Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
File:                     3p8qknN4vRRV2ovfhbsauGfh9Sg.mft (raw, json)
Hash identifier:          Fpkl+WxZzhR3FIxWW/yHWCZAPzOxv14CmiV0M9JNHxk=
Subject key identifier:   51:86:E3:8E:C3:3E:AF:95:07:F4:52:F5:8D:58:DB:1C:0B:AC:23:BB
Authority key identifier: DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28
Certificate issuer:       /CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
Certificate serial:       01962E2AE830A82EA555C1424864D33CBD96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 08:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:25 +0000
Files and hashes:         1: 3p8qknN4vRRV2ovfhbsauGfh9Sg.crl (hash: Bjq9z9plFtMdnV0dtaLDIsdzinUFITUYLdWqarIQ5jo=)
                          2: urKpUlRihT17e4-sYhWpyMcE8Ac.roa (hash: OKr8BwUnDAnQRh/fja/ALDyKIeKec2Yi0x2apcZhAec=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e8:30:a8:2e:a5:55:c1:42:48:64:d3:3c:bd:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de9f2a927378bd1455da8bdf85bb1ab867e1f528
        Validity
            Not Before: Apr 13 08:01:25 2025 GMT
            Not After : Apr 14 08:01:25 2025 GMT
        Subject: CN=5186e38ec33eaf9507f452f58d58db1c0bac23bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3d:bf:5a:7f:0c:33:aa:56:0f:12:13:9e:eb:
                    40:d0:de:82:8a:cc:07:5d:85:a3:e9:2f:0f:e7:33:
                    5c:8e:6f:66:f4:f3:4f:ec:66:7a:99:df:f9:14:7c:
                    db:07:73:e2:3b:44:68:3e:15:86:36:22:4f:a9:a6:
                    73:eb:a6:e6:eb:ed:dc:89:66:f4:0a:ab:c1:43:27:
                    1a:f3:88:85:9e:c9:ef:4c:29:9d:6e:a1:b0:05:89:
                    f9:ea:59:22:27:14:95:64:8c:18:0e:93:60:4f:9f:
                    c5:2e:60:99:09:55:27:b2:9b:90:4e:9a:2d:82:5f:
                    77:2a:d2:0d:ac:3c:65:d0:cb:7b:d7:4c:88:90:6f:
                    0c:72:59:d3:53:bc:04:ff:ca:89:10:15:f6:4f:bd:
                    8f:67:c5:fe:43:e0:04:34:d2:21:15:27:ba:54:f7:
                    75:32:72:fb:c5:99:24:1a:d0:de:96:61:6b:e0:dd:
                    13:7e:79:50:86:54:62:04:87:72:b5:52:b7:f7:af:
                    8e:60:8c:41:c7:9c:1d:65:b6:83:a5:2a:cd:fb:b0:
                    f7:a2:c5:29:a5:4f:28:c9:ea:3d:e4:b3:93:56:3e:
                    c8:83:7b:96:17:dc:59:b1:44:04:4c:08:16:86:31:
                    59:a9:e9:0a:c0:7f:38:55:fa:27:72:ea:89:cf:c9:
                    92:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:86:E3:8E:C3:3E:AF:95:07:F4:52:F5:8D:58:DB:1C:0B:AC:23:BB
            X509v3 Authority Key Identifier:
                keyid:DE:9F:2A:92:73:78:BD:14:55:DA:8B:DF:85:BB:1A:B8:67:E1:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3p8qknN4vRRV2ovfhbsauGfh9Sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1759da-c66e-43c8-881d-6db090214035/1/3p8qknN4vRRV2ovfhbsauGfh9Sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:3a:6c:8e:2e:d7:68:cb:46:a2:ff:21:59:b0:76:c6:a5:87:
         5e:48:2a:7d:68:5b:ef:1e:54:f5:6f:0e:29:fe:4f:07:0c:7d:
         27:f9:9f:dc:60:6a:01:73:6f:13:e3:b8:85:18:1f:4c:dd:41:
         ad:45:fc:c9:52:8d:63:43:9e:77:bd:51:05:2d:3c:4e:33:63:
         db:23:e4:b9:b6:04:99:f9:c6:a7:c6:75:54:b7:1e:6c:f7:28:
         14:f0:e0:a9:77:a5:cd:ba:71:86:3c:d4:58:54:02:c6:b9:36:
         03:1d:be:8e:e8:be:19:b6:37:e4:ba:25:e6:6e:e8:74:a6:d2:
         2c:7f:df:37:e5:3d:d9:6b:5d:7c:19:35:16:1a:b4:ea:b1:a4:
         af:7c:37:06:4a:a6:0e:f0:33:64:4a:74:30:9d:4a:54:4b:8e:
         4c:90:7a:b3:8e:aa:d3:bf:e9:7f:86:64:a1:38:53:8a:88:65:
         47:b1:ba:27:fb:c6:69:c3:84:c3:80:4c:ee:11:b4:cb:72:d1:
         16:02:4d:cd:b4:08:07:4d:9d:4a:1c:28:72:0d:99:6c:50:47:
         e7:94:f9:a7:c7:da:9e:37:bf:d4:a6:78:b8:41:b4:6b:2c:63:
         86:81:df:5b:0e:a3:04:bc:68:a5:15:c8:6b:42:84:45:5b:83:
         90:78:28:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----