Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
File:                     3ucsj67LcFLIQSAbJfagGOR3scI.mft (raw, json)
Hash identifier:          0/mXE4GCrFrxYrD7yWQ535M4ClfvlRE6mHEcu78am2c=
Subject key identifier:   34:BB:11:72:2C:F3:D4:E3:AA:42:5A:CD:DD:A9:7A:37:00:A7:14:DD
Authority key identifier: DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2
Certificate issuer:       /CN=dee72c8faecb7052c841201b25f6a018e477b1c2
Certificate serial:       01962E2AF127743037DF01F7D91B289CAAC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft
Manifest number:          0B77
Signing time:             Sun 13 Apr 2025 08:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:28 +0000
Files and hashes:         1: 3ucsj67LcFLIQSAbJfagGOR3scI.crl (hash: awyrmReA/mvDGr8ekLwhPWJNNqikHGmHpWeYTX4If9I=)
                          2: zxXrJCgqT81AO-d4vpKnqCQPEGE.roa (hash: WugT5zcayhMYDSTA/kF2PldTCBDPYZiQht5Wqh3j65Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f1:27:74:30:37:df:01:f7:d9:1b:28:9c:aa:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dee72c8faecb7052c841201b25f6a018e477b1c2
        Validity
            Not Before: Apr 13 08:01:28 2025 GMT
            Not After : Apr 14 08:01:28 2025 GMT
        Subject: CN=34bb11722cf3d4e3aa425acddda97a3700a714dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:85:c7:6c:75:e0:96:74:cf:29:d5:bb:ac:8b:
                    63:41:a2:94:3f:7d:17:c8:0a:40:a3:22:48:7c:dd:
                    7b:58:da:c2:c1:ce:c4:1f:b8:bc:19:00:2f:76:3a:
                    a0:37:43:ed:a2:42:36:cf:01:51:13:e8:9d:35:c6:
                    19:66:1b:40:5b:a3:17:5b:3e:fb:f6:c1:c7:32:7e:
                    e4:82:30:a0:ce:63:4e:69:0e:1e:e0:e1:33:99:99:
                    e3:90:fd:af:8b:40:e8:b3:97:3c:5c:78:41:bf:20:
                    80:91:2e:7e:3c:0f:7b:be:5c:0d:77:12:d0:20:0a:
                    4b:70:5e:9e:13:c7:3e:e5:b6:df:8d:7b:68:b3:cd:
                    b5:c3:ff:d6:85:02:b4:6e:4a:0e:a9:7a:cc:b1:fc:
                    0f:05:e1:4c:32:2e:41:38:24:bb:79:af:dc:f6:bd:
                    24:0c:32:a3:ba:f7:f2:08:33:14:49:5c:ed:40:80:
                    d7:49:de:71:86:52:e1:4a:9d:0a:bd:01:61:24:49:
                    ba:ef:c9:ac:11:86:0c:95:b5:90:b2:be:1e:2c:c9:
                    d8:c3:96:62:60:80:19:4f:b8:af:a0:db:dd:27:1d:
                    6d:9e:5e:ab:f8:14:4f:0b:9a:9c:d0:f1:da:b3:7a:
                    b6:d7:88:e6:79:c3:db:00:95:78:d0:31:cd:ef:2f:
                    48:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BB:11:72:2C:F3:D4:E3:AA:42:5A:CD:DD:A9:7A:37:00:A7:14:DD
            X509v3 Authority Key Identifier:
                keyid:DE:E7:2C:8F:AE:CB:70:52:C8:41:20:1B:25:F6:A0:18:E4:77:B1:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ucsj67LcFLIQSAbJfagGOR3scI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/ef829a-acfc-4402-95ce-383fb2b954d9/1/3ucsj67LcFLIQSAbJfagGOR3scI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:76:ca:97:78:81:06:9e:19:3d:14:a8:24:3b:80:f4:ef:36:
         0a:50:cf:27:55:13:72:3d:67:55:b6:21:82:45:3e:2c:81:62:
         47:9c:d8:ee:4e:52:f2:4a:3a:08:41:10:52:ff:e3:68:17:99:
         b3:6d:43:9e:97:e0:97:8f:60:73:f7:df:dd:77:af:2c:84:b4:
         d8:6e:ec:70:25:aa:cf:13:bd:0b:16:90:7c:8f:1b:26:30:95:
         8f:c1:80:f2:34:5d:62:d8:19:8f:34:ea:23:3e:45:9e:35:bc:
         22:32:52:e6:16:50:83:d5:61:9b:c4:c0:0f:5e:fc:f9:0b:0e:
         bc:d3:11:83:76:0d:f3:cb:03:f1:50:9e:54:34:8a:8e:45:4e:
         a5:b3:8f:3c:fb:f6:6f:8a:c0:c6:80:f5:9f:c5:51:d6:d5:4b:
         15:4b:fb:83:07:bf:c8:47:58:f0:7e:8c:b5:7f:2e:1f:0c:f4:
         b1:86:d5:94:c2:2d:ce:fc:0e:b6:20:d0:a8:84:8d:fd:29:f4:
         4c:b9:7d:ac:e7:c5:52:8b:ca:dc:e1:b9:4a:77:6f:2d:db:b9:
         59:25:31:96:96:ce:65:99:5f:8f:36:5f:28:70:d9:ee:bc:b7:
         5d:cc:3a:69:d0:83:77:d4:b3:bc:d5:d9:f8:d0:e6:35:69:3e:
         72:c0:aa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----