Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
File:                     3T1AERdeXfej9X0454FQosBf3R0.mft (raw, json)
Hash identifier:          G5OHF6KQo1jClPVU4oeUwwyFu4LfMp/pHQhODMvZWic=
Subject key identifier:   9A:27:71:73:CF:EC:A6:44:75:56:F4:B5:47:DE:3A:89:C1:75:A2:E6
Authority key identifier: DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
Certificate issuer:       /CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Certificate serial:       01962F3DB41CEE35EE74B2818C909B3B3801
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
Manifest number:          0F00
Signing time:             Sun 13 Apr 2025 13:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:35 +0000
Files and hashes:         1: 3T1AERdeXfej9X0454FQosBf3R0.crl (hash: t0/5nQOCX18w/gkMdCJ5Ob8iX7GQwCUiqjLsNxJe604=)
                          2: a7DppR8a_zPl6np7nOEfJXryakA.roa (hash: wU3AghxluRA4zWm18LLUP4eLKYWVDAXfgoTV1mFNROs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b4:1c:ee:35:ee:74:b2:81:8c:90:9b:3b:38:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
        Validity
            Not Before: Apr 13 13:01:35 2025 GMT
            Not After : Apr 14 13:01:35 2025 GMT
        Subject: CN=9a277173cfeca6447556f4b547de3a89c175a2e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ac:e5:0e:ff:ce:f1:eb:16:0f:26:bc:64:0f:
                    63:60:8c:59:2e:ea:11:46:1a:0e:81:2a:3f:f1:6a:
                    b6:a2:ef:99:04:06:ed:28:51:f8:63:a7:1f:cd:9f:
                    84:76:ed:5c:4a:ff:eb:79:a0:07:01:f8:d3:16:d2:
                    6b:83:cd:b2:b6:3b:ad:c8:7d:17:fb:a6:66:db:e4:
                    03:47:6a:43:91:9e:d2:ec:6a:f3:2f:fa:c9:ad:73:
                    60:1a:c3:94:19:e1:8b:9c:77:52:98:28:44:e2:7d:
                    14:d3:42:54:98:b2:e7:61:bd:8f:4f:96:17:27:f5:
                    f4:c8:da:7a:a5:bc:86:cc:54:2b:50:8a:bf:74:7c:
                    7a:5f:ad:b2:b8:1f:f7:8f:2d:ca:99:c4:f8:17:63:
                    b4:67:0d:13:67:62:28:ff:a2:05:fc:47:d7:0b:9e:
                    0f:fe:57:08:67:5b:ef:56:93:28:93:e6:45:de:3f:
                    65:87:6e:87:33:a2:11:ab:51:00:7d:a6:0c:e1:0b:
                    cf:23:9a:5c:3e:57:cf:7d:72:67:64:51:0b:06:67:
                    dc:6f:a0:74:b6:9e:52:57:ca:4d:06:fd:4d:f9:eb:
                    e1:7f:4e:35:3e:d9:99:aa:e4:ff:6e:4f:ba:b5:62:
                    bc:06:63:66:71:1a:ee:96:60:45:fd:81:47:dd:f9:
                    5a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:27:71:73:CF:EC:A6:44:75:56:F4:B5:47:DE:3A:89:C1:75:A2:E6
            X509v3 Authority Key Identifier:
                keyid:DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:cd:b6:99:25:8e:26:ba:31:e0:2c:21:d9:8f:11:bf:a7:e9:
         db:0b:48:67:b3:5b:86:93:41:a1:4f:95:95:4d:4a:75:ad:cc:
         ab:72:46:e1:70:5b:1f:9a:6e:04:53:52:79:ec:dc:2c:e7:73:
         5e:cb:c7:28:46:48:80:89:ab:ab:d1:eb:29:db:21:03:1a:25:
         8f:25:5b:fb:66:6d:02:42:4a:a3:f7:1e:46:2d:f2:ad:7c:a8:
         66:77:d1:45:ea:48:26:f6:e5:e2:4e:20:fc:dc:2e:dd:f0:1e:
         43:e7:e7:5b:b8:ed:5e:fa:76:5c:35:8f:56:2d:78:89:0a:26:
         6f:3f:b4:a7:35:8b:e2:c6:ef:e8:a1:bc:03:67:70:2d:2a:86:
         16:5b:9d:b3:1f:6b:ab:44:a7:ab:0f:2f:ab:3b:21:ed:bd:12:
         2a:c0:e9:e4:eb:52:d8:b7:22:2c:a0:6c:0c:52:3a:29:b3:ef:
         47:1b:11:e5:e3:0a:d2:9d:c5:73:95:9b:49:56:17:00:86:e4:
         1c:e4:ab:b0:df:e1:6b:75:04:af:2d:7b:84:53:53:87:c6:97:
         3a:1f:ca:fc:d9:6a:44:17:05:e9:aa:27:4a:4c:3a:2c:29:61:
         f6:00:39:75:11:ed:b1:28:07:0a:e8:61:9e:a4:e9:3a:07:28:
         65:c9:eb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----