Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
File:                     81TlIOe7fhP1Ms7PBagtK3l5UqI.mft (raw, json)
Hash identifier:          buAAJiNmskVxudB04m3BENK5u9aqG2ic6Jl4yMQITpU=
Subject key identifier:   DC:48:76:72:75:3F:B9:70:74:E2:1C:A0:14:0F:44:58:D6:18:66:0A
Authority key identifier: F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2
Certificate issuer:       /CN=f354e520e7bb7e13f532cecf05a82d2b797952a2
Certificate serial:       01962F06A88F06B5E14803EAA23E41DC17BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft
Manifest number:          0A42
Signing time:             Sun 13 Apr 2025 12:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:27 +0000
Files and hashes:         1: 81TlIOe7fhP1Ms7PBagtK3l5UqI.crl (hash: DlxqIsYu1pmLO5n60gWohv3sPNOG7l/XDQrlcei6aAk=)
                          2: 9R7qE2JixKC-vbV8JeqORUi7upg.roa (hash: qMwpouu0cneK+WPX+gDmDCVwU3yx/zaa1DbEZEykJcU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a8:8f:06:b5:e1:48:03:ea:a2:3e:41:dc:17:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f354e520e7bb7e13f532cecf05a82d2b797952a2
        Validity
            Not Before: Apr 13 12:01:27 2025 GMT
            Not After : Apr 14 12:01:27 2025 GMT
        Subject: CN=dc487672753fb97074e21ca0140f4458d618660a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:82:b1:f3:b3:63:af:ef:b8:10:ec:50:3f:2e:
                    b1:78:8f:ad:07:93:c1:6b:92:07:f9:03:a8:a0:85:
                    8c:8d:6a:3d:77:0b:6f:3b:6e:e5:a3:d4:04:89:7f:
                    1f:51:d2:4d:f2:27:8e:48:74:24:bf:11:89:93:fb:
                    81:d8:9b:b0:f6:c2:3a:67:08:76:d5:41:ca:02:62:
                    f3:34:70:98:53:31:61:aa:33:c9:66:20:f5:b7:66:
                    c8:2c:2c:3f:94:e1:47:7b:ef:9a:cc:c3:fc:07:d9:
                    43:4c:19:36:15:85:98:2c:8f:ec:49:b8:46:6c:2e:
                    b1:42:05:69:aa:3f:e3:3c:82:85:44:6c:37:49:bb:
                    d6:a1:a9:62:0b:a5:59:1d:32:de:e8:6a:46:e1:6c:
                    11:74:ef:e5:e1:10:08:62:02:52:5e:b3:70:b4:3f:
                    ca:ab:78:e5:87:a9:86:42:6d:a9:16:56:6b:f7:55:
                    02:ca:20:49:ca:d7:08:a3:4e:54:1b:3f:21:23:b5:
                    b6:44:7a:1e:4b:34:7a:4c:7e:a7:38:d3:9e:4b:a7:
                    cf:36:a7:61:68:9a:65:8a:cf:10:39:cb:c6:1b:b0:
                    63:1a:19:d5:21:05:1a:63:bf:1f:43:31:1a:96:8c:
                    14:71:25:b1:ce:44:b2:14:51:01:ac:c6:c6:48:70:
                    3a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:48:76:72:75:3F:B9:70:74:E2:1C:A0:14:0F:44:58:D6:18:66:0A
            X509v3 Authority Key Identifier:
                keyid:F3:54:E5:20:E7:BB:7E:13:F5:32:CE:CF:05:A8:2D:2B:79:79:52:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81TlIOe7fhP1Ms7PBagtK3l5UqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/c2f69f-ee8e-475a-9079-ca51fb30eddf/1/81TlIOe7fhP1Ms7PBagtK3l5UqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:a7:14:94:6d:4f:cd:d0:2b:a7:23:5f:b8:bf:a8:48:48:35:
         19:96:ee:54:5e:ae:5c:54:e4:7a:18:53:63:59:69:10:fc:63:
         12:d1:33:5e:5a:0c:d1:69:00:86:29:05:12:b4:8b:d6:ba:aa:
         1d:f7:c5:62:8b:12:ef:14:14:12:30:f6:23:50:80:75:8a:17:
         0f:09:d8:00:8c:f3:a4:bb:50:43:90:40:18:b5:6a:32:e8:14:
         66:13:00:e5:e7:f5:6e:14:1c:32:44:50:d1:97:6b:ae:1f:a9:
         cd:c3:91:de:33:15:00:05:5a:b1:60:57:f9:b9:7a:8d:a0:7d:
         10:7c:70:55:9a:7f:fc:e1:e5:6d:a5:7f:83:fa:c8:7d:b8:44:
         cc:6f:a7:a8:64:9c:17:d4:e2:a2:97:5f:96:44:0a:03:e8:a8:
         ff:b7:f8:80:0d:94:63:b6:15:4f:bd:43:8b:ca:c3:b6:97:d2:
         f6:4b:7d:ed:0f:f7:8b:56:c2:29:47:24:f7:b8:7b:35:86:f4:
         3c:11:4d:11:0d:7a:fd:4d:77:60:66:0f:b8:a5:d5:19:ad:39:
         b7:9f:eb:31:23:c2:dd:07:9a:81:bf:8a:83:f9:1e:da:ec:2b:
         e8:d3:da:64:ac:8a:e1:45:bd:fe:13:c0:6d:02:e7:79:2b:f7:
         9b:21:b0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----