Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
File:                     3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft (raw, json)
Hash identifier:          5joElI5mzFlywupjE/eiSdule4p6nfgTHMvdMwoGEZQ=
Subject key identifier:   9C:AA:C2:C0:26:9D:12:6C:C4:D8:92:79:E8:94:C4:06:CF:FB:36:F5
Authority key identifier: DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04
Certificate issuer:       /CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
Certificate serial:       01962FAB8DE4618309FCC5EA9E2356C989BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft
Manifest number:          10CD
Signing time:             Sun 13 Apr 2025 15:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:34 +0000
Files and hashes:         1: 3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl (hash: 4xmWc7mfjZ6Eh4Gz5OhSpJDJb3hCP1vmKOCKBQzd+xQ=)
                          2: AUThtEaMt8aPJTPbVgcuq62kxQA.roa (hash: czDZteG7pPqWWcX7VvpRLnTlFJ8uAjHDP8qBW/wgGIo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8d:e4:61:83:09:fc:c5:ea:9e:23:56:c9:89:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dce1b25fd91b5fbc1ffb1218c67ed558ae778c04
        Validity
            Not Before: Apr 13 15:01:34 2025 GMT
            Not After : Apr 14 15:01:34 2025 GMT
        Subject: CN=9caac2c0269d126cc4d89279e894c406cffb36f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a8:9e:a0:57:fa:d9:1d:9e:35:33:4b:86:18:
                    52:bb:4a:ac:80:7a:7c:dc:13:24:fe:90:e7:09:6c:
                    36:9a:a3:bd:d9:24:67:8c:38:fb:97:92:a7:f7:49:
                    e6:16:ae:ac:bd:d9:de:28:4e:36:c0:2a:bc:62:52:
                    f1:2f:67:33:9a:03:d8:f0:84:f6:a1:b5:92:5c:ed:
                    b9:66:77:40:ea:0a:90:d5:3c:98:e7:6f:aa:35:c3:
                    fd:61:a3:c4:34:ea:fa:bb:3d:aa:45:f4:05:ea:3e:
                    72:16:6b:1f:74:b1:a2:3c:a8:d6:ed:3f:69:74:29:
                    7a:19:49:7e:13:50:94:a0:06:fa:d1:3d:9c:56:80:
                    c6:1d:ac:6a:ac:d2:e2:3f:f7:d4:86:46:8f:b4:20:
                    7e:eb:df:71:ee:3b:24:1a:c5:af:10:15:33:62:da:
                    9a:b6:83:bf:93:e5:b5:9a:e2:57:2e:1d:c9:28:aa:
                    6b:5e:84:86:db:0d:b4:08:d2:78:23:99:42:e6:d1:
                    11:ca:c8:74:c0:3c:55:12:f1:54:bd:20:51:9c:30:
                    5b:62:11:f3:31:96:3b:0d:6c:b8:e1:e3:7a:2d:28:
                    53:03:a2:5a:4f:9a:60:63:b9:6c:c8:ef:83:ab:77:
                    b3:3a:99:11:08:37:9f:51:b1:ef:50:49:ad:43:21:
                    24:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AA:C2:C0:26:9D:12:6C:C4:D8:92:79:E8:94:C4:06:CF:FB:36:F5
            X509v3 Authority Key Identifier:
                keyid:DC:E1:B2:5F:D9:1B:5F:BC:1F:FB:12:18:C6:7E:D5:58:AE:77:8C:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OGyX9kbX7wf-xIYxn7VWK53jAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3252c0-5725-449f-92a1-643bb27f7fbf/1/3OGyX9kbX7wf-xIYxn7VWK53jAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:a8:0e:2e:5a:e5:cf:59:29:3e:e8:09:82:ff:2c:95:1d:e9:
         ac:88:44:f8:4e:69:fe:d5:f0:85:54:c3:7a:d4:a0:af:7f:d3:
         f2:3f:0e:0a:28:9e:ea:c2:46:59:a4:2b:0a:b5:88:bc:e0:d5:
         3d:13:56:03:a0:7c:75:1e:3a:3a:f5:08:40:58:cf:33:da:88:
         fc:6f:ff:7c:bf:c9:f9:57:87:94:1e:9f:c0:58:19:be:84:f9:
         b2:e1:f0:8e:b8:25:f5:4a:2f:4a:3f:c2:45:c5:ec:5a:93:29:
         81:c2:bf:14:ad:a6:9d:9f:b0:a1:f6:85:ba:74:26:82:2f:0b:
         26:92:34:39:eb:97:ce:f4:68:13:bf:d3:c6:f2:46:0d:1b:60:
         d5:64:2e:e4:34:c9:02:3e:8a:a7:19:59:39:fc:fd:6c:45:8b:
         cb:f6:ae:0f:58:4c:b1:6d:ba:ee:5d:de:e9:b9:56:f5:64:80:
         f3:92:31:69:62:5e:85:84:d0:73:81:7a:3b:72:33:a4:1e:76:
         d9:2b:7d:d0:3b:45:2d:44:63:e0:26:03:bd:12:40:33:c9:91:
         56:0f:c6:ce:02:51:05:dd:43:d7:d7:9f:42:fd:3f:96:54:2b:
         22:1a:a9:4f:44:4e:05:64:23:d6:f8:a9:21:21:4f:49:5b:bc:
         42:9c:ff:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----