Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
File:                     83T3NMNpXmeQanAy6y5Z-z60GyI.mft (raw, json)
Hash identifier:          dvUQBwgwEqBTinnXWySKKzzpHr2iWe7vl3+dKqriBXM=
Subject key identifier:   9B:DC:8E:EA:E0:F3:97:91:C4:D3:04:1F:92:3B:B0:5B:9E:E5:C0:79
Authority key identifier: F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22
Certificate issuer:       /CN=f374f734c3695e67906a7032eb2e59fb3eb41b22
Certificate serial:       01962E9866A33A7070D7C721A29E7C371AA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft
Manifest number:          07BA
Signing time:             Sun 13 Apr 2025 10:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:01 +0000
Files and hashes:         1: 5PZ3g6OP7Xkkh7yPx23u6neBrAE.roa (hash: Oeq+7unGkdcn5PZadl5yUb8yi+1t207kSQ+K6DCv118=)
                          2: 83T3NMNpXmeQanAy6y5Z-z60GyI.crl (hash: UyDkN0IytnMhRDHVoC3z1Sko68+8zwwDS0MFp7cFgFs=)
                          3: TNt6qas3cJ89n8wxiGWzg9MyX8w.roa (hash: rrMidK0OGIBtvobdrSZyglIiGj8pyxF47ABU/7yhc+8=)
                          4: WPt8oKr1EmQOIK0I7qnH9DYPvJE.roa (hash: OJHjZqCH0qPl8+MzdYjyp7NApYVYsO9hRYT6Cvd6y2Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:66:a3:3a:70:70:d7:c7:21:a2:9e:7c:37:1a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f374f734c3695e67906a7032eb2e59fb3eb41b22
        Validity
            Not Before: Apr 13 10:01:01 2025 GMT
            Not After : Apr 14 10:01:01 2025 GMT
        Subject: CN=9bdc8eeae0f39791c4d3041f923bb05b9ee5c079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:42:0d:25:a8:0a:4d:72:35:8b:9f:b7:78:c9:
                    36:27:d8:33:43:1c:d7:5a:b3:a1:63:1e:ca:99:52:
                    73:8c:89:0b:c9:69:a4:ab:78:15:7d:92:cd:e1:3a:
                    cb:0b:e9:a7:06:9f:6c:1c:fe:ca:00:89:20:0f:64:
                    6a:a7:43:d2:61:23:8f:84:2d:af:b2:2d:f4:6f:99:
                    81:6d:18:9d:5b:35:fb:04:50:8f:85:41:5b:06:36:
                    66:83:f6:31:c6:cc:49:92:7d:4d:8e:f2:37:93:f1:
                    96:92:e4:62:8f:b0:23:4e:e4:b4:49:40:8c:0e:ea:
                    9a:65:58:38:5d:6c:36:39:68:98:62:6a:b8:46:df:
                    23:50:92:0a:84:a7:35:06:e9:b6:21:95:d7:02:fe:
                    08:f7:f1:9b:6b:e6:70:53:53:a4:dc:7b:37:9d:b5:
                    9b:30:6a:89:e5:8c:e4:04:c2:39:6d:31:a0:a5:b8:
                    68:41:19:d1:18:44:6f:17:4c:61:ee:7b:74:8c:2b:
                    d0:5e:7e:bf:5f:fc:1c:8e:d6:00:34:09:8f:93:43:
                    6b:99:19:46:a5:93:e5:f4:49:69:3d:a9:10:8d:3c:
                    d5:69:f9:7d:10:bd:01:99:f0:3b:3a:f7:35:13:fc:
                    19:e8:9e:c1:f2:ef:ce:9c:da:a4:ba:3a:a2:82:ed:
                    41:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DC:8E:EA:E0:F3:97:91:C4:D3:04:1F:92:3B:B0:5B:9E:E5:C0:79
            X509v3 Authority Key Identifier:
                keyid:F3:74:F7:34:C3:69:5E:67:90:6A:70:32:EB:2E:59:FB:3E:B4:1B:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/83T3NMNpXmeQanAy6y5Z-z60GyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/83T3NMNpXmeQanAy6y5Z-z60GyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:aa:f1:1d:ec:02:82:37:14:a3:25:07:9b:62:32:c7:a8:e5:
         c8:c8:67:7c:fd:9a:fe:b6:54:06:f7:76:b4:58:83:0f:53:76:
         de:50:4a:01:c4:ad:f0:29:3c:65:1f:33:1f:7f:b5:a0:7e:ce:
         60:62:3a:2c:bb:ce:9a:66:4b:b5:79:e5:ac:14:b9:cf:3a:15:
         9f:fd:d8:70:53:7b:76:d5:b6:d1:21:7f:96:50:3b:e0:fa:f0:
         a0:dd:52:d7:c0:2c:cd:66:59:1f:44:7d:6c:14:2c:62:33:7f:
         db:92:ca:ef:b3:6a:d4:1a:c2:4a:2c:3c:a3:19:fd:ee:d5:14:
         2b:fa:49:4e:09:b5:3c:66:76:32:1b:5e:5c:96:6f:98:5f:a3:
         0d:ff:6b:0e:a0:63:b0:14:55:25:e4:0e:6a:e9:37:41:64:17:
         5c:f4:d9:e6:e0:ac:4a:e6:52:12:2d:e7:5e:d9:5e:39:8d:f6:
         ed:09:76:08:7a:5d:2b:d1:eb:ea:a9:0a:a3:8d:7a:91:d4:23:
         bc:d6:ac:6e:00:2b:a4:ab:06:b3:ca:7f:5e:70:93:35:df:d8:
         2c:2f:8c:06:b6:50:84:b3:90:dc:df:ed:94:20:00:02:65:3f:
         f7:ae:50:10:13:ff:1f:17:86:50:79:e2:9c:57:f3:40:13:76:
         9b:3b:53:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----