Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
File:                     vz3ogsJhnWgPLX_mALkBbaKHqNM.mft (raw, json)
Hash identifier:          IMNLX4niR3lPsjp6uuzKgP7MISDDbY//m0O92N9fhPI=
Subject key identifier:   32:81:A2:A0:CC:53:81:A4:05:28:EF:19:BE:78:B9:71:16:92:87:C2
Authority key identifier: BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3
Certificate issuer:       /CN=bf3de882c2619d680f2d7fe600b9016da287a8d3
Certificate serial:       01962ECF865BC860A8A82BA84F853F02629D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
Manifest number:          1341
Signing time:             Sun 13 Apr 2025 11:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:14 +0000
Files and hashes:         1: 654gVU41w8foyRrdow3IvLh38_0.roa (hash: FxM/zOQmEVryb2JTftwL4qqp6keHE//w4j2q3qFh7fE=)
                          2: vz3ogsJhnWgPLX_mALkBbaKHqNM.crl (hash: ueNGwNDYrOgOawlqtZ25VOnpr1WYAh4YEIERURyLgtc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:86:5b:c8:60:a8:a8:2b:a8:4f:85:3f:02:62:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf3de882c2619d680f2d7fe600b9016da287a8d3
        Validity
            Not Before: Apr 13 11:01:14 2025 GMT
            Not After : Apr 14 11:01:14 2025 GMT
        Subject: CN=3281a2a0cc5381a40528ef19be78b971169287c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:04:99:eb:0c:e7:0c:35:6f:0e:7c:fd:2a:0d:
                    15:86:92:12:26:42:57:b6:3e:c3:33:54:5a:71:2b:
                    0b:13:4e:42:e1:55:80:c4:dc:db:2a:1a:b8:da:32:
                    18:4c:aa:7e:fe:7a:bc:83:35:bf:2d:58:87:39:b4:
                    d2:94:4d:bd:a7:2a:00:e7:bd:ff:69:40:3b:22:58:
                    91:96:46:61:5c:4b:2e:46:06:99:10:16:5f:f1:a3:
                    d8:65:e7:dd:39:f5:68:75:6c:f6:dc:5b:ed:84:d7:
                    24:50:43:9d:37:57:5f:3b:06:bb:85:30:2e:0d:14:
                    ce:6a:31:ae:1b:1c:88:40:82:ab:1d:8a:cb:7c:65:
                    c0:45:a9:e2:e9:5c:e0:5c:1e:cc:8f:ec:96:6c:b9:
                    74:aa:7c:91:00:47:90:39:24:8a:7d:ab:f7:c9:94:
                    ad:4c:1f:2b:86:e9:3b:10:9f:59:9c:a5:af:7d:ff:
                    ec:46:96:c1:b0:03:cf:a9:c0:9e:80:d1:c2:f7:ef:
                    67:63:3f:1f:cf:e0:7b:f6:f2:62:30:5d:6d:ed:71:
                    88:2f:28:00:4e:4a:d9:31:b8:aa:1d:f6:9a:46:5c:
                    0c:e6:28:0c:b3:12:bd:21:93:46:42:c4:d4:9b:a4:
                    f0:df:4a:f0:d8:82:71:78:20:9d:3d:d4:12:85:e0:
                    1e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:81:A2:A0:CC:53:81:A4:05:28:EF:19:BE:78:B9:71:16:92:87:C2
            X509v3 Authority Key Identifier:
                keyid:BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:a9:99:ff:1e:6f:b9:dd:3a:97:8e:d1:47:8d:52:ba:cf:48:
         28:de:df:b1:70:e8:85:3d:a1:94:3d:67:86:80:21:33:6c:b4:
         96:86:86:c8:21:37:f4:4f:29:3e:bd:78:73:90:ed:43:ed:72:
         26:2e:57:40:2c:65:9c:95:60:d5:1b:3a:70:83:5c:26:06:55:
         a1:7d:a2:98:03:2b:59:d7:79:2a:c9:1a:88:46:54:f4:30:00:
         09:49:fe:86:c2:b7:83:ee:4c:02:b1:f2:e9:cf:bf:78:cb:02:
         b1:3e:7d:3f:e5:2e:f0:0b:7b:7f:3c:75:3f:15:a1:f9:7e:73:
         36:f7:e6:8a:0e:99:ac:03:2d:9b:e5:ac:df:8c:93:a4:80:d6:
         4a:0d:af:6e:79:db:28:eb:9d:32:ea:df:c1:c1:99:2a:be:67:
         e2:61:00:9a:73:97:10:b8:62:16:92:64:ce:8c:77:0f:74:c3:
         a1:c9:c7:71:4e:dc:dd:4f:41:2a:b3:62:bb:f5:db:d1:2b:35:
         78:c7:be:e7:53:bb:57:62:91:df:ed:ce:36:ec:91:f5:be:a4:
         87:9c:4b:73:80:5e:d5:2f:66:67:f0:0d:c4:e3:ca:d4:71:1a:
         02:cc:be:3e:e6:de:c6:59:39:6d:3e:07:2b:79:ba:aa:d2:11:
         18:89:b6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----