Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
File:                     b3vjrR98WVDNRtSLsffqd1CvqB4.mft (raw, json)
Hash identifier:          f4GRBNuHRUZpimLpH8S7e6Nxe4eYjb4hmO8r3prIrbs=
Subject key identifier:   FF:A6:11:8E:AA:C0:9C:60:CC:5F:8D:F7:E9:89:C7:9D:87:46:57:28
Authority key identifier: 6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E
Certificate issuer:       /CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e
Certificate serial:       01962ECF7F15F41B91AA1EAE65CCD2AEFF23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft
Manifest number:          0C10
Signing time:             Sun 13 Apr 2025 11:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:12 +0000
Files and hashes:         1: b3vjrR98WVDNRtSLsffqd1CvqB4.crl (hash: suT4iko/nCwuRfk+/mu5eheOWOSXNjOktU8dBqAEVe8=)
                          2: uMaOUumndZxKeHpsLiDjyBlhUEc.roa (hash: Vgb/fd+KM9R/ibiYhniBySYsrSRU1XkwhrI3i4xQXFQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7f:15:f4:1b:91:aa:1e:ae:65:cc:d2:ae:ff:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f7be3ad1f7c5950cd46d48bb1f7ea7750afa81e
        Validity
            Not Before: Apr 13 11:01:12 2025 GMT
            Not After : Apr 14 11:01:12 2025 GMT
        Subject: CN=ffa6118eaac09c60cc5f8df7e989c79d87465728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:4f:f1:4d:26:8c:4c:ff:dd:91:2f:2c:55:28:
                    ad:7a:3e:35:f6:7d:79:b3:27:07:1e:63:ba:d2:fc:
                    16:6e:59:de:de:21:dc:3e:7c:1b:5c:37:07:d8:fa:
                    8a:e4:c6:73:0e:91:fc:88:78:3d:00:74:9d:2d:7d:
                    38:ea:e4:50:fa:75:51:30:34:f5:f9:16:28:d4:1f:
                    b5:4b:87:1e:f8:b8:c2:ba:fd:31:25:4c:e1:29:bd:
                    fb:6e:6b:9f:2b:34:af:14:83:62:d7:0a:83:e5:04:
                    ca:c6:ce:03:ab:1d:75:44:0a:57:be:a0:f6:70:64:
                    bd:c3:52:83:a0:94:2d:99:44:90:dd:ae:0b:c7:75:
                    7f:c9:ec:cc:59:b7:53:0f:bb:44:fa:b8:1b:ed:61:
                    eb:8f:9c:41:1a:ae:08:ba:22:57:ae:1f:88:7e:74:
                    c5:1d:34:88:a8:f3:c3:80:fd:39:f8:1f:f9:10:fa:
                    b4:ca:3b:36:98:4d:b9:5d:72:28:6b:51:89:dc:b7:
                    e6:3b:d5:cb:a6:8f:63:d3:b3:6e:3c:69:6c:ef:c0:
                    e4:5d:29:b1:e2:b3:5d:e6:ec:65:d6:2d:56:b2:24:
                    b3:c1:d0:e4:87:b5:7b:3c:65:a0:11:1c:93:56:4c:
                    e1:c6:15:a2:e4:d0:3d:67:8b:60:1c:76:bd:f0:e1:
                    0c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A6:11:8E:AA:C0:9C:60:CC:5F:8D:F7:E9:89:C7:9D:87:46:57:28
            X509v3 Authority Key Identifier:
                keyid:6F:7B:E3:AD:1F:7C:59:50:CD:46:D4:8B:B1:F7:EA:77:50:AF:A8:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3vjrR98WVDNRtSLsffqd1CvqB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ac86da-cdaa-4afc-8d4a-bfa872c2f392/1/b3vjrR98WVDNRtSLsffqd1CvqB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:af:24:46:55:5a:fb:2c:dd:44:da:fc:86:1c:e9:86:ed:d5:
         76:10:cc:0d:40:41:1c:7c:00:f1:bd:05:e3:29:99:3a:23:db:
         99:27:04:0a:0e:93:e1:eb:c1:5b:73:03:8a:d1:91:56:06:8c:
         44:b4:54:8d:0f:c3:62:fe:f4:88:57:81:d9:bd:20:71:a9:d4:
         5e:1b:69:e3:f9:ac:fb:8a:a9:62:67:67:35:c5:7c:dd:c7:dc:
         b4:92:39:4d:05:19:d1:96:62:db:24:91:36:96:05:c2:79:3d:
         9c:de:35:a3:ad:f0:5f:b8:8b:bd:cb:15:53:2f:fd:4c:b1:42:
         0c:a2:16:43:44:da:c8:c6:17:04:4f:b6:c9:6a:de:a2:f4:8b:
         60:1c:ee:3c:92:6c:6a:29:e1:5b:5e:71:a7:32:8e:ad:1d:b6:
         6f:08:10:d6:ab:bb:de:30:7b:c9:29:6b:a3:9b:26:87:e0:c0:
         3a:2f:24:9a:6e:a9:df:e9:69:b2:01:cf:8e:1f:73:c5:54:27:
         60:5b:8a:b3:22:ee:1e:08:0c:9f:d9:1f:ab:e6:4a:d4:7b:ed:
         a6:b6:45:14:9c:f8:8c:04:29:00:a7:9d:ba:67:dd:23:0d:cb:
         7b:10:27:88:7e:b5:1f:5f:f7:01:6f:ca:bf:a7:43:32:55:4d:
         36:99:00:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----