Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.mft
File:                     3x4tS9NitiuARQIdw1CxIOVTAmU.mft (raw, json)
Hash identifier:          gRH0MgrdGWXA7Rsyo5Az4zZgXccdvJKEuhSYN/1tWYw=
Subject key identifier:   6D:69:4E:54:0F:4C:79:0D:22:F6:4D:A7:16:23:A2:4F:96:72:B3:07
Authority key identifier: DF:1E:2D:4B:D3:62:B6:2B:80:45:02:1D:C3:50:B1:20:E5:53:02:65
Certificate issuer:       /CN=df1e2d4bd362b62b8045021dc350b120e5530265
Certificate serial:       01962E61F1E78EF7464BEBD31D707623B80B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3x4tS9NitiuARQIdw1CxIOVTAmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.mft
Manifest number:          12C9
Signing time:             Sun 13 Apr 2025 09:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:32 +0000
Files and hashes:         1: 3x4tS9NitiuARQIdw1CxIOVTAmU.crl (hash: lAuN98UYB7RADTaY+LxAN3O7+xfePiRf/NORJim4lYc=)
                          2: MYuqoMzDVi1acZcNDb9FA7d3gCM.roa (hash: tUaun7mhti9TK8aJqqe0a+bLVD50ReQW/RjSFMudsMM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f1:e7:8e:f7:46:4b:eb:d3:1d:70:76:23:b8:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df1e2d4bd362b62b8045021dc350b120e5530265
        Validity
            Not Before: Apr 13 09:01:32 2025 GMT
            Not After : Apr 14 09:01:32 2025 GMT
        Subject: CN=6d694e540f4c790d22f64da71623a24f9672b307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4e:c0:d0:98:e9:7e:39:d9:97:c1:f2:a6:a4:
                    81:df:6f:b0:25:5d:22:f7:ee:37:c4:30:a4:82:5e:
                    22:dd:d0:21:fc:b6:74:6f:31:17:0f:f7:23:b6:59:
                    15:b8:ff:fa:b9:3f:21:a8:aa:5d:b7:97:b1:ab:39:
                    f9:dc:54:76:fc:2e:ab:91:6d:8b:48:d1:61:43:fc:
                    9e:23:cb:b0:c4:cc:e3:03:2c:b9:dd:14:79:37:c1:
                    ce:e7:42:8d:a5:d7:05:83:61:fa:cb:d5:27:93:9e:
                    31:cf:df:d8:65:58:ac:da:d7:76:d0:c6:e3:58:1e:
                    01:03:64:4b:4e:c7:3c:67:3a:70:e4:a3:a4:61:57:
                    58:ae:0f:a8:18:24:0f:b7:6d:8f:a3:f0:ea:ae:76:
                    7d:e1:a1:a9:cd:a2:0a:f2:dd:7d:c8:f3:41:89:75:
                    79:ae:67:6c:bf:87:6e:79:ca:c1:4b:19:29:b8:db:
                    f7:ca:22:59:7c:bf:8b:be:32:e9:d2:13:ce:d3:ad:
                    0c:6b:27:f7:2c:b8:8c:55:f9:e6:e9:e4:6f:4b:b3:
                    ad:21:81:24:ed:7d:b4:6c:ef:d9:0e:74:04:db:67:
                    6f:45:50:d0:c6:ca:68:cd:2d:ec:11:46:9b:84:38:
                    a9:d5:e5:e5:11:a0:b3:22:10:87:72:c3:f8:2f:2f:
                    fa:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:69:4E:54:0F:4C:79:0D:22:F6:4D:A7:16:23:A2:4F:96:72:B3:07
            X509v3 Authority Key Identifier:
                keyid:DF:1E:2D:4B:D3:62:B6:2B:80:45:02:1D:C3:50:B1:20:E5:53:02:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3x4tS9NitiuARQIdw1CxIOVTAmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2879fb-629c-4abf-a35f-03afae688657/1/3x4tS9NitiuARQIdw1CxIOVTAmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:fe:db:ee:f3:da:3b:ea:fc:64:77:fb:29:49:0b:37:ed:70:
         a3:39:a2:62:7d:ec:f4:c8:22:14:4a:46:2e:f9:45:8e:7f:ed:
         7d:87:24:4d:ae:2e:46:fe:b5:05:77:c9:0e:c7:d0:39:8f:55:
         b2:a4:6c:44:d1:96:10:68:94:62:41:e1:cc:70:a7:5a:08:bf:
         73:4a:c0:6f:89:9a:c5:43:be:bb:93:ee:c9:86:0d:35:36:06:
         66:07:c2:b0:db:d4:b2:6a:8a:52:ee:4a:43:81:3b:1d:60:2a:
         f5:01:e4:3c:7b:a4:a8:f0:b8:29:92:6c:de:82:b2:cb:ea:c2:
         c7:aa:72:80:d0:f2:3b:1e:5e:a3:dd:4c:5a:db:11:8d:03:93:
         44:32:1d:10:ad:b3:76:87:cc:a6:4c:ba:9a:4e:8e:c3:e3:d5:
         07:41:a9:36:45:9c:f1:52:3e:15:7c:c1:2e:ae:a1:e1:38:21:
         89:99:7f:68:88:e1:19:08:ba:ad:94:86:fa:56:f6:93:54:78:
         fb:64:21:f8:6c:fd:33:cd:3a:a3:3c:d6:e3:d6:39:07:11:31:
         93:bb:8c:f7:65:6f:14:6d:c8:10:2a:31:8a:89:c0:10:a7:30:
         f4:5d:c5:77:4c:22:e5:c0:8e:d6:ab:6a:99:33:7e:b8:ca:a0:
         05:dc:33:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----