Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
File:                     sxxM5mPh7CRedHzYRvGmnduDSzs.mft (raw, json)
Hash identifier:          xwHAkH2f25o9XlziFe8p4JkxMumxeU5iwonQqJVSaOo=
Subject key identifier:   C3:D5:5F:DF:FD:D8:78:1E:7C:09:0A:46:94:89:04:E0:78:1E:51:5A
Authority key identifier: B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
Certificate issuer:       /CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Certificate serial:       01962E61C0210CC910A7F0056C473B3FE392
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
Manifest number:          02DC
Signing time:             Sun 13 Apr 2025 09:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:20 +0000
Files and hashes:         1: S8F_BqZIysXEe93wY7E7gYPrrEE.roa (hash: yxA+Gb1gegChlT9RImwWVjBq+UzqZu56Rk2vXQ11x70=)
                          2: mHdbhQxgyf7CV9jCGJvliFVilXc.roa (hash: 4CdqTf57TkDxaRHOcnXl2aFyjkgmNRswPmW9ZMUYxw8=)
                          3: sxxM5mPh7CRedHzYRvGmnduDSzs.crl (hash: tfrZoNNA8SAktCR6pJj1qVmasOI11utvteQYAeWFd80=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c0:21:0c:c9:10:a7:f0:05:6c:47:3b:3f:e3:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
        Validity
            Not Before: Apr 13 09:01:20 2025 GMT
            Not After : Apr 14 09:01:20 2025 GMT
        Subject: CN=c3d55fdffdd8781e7c090a46948904e0781e515a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7b:9f:93:db:ca:9a:6a:f7:59:96:f1:5a:dd:
                    36:a3:69:2b:76:50:70:ee:99:70:6d:c0:01:1e:ce:
                    e8:e6:e8:c7:c7:95:fa:cb:6c:aa:32:ae:7a:1a:28:
                    9f:2e:82:41:50:0c:eb:78:e8:c1:0c:71:eb:95:4e:
                    fb:76:b8:4b:e2:51:01:a3:52:cc:c8:50:7a:72:ee:
                    99:a8:85:4a:a0:17:15:4c:32:34:e6:7c:31:e9:74:
                    01:01:e5:92:82:a1:53:1e:05:b4:f9:b4:52:25:d2:
                    c1:d5:df:a7:d7:19:da:ef:cb:49:74:13:94:a6:ab:
                    db:60:47:e0:42:7c:c4:7f:89:87:e0:64:d6:05:c5:
                    cd:eb:79:1d:19:d8:1c:e6:a7:7b:b5:d2:cc:fc:a9:
                    76:bf:ea:e5:ac:05:80:6d:b7:57:29:82:e4:b1:d4:
                    74:bb:1d:06:12:6f:0d:f1:c4:96:b9:3a:14:e7:b5:
                    09:26:d0:ca:09:39:10:9e:25:ef:ac:d7:9c:84:a0:
                    52:eb:df:c2:15:d5:86:4e:0e:1b:b3:12:29:6c:c2:
                    1b:8a:86:55:10:91:dc:dc:75:af:1c:7d:dc:ed:6f:
                    c4:ea:25:b6:53:0f:60:47:41:53:14:68:71:5e:0e:
                    10:78:a4:71:1e:62:33:71:50:24:95:b8:50:50:54:
                    0a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D5:5F:DF:FD:D8:78:1E:7C:09:0A:46:94:89:04:E0:78:1E:51:5A
            X509v3 Authority Key Identifier:
                keyid:B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:32:c7:f2:9a:9c:e4:4d:2c:d9:8b:61:2c:69:68:69:e2:a9:
         51:70:b6:87:bd:db:b8:d2:82:85:2c:6a:71:6b:58:72:a6:a8:
         d8:4b:4b:45:e0:af:87:2c:a4:b5:ff:7a:b5:a3:ab:e4:0c:87:
         b3:9d:60:bb:0a:51:19:9b:e8:a8:53:ca:bf:31:87:98:a1:ab:
         5c:88:4e:67:f1:38:8d:6d:b8:2f:b1:4e:35:b1:7b:a2:ca:41:
         cb:97:c1:0e:9d:f8:a1:44:04:3b:58:c3:15:27:b6:6f:6c:ac:
         60:72:37:6e:c9:80:74:33:bd:3b:5d:cf:50:e2:96:e9:82:8a:
         2c:a5:03:e3:41:01:00:40:13:b1:2d:dd:7c:34:3e:9c:54:2a:
         00:dc:50:4b:5a:2e:37:e2:37:14:62:69:63:12:84:0b:e2:f7:
         2f:2a:ae:b5:2b:87:84:d5:0d:b5:68:65:64:c0:51:e2:cd:1a:
         e9:8a:6e:1d:59:14:c2:c9:e6:0b:5f:6e:1c:a7:1a:58:c8:89:
         0d:08:ea:38:2f:ee:bc:3d:1d:d3:ca:52:f2:88:e7:73:b3:13:
         f4:f6:1e:77:dc:53:3e:01:26:04:e1:2f:55:56:99:b9:69:39:
         62:9e:15:13:7e:5a:f7:c5:4a:98:47:c4:6e:98:07:ff:25:25:
         f9:de:c4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----