=)
                          23: oL3-_6pqYdpSPuSTN2GkwZaneN0.roa (hash: o/fwSGo3+i4YRX9/IGl/K4XHnL01gJ3TF73Zb1RldpA=)
                          24: ogNihGVYrghH8grukZGii0-MTnU.roa (hash: PiM4u+yLk8KHyPfyWC4NVbt1Xw2USY1e7QTVDT2W4t0=)
                          25: pq7pcdWVikTQ-KOe2gcv9i1f2qY.roa (hash: Y8V4SfgPnXyIoDPEtSOpbGM1xvThRgl/bKwf/VdzxaU=)
                          26: vyLjFvSuQm0_pQih6LiAdYCNY9c.roa (hash: /6CYLPOjXexhIIIeJnrGjEKoKdtpezbqkCXs7RqU3FI=)
                          27: zB4DK4xuq1XzyMGQt0yUpiCH1mI.roa (hash: lAQP8m8UapwTe64UInkYcZkWzCw4ZGMoLx8CAM1NvV8=)
                          28: zwB_NfcfrW5dDlELOTYJqzX4fyk.roa (hash: 4XzyrpXgUs2LsFTwoqCbEmzvuAsR3qmjgxRr13yBpIs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a7:dc:18:dc:5a:ac:96:ef:c5:d4:65:bc:cb:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
        Validity
            Not Before: Apr 13 14:01:36 2025 GMT
            Not After : Apr 14 14:01:36 2025 GMT
        Subject: CN=4f5bf3fc178315c0065b2316dc7103ee53a8ce1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:22:10:3d:67:e7:fb:b7:f7:be:84:75:a7:e9:
                    b0:22:94:12:14:96:b6:55:85:ee:64:65:8e:e3:77:
                    7d:c3:6e:2b:f9:23:5a:98:9b:a8:a7:a9:f3:45:7a:
                    4b:32:ef:31:f4:47:e5:2e:17:69:57:30:2f:9c:8d:
                    29:d4:6f:ff:2f:15:9b:83:4e:87:00:14:12:dd:e5:
                    16:96:83:7b:5a:7b:86:17:11:de:b3:35:69:0d:84:
                    5c:40:f2:7b:ee:8c:cb:9b:82:fa:ff:3b:ac:5f:97:
                    5c:40:84:6d:03:2e:21:da:db:72:dc:ce:43:1f:b5:
                    e4:02:05:96:0f:27:b6:2e:32:e4:34:ab:06:23:ee:
                    53:9a:51:ee:5d:6d:f9:da:85:97:30:2d:73:53:20:
                    bc:53:24:97:13:4f:95:f6:d7:4f:3f:30:74:28:09:
                    96:e2:98:57:30:8d:bb:39:44:4c:70:9d:e7:09:30:
                    0d:41:a7:73:3a:72:6e:e4:aa:36:1d:ad:6f:2c:b9:
                    7a:50:a1:c5:eb:77:d8:c3:61:13:36:c8:bb:3d:4a:
                    c5:bc:5e:67:03:cf:17:33:e2:b5:44:de:88:29:7c:
                    15:81:d5:c4:42:18:83:f4:1b:33:8a:6c:e6:6c:75:
                    ba:70:7e:8e:65:f3:f7:d1:70:33:4b:03:1f:e3:bf:
                    ac:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5B:F3:FC:17:83:15:C0:06:5B:23:16:DC:71:03:EE:53:A8:CE:1D
            X509v3 Authority Key Identifier:
                keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:1f:ee:da:4d:73:f5:79:ce:43:49:cd:3a:4e:4c:fe:43:c8:
         ad:b5:b9:ef:6a:e3:70:9e:d0:45:ac:df:2b:b8:c6:5f:6a:f5:
         d4:40:4d:1f:1c:d6:7e:e4:5c:a3:a7:84:f4:04:3f:b6:79:a0:
         64:91:9d:0f:6e:38:f2:e8:cf:0f:db:a5:7f:66:bd:e4:58:3c:
         b9:84:c4:f3:a7:cc:9b:aa:19:25:79:90:55:e3:be:5d:7c:35:
         82:06:3b:03:a0:43:b7:3d:0d:c5:99:a3:9b:f8:71:d5:56:21:
         64:d4:a1:2d:4e:c0:a5:f6:b0:60:0e:b0:e8:35:1a:25:96:e5:
         f5:91:9e:6a:ba:80:9e:0b:c0:ab:4c:15:4d:ff:a8:e7:29:bb:
         ec:cb:8a:3a:79:b1:85:44:18:4d:7b:cd:c5:f6:d7:a1:20:bf:
         49:c6:5f:ea:4e:e0:c1:88:22:c9:28:7f:16:88:28:53:b5:48:
         cb:82:45:53:33:b8:e0:60:ae:a5:9c:b3:c5:30:cd:af:59:e7:
         17:9a:21:86:ab:e6:bb:b3:12:ac:7e:9e:c2:42:3b:e8:b8:25:
         c5:42:dd:9e:cb:59:8f:27:67:4a:4b:32:bb:c0:fe:8a:7e:5b:
         d5:ca:5d:0b:10:d3:6c:3e:f3:ab:15:3f:40:4b:e7:f6:a7:ed:
         1d:bf:44:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----