Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
File:                     MHbphV-byjAXoQE3tEPujFKMqVI.mft (raw, json)
Hash identifier:          IkqiejZzDgoQsEXZqlEVeSB/1EOXThVUyx5kgaJLSqk=
Subject key identifier:   F3:AF:10:7B:62:E1:FD:9A:AC:C0:4E:94:35:34:90:F2:7C:41:6C:66
Authority key identifier: 30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52
Certificate issuer:       /CN=3076e9855f9bca3017a10137b443ee8c528ca952
Certificate serial:       01962FAB2C1C10ED2AD0362128B62083C0F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:09 +0000
Files and hashes:         1: MHbphV-byjAXoQE3tEPujFKMqVI.crl (hash: uWJXS6I/29kLQVpGUxmnGISpaX+gYN+Oj/pww4jBcJY=)
                          2: Wrs6edZF_FheJS0JSp4oL-e56WQ.roa (hash: vV9mNOx2NnPdDR1+6XQLcqlbWprm1qsghkqsjFpy7rE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2c:1c:10:ed:2a:d0:36:21:28:b6:20:83:c0:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3076e9855f9bca3017a10137b443ee8c528ca952
        Validity
            Not Before: Apr 13 15:01:09 2025 GMT
            Not After : Apr 14 15:01:09 2025 GMT
        Subject: CN=f3af107b62e1fd9aacc04e94353490f27c416c66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:56:cd:ca:3e:d8:55:2c:ab:3e:28:df:8c:3a:
                    e3:f1:c0:ae:6c:88:71:dd:56:fe:19:5a:2e:28:a4:
                    ca:a3:f5:1c:a2:26:71:73:e8:e0:ea:03:3f:f0:bd:
                    c9:c2:4e:11:b6:07:14:07:5d:d5:a4:e6:04:1d:a9:
                    cf:eb:be:5b:3b:84:65:9a:bc:7b:33:ef:33:ca:60:
                    d7:de:d3:5d:5e:26:b8:7e:f2:d6:ee:69:33:27:f6:
                    e8:74:18:00:ac:3b:53:2e:bc:4e:7b:ed:30:eb:b2:
                    e5:ce:6b:eb:51:ec:02:50:89:07:7e:22:8a:08:1e:
                    80:11:5e:3e:32:4b:0b:30:83:77:50:60:91:ff:ba:
                    f2:d5:61:55:5e:62:d5:be:25:33:31:95:92:ad:f1:
                    57:ba:30:02:e5:1e:37:a2:49:b8:7f:12:9f:3e:ea:
                    0a:6a:3c:11:74:fc:56:cf:c4:ed:13:e3:a2:1b:8d:
                    7a:67:63:14:08:74:e4:58:2a:8f:30:e1:c8:77:ba:
                    7b:9e:2b:4c:c1:c0:39:fc:b2:95:25:40:47:03:73:
                    f8:50:07:61:bd:97:94:b1:de:de:1e:cd:65:d8:6d:
                    08:7b:1c:bc:0e:e5:54:7e:37:70:74:9b:15:89:2a:
                    7c:3e:3d:b9:d6:ea:18:29:da:b4:64:2c:b7:bf:a5:
                    46:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:AF:10:7B:62:E1:FD:9A:AC:C0:4E:94:35:34:90:F2:7C:41:6C:66
            X509v3 Authority Key Identifier:
                keyid:30:76:E9:85:5F:9B:CA:30:17:A1:01:37:B4:43:EE:8C:52:8C:A9:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHbphV-byjAXoQE3tEPujFKMqVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e25269-cfc9-4848-b1e5-7f786bb34344/1/MHbphV-byjAXoQE3tEPujFKMqVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:55:d3:53:7d:dc:4c:90:4d:2e:92:54:d5:36:0f:87:a7:3c:
         82:31:5c:98:e2:f8:9a:8d:79:cb:7b:bd:9c:08:f9:00:de:97:
         c3:b3:e6:6a:d5:d6:11:e0:f7:db:19:6b:20:2f:ab:0f:ca:75:
         a1:85:02:54:ee:4a:40:4e:77:c9:8f:a5:48:54:62:3e:15:7c:
         c7:36:51:65:b0:e1:90:52:7e:db:ac:0d:0c:31:fd:3f:0f:c3:
         86:f5:d4:59:cc:18:33:80:b9:d9:8f:26:40:ab:96:78:72:28:
         df:f7:ac:aa:48:da:d2:03:54:6b:94:9d:8e:a1:5f:cb:3c:20:
         7a:87:6a:ea:9e:d3:95:fd:bc:9e:53:df:f7:85:ad:c0:6d:6c:
         cc:a0:37:24:60:68:80:2b:8c:e1:29:c7:bc:41:39:eb:19:44:
         1a:5e:b0:4a:c1:1e:78:56:97:35:dd:5c:84:d6:e4:1d:84:a5:
         4c:fe:e4:40:5a:6a:49:a5:3a:cf:4e:cf:96:1f:c5:78:c3:ed:
         a2:d9:41:8a:d9:7f:2f:29:7b:b8:45:84:95:85:a6:04:1f:39:
         80:f3:d0:9c:4f:9e:3a:86:43:96:0f:e0:3c:a7:52:50:2e:4b:
         06:1d:fc:5f:02:d2:f2:61:5c:a8:0c:30:79:75:9c:44:58:54:
         a9:1c:cf:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----