Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
File:                     3mxgNQQsxTJRbrwZaPQb__S4U34.mft (raw, json)
Hash identifier:          PL3T9Li7FQgtPY3r1d+fanPIcJy6VK6kdJXx//pMLAI=
Subject key identifier:   FF:5C:EB:79:95:39:18:E4:E1:78:10:51:B5:F6:4B:B2:99:5D:97:23
Authority key identifier: DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E
Certificate issuer:       /CN=de6c6035042cc532516ebc1968f41bfff4b8537e
Certificate serial:       01962E61D4DAE6B193C2F6487A134F848D1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft
Manifest number:          1132
Signing time:             Sun 13 Apr 2025 09:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:25 +0000
Files and hashes:         1: 3mxgNQQsxTJRbrwZaPQb__S4U34.crl (hash: tEjWZKJHovARdlkvCgJPR0MFtYc+umf+Sd9k4RCGPLE=)
                          2: qlMHdAg_ZeG5jpZEikZxyiq5rOM.roa (hash: r9NbCVDLWns0v6U+hfflkmDI70L6VCrJW0Q5+div1jw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d4:da:e6:b1:93:c2:f6:48:7a:13:4f:84:8d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de6c6035042cc532516ebc1968f41bfff4b8537e
        Validity
            Not Before: Apr 13 09:01:25 2025 GMT
            Not After : Apr 14 09:01:25 2025 GMT
        Subject: CN=ff5ceb79953918e4e1781051b5f64bb2995d9723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:28:63:85:69:a0:a5:54:4d:eb:8a:96:27:3b:
                    6a:90:3a:bc:72:b4:51:4e:e1:48:5e:f7:c2:5b:ee:
                    17:ba:d5:35:41:88:cf:f7:4a:0b:81:8c:94:20:a6:
                    ba:89:77:33:50:19:40:1a:a7:00:12:15:99:ee:94:
                    4d:3c:7d:e6:c6:00:4c:7b:66:6f:35:e1:3e:f6:7e:
                    74:29:d0:e8:91:a3:b4:86:54:3f:52:92:92:28:7c:
                    27:bf:8b:b4:3b:c0:47:b3:51:01:c7:11:d3:b6:88:
                    3d:b5:ee:d3:6f:47:ed:00:b2:60:ff:31:cc:83:38:
                    50:af:cf:87:aa:97:ca:99:93:b3:8e:bc:2e:f4:24:
                    5f:17:6e:1f:b3:2f:41:aa:da:d9:e8:61:f6:98:2e:
                    d1:23:f9:18:5a:4d:f1:dd:03:9e:11:05:1f:8c:06:
                    f6:f4:f6:e1:ea:c8:93:40:a5:11:6d:c3:00:37:7c:
                    60:be:c3:04:23:ba:0a:5d:1d:3e:c3:c7:f6:c3:7f:
                    c7:8e:48:b7:2d:90:41:ec:8e:a3:6b:f3:8d:4f:7f:
                    99:15:99:d0:c5:08:06:0d:12:36:08:bd:50:3b:35:
                    7c:fc:e8:50:43:aa:27:52:cf:b6:f4:b2:58:7f:98:
                    28:1d:bc:dd:da:33:11:b1:0a:96:b7:b4:54:66:fd:
                    1e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5C:EB:79:95:39:18:E4:E1:78:10:51:B5:F6:4B:B2:99:5D:97:23
            X509v3 Authority Key Identifier:
                keyid:DE:6C:60:35:04:2C:C5:32:51:6E:BC:19:68:F4:1B:FF:F4:B8:53:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mxgNQQsxTJRbrwZaPQb__S4U34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c2bb4d-8483-47ce-bb0a-f5f490d2c163/1/3mxgNQQsxTJRbrwZaPQb__S4U34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:df:ae:1e:d7:6c:b8:c0:22:c3:36:8c:11:55:a5:dc:59:f2:
         4a:ce:cd:d4:d4:94:a0:cf:34:d2:19:0d:e0:7f:aa:23:0d:cc:
         21:7c:e2:9d:c4:e3:80:01:30:e8:87:32:c1:cd:34:f3:d9:c9:
         50:e5:f9:04:ab:86:d6:84:19:28:77:6f:b3:65:87:b7:9b:0d:
         25:1c:be:41:a5:13:c6:2b:b3:52:57:7a:50:a6:eb:80:fc:c1:
         e9:bc:34:32:bb:14:d0:a4:ce:b3:2d:a9:ee:07:73:37:18:13:
         3c:05:7b:8c:c0:f8:cd:70:f3:ab:31:50:6c:48:9a:4b:5c:0e:
         dd:6e:63:f5:ee:a4:ab:d8:ce:04:37:78:10:94:01:be:07:b1:
         25:94:46:c4:5f:65:e8:b5:2f:f3:be:f5:2a:a6:62:a5:20:db:
         47:6a:bc:02:a2:e7:3b:d2:3e:10:db:d7:d7:ff:11:46:82:1f:
         5d:cc:6c:ec:6e:62:3c:e2:d5:3a:3a:de:70:1a:7d:cd:0d:e4:
         ed:0a:14:5f:80:a3:fd:84:9b:a1:42:35:34:77:25:60:68:3b:
         60:10:93:1f:aa:b5:f8:78:16:f5:7c:c2:5f:9e:c5:69:27:f5:
         03:10:35:59:8c:8c:95:22:64:d2:35:fa:d8:1a:ad:d7:f2:41:
         d9:d8:00:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----