Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
File:                     3K-toQ4s4g4clviVu47DKlgI9j8.mft (raw, json)
Hash identifier:          3gUmkueJ9QtM8+lJWkkGrcsrylIS8FyKHihcz12z+p4=
Subject key identifier:   01:01:BA:DA:21:CA:EE:7E:15:1C:BA:FD:FA:17:BA:43:60:14:77:1C
Authority key identifier: DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F
Certificate issuer:       /CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
Certificate serial:       01962FAB69F330F1BB074C6B8EF5BFB9CC9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft
Manifest number:          03D9
Signing time:             Sun 13 Apr 2025 15:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:24 +0000
Files and hashes:         1: 3K-toQ4s4g4clviVu47DKlgI9j8.crl (hash: nKGEJvXJw4OBLYNJ/ZEqtsFRpVnmmngZQgIM0hFJiZw=)
                          2: wLvB8cGiUEUZNSS38jCt0kGtb0w.roa (hash: m3dcBbH2bIeKi8Ap8eHL2CuPz3vf7Stl96ekMV6tjIA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:69:f3:30:f1:bb:07:4c:6b:8e:f5:bf:b9:cc:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcafada10e2ce20e1c96f895bb8ec32a5808f63f
        Validity
            Not Before: Apr 13 15:01:24 2025 GMT
            Not After : Apr 14 15:01:24 2025 GMT
        Subject: CN=0101bada21caee7e151cbafdfa17ba436014771c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:43:4a:be:3c:7f:98:23:90:0e:f6:9b:b0:f1:
                    f7:04:45:26:4e:2d:dc:31:ec:91:49:28:03:e9:c5:
                    fc:9e:df:a7:3f:0d:f9:5b:ae:46:14:39:58:40:99:
                    a3:22:37:e9:19:51:8d:d7:ce:d7:fd:2a:0c:7a:e4:
                    42:dc:9c:7f:cd:98:6a:0d:fc:4e:fd:ee:dd:97:af:
                    03:53:4b:e1:d5:33:61:e2:b6:9c:3b:f1:6f:36:b6:
                    34:a5:fc:17:5c:a5:4e:55:05:7f:6a:d2:27:40:42:
                    1e:d9:dc:2b:e7:4a:c6:07:88:f8:58:f3:b6:02:a1:
                    12:54:fb:21:dc:b5:db:53:41:e0:c0:c7:29:6c:38:
                    b7:80:ab:f5:50:b6:7d:76:e2:4d:d1:a9:d5:4f:6f:
                    d0:e5:fe:46:3c:8d:ec:38:13:e8:79:99:d6:f8:2a:
                    0f:23:38:45:86:ef:b1:20:95:1b:c4:60:7e:98:a2:
                    58:95:55:44:46:2d:94:84:1c:08:cd:c2:f9:93:c0:
                    ed:d9:e0:fe:da:c3:56:1f:75:9b:1c:09:1c:a0:41:
                    fa:e0:67:ce:9c:d8:6a:75:b5:0e:ac:ae:10:86:22:
                    70:a3:7d:bc:c6:dd:b5:60:8e:22:96:04:41:cf:5a:
                    67:94:1e:cb:34:db:48:25:47:42:bc:46:9b:ad:dc:
                    40:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:01:BA:DA:21:CA:EE:7E:15:1C:BA:FD:FA:17:BA:43:60:14:77:1C
            X509v3 Authority Key Identifier:
                keyid:DC:AF:AD:A1:0E:2C:E2:0E:1C:96:F8:95:BB:8E:C3:2A:58:08:F6:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3K-toQ4s4g4clviVu47DKlgI9j8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/5d6234-1735-4bf0-8504-a66f84edbd6d/1/3K-toQ4s4g4clviVu47DKlgI9j8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:56:02:e5:7f:0d:93:55:6f:3d:89:ab:76:e0:00:03:e8:f2:
         ea:05:a8:8d:f9:1d:4f:b3:f7:03:6b:c3:00:e8:eb:81:7b:13:
         db:03:17:3f:ec:70:21:31:91:33:c2:48:e0:ae:77:83:d2:1c:
         43:d8:93:7e:cd:0d:a3:c6:70:bb:96:0b:ec:bc:f3:86:51:49:
         e1:fd:5d:75:88:ad:7b:bd:47:d3:e9:97:73:ab:5c:6d:dc:28:
         76:cc:ad:6a:bd:13:c2:15:d5:79:15:7d:7a:ad:1e:68:a2:99:
         1c:b2:85:d7:57:b8:a9:ca:3d:23:d0:0f:74:ab:7b:99:8a:8e:
         1e:ca:d4:28:6d:2e:f9:9e:5b:b9:d4:59:c1:41:d1:6f:51:fe:
         7c:d9:26:2e:0e:f1:39:78:82:0a:ec:db:4d:05:12:6e:37:fe:
         53:82:40:26:bf:87:28:d5:11:de:ef:8e:4b:31:96:b5:92:c8:
         9d:94:b5:f5:27:ca:5e:6d:ad:82:58:63:c5:7a:65:85:5c:6f:
         05:e8:05:b6:f6:c5:5d:ae:d1:82:cc:1d:c6:bc:da:c5:92:e9:
         9f:dd:eb:8e:26:b4:e8:3a:5a:38:b3:b0:41:6f:6a:f7:17:92:
         eb:4c:c9:52:e8:7e:cf:e8:cc:49:a5:ca:9a:9e:c2:85:fc:3b:
         d0:2b:cd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----