Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
File:                     1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft (raw, json)
Hash identifier:          pV90/V3tuHbnqPdy/72iJKhjuwyFzfUDnb7TZaUdyug=
Subject key identifier:   2A:88:99:A6:D0:CA:6E:61:3D:52:A9:E0:08:69:5B:66:10:F1:C8:41
Authority key identifier: D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
Certificate issuer:       /CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Certificate serial:       01962F3D9F269CE048ACC3551DA4D5AC7DDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
Manifest number:          11AC
Signing time:             Sun 13 Apr 2025 13:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:29 +0000
Files and hashes:         1: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl (hash: x+zazOJxklu2qC8QRa8O/k3xdWYZXFmwvpIJEEryZEQ=)
                          2: A0q8SzSP_vkB0Kdb-LLhQ_QObQQ.roa (hash: U5YBrDMRrX6ygfCOd+cwFtTn/aDz7ai314haVDrv0Uc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9f:26:9c:e0:48:ac:c3:55:1d:a4:d5:ac:7d:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
        Validity
            Not Before: Apr 13 13:01:29 2025 GMT
            Not After : Apr 14 13:01:29 2025 GMT
        Subject: CN=2a8899a6d0ca6e613d52a9e008695b6610f1c841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:64:ca:2a:65:9e:53:f1:1c:bc:fb:64:9f:2e:
                    23:7c:67:3d:5d:55:aa:fb:b1:54:46:4d:7c:fd:2f:
                    c4:85:b6:ed:4a:b6:1c:60:fd:42:26:79:b0:9f:c8:
                    29:de:09:ff:b5:76:04:e7:a4:f4:2f:04:df:1d:d1:
                    7b:fc:2d:41:2b:b0:76:d7:72:74:27:e9:41:9f:f2:
                    1d:f0:e4:d5:97:71:8a:7c:8d:1b:77:95:b0:70:e8:
                    0b:af:c1:84:b3:9a:39:e7:fa:60:88:32:e1:53:8b:
                    65:8f:46:e3:2c:38:38:f9:1d:de:95:31:a5:97:20:
                    f7:ff:a6:b3:cd:e0:15:e9:f4:69:96:bc:ff:d8:05:
                    68:19:08:b5:ce:a7:15:57:25:60:e9:dc:12:e3:70:
                    24:bc:f3:6a:26:8c:a8:39:13:e5:24:ed:da:ab:3f:
                    b2:13:9f:26:0c:21:8a:29:fb:ba:40:db:8f:93:7e:
                    a9:4d:2d:aa:f8:1a:9b:9a:f4:95:6a:7d:2a:cb:31:
                    db:5d:54:7c:31:dd:b8:56:62:04:d1:1d:de:b9:fc:
                    bd:d9:77:80:f7:e1:1c:e8:4e:ed:7d:da:71:af:cd:
                    ad:7d:9f:ba:c9:80:9e:76:34:d9:46:d2:fd:1d:77:
                    1a:be:72:ff:cd:ae:3f:ac:6f:b6:42:0c:5b:ea:9e:
                    29:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:88:99:A6:D0:CA:6E:61:3D:52:A9:E0:08:69:5B:66:10:F1:C8:41
            X509v3 Authority Key Identifier:
                keyid:D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:37:74:63:56:01:21:30:11:53:b5:ae:85:e7:c9:e2:11:b9:
         7a:21:39:08:f6:4c:b2:32:ed:1a:31:a5:0a:d4:0c:43:9c:50:
         e4:e8:c6:45:c4:05:f9:e7:74:84:2f:8f:40:1b:c7:78:57:aa:
         d4:f0:56:e5:7d:3e:10:5a:7a:84:0a:46:de:59:9a:1b:a6:6f:
         9e:b1:34:d2:9e:64:a8:80:66:ed:93:78:e6:83:fc:06:72:16:
         cd:8e:54:d9:6b:49:05:11:7f:d2:98:b3:b3:63:3b:83:d6:54:
         b9:89:5f:f6:a3:07:44:53:d6:86:f3:22:91:e3:17:e9:d6:c9:
         8b:e5:bc:ad:4d:c3:a9:29:56:26:18:9a:eb:89:f3:b7:64:14:
         e5:4e:1b:f4:10:ee:66:33:95:e8:9c:52:b7:5b:ab:2c:c1:bd:
         a4:1b:10:e8:3d:a1:2e:1f:00:d8:a9:19:9c:df:2d:a6:82:79:
         3e:b5:67:27:30:14:2c:00:0a:14:c4:2d:1b:29:0b:47:d9:43:
         1e:05:4e:31:b2:68:10:15:7e:4d:ef:46:e8:af:a6:11:ee:67:
         f4:e8:a8:b8:97:72:0f:58:77:b2:50:b3:d6:e2:9e:db:0b:7a:
         49:c5:97:9e:0b:8e:dc:d1:b4:65:8a:77:84:9b:74:1d:b4:bd:
         72:fc:63:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----