Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft
File:                     3ywVz3L824WWt8ZImxWmtyDBTrU.mft (raw, json)
Hash identifier:          UqBkyaO6b8Zeek5FNnQTPPDXCQ6Qe/okBfiBIXLPyQE=
Subject key identifier:   2F:DB:0E:71:BB:1C:60:97:66:20:58:D9:FE:13:C1:8F:36:8C:06:03
Authority key identifier: DF:2C:15:CF:72:FC:DB:85:96:B7:C6:48:9B:15:A6:B7:20:C1:4E:B5
Certificate issuer:       /CN=df2c15cf72fcdb8596b7c6489b15a6b720c14eb5
Certificate serial:       01962ECF99A1A0E92CE7884BD862CB9977A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft
Manifest number:          039B
Signing time:             Sun 13 Apr 2025 11:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:19 +0000
Files and hashes:         1: 1-6aebUsjGigWCkXwDxAfu7JbH3A.roa (hash: Hduo/JWxIEmIyeyIi7MQm4M+Xp8ECRaddxhqWZRPV6c=)
                          2: 3ywVz3L824WWt8ZImxWmtyDBTrU.crl (hash: TE/NUH4HedEJR7M4WyEBjJZKxDQBydyDdEB7y/4iA9Q=)
                          3: LW11wESbT2hocwdKYSbs6P71AKA.roa (hash: GuYU5G46KcnUJ43J5q6WCf+WZxw+qQFx0MBht9uI9W0=)
                          4: wGmLy9fCHGSdb1IR1hi3jtBm_nU.roa (hash: EtrSnLCCgz0LzD/1buNZsptNBEqMbZQGIw+M8iextIM=)
                          5: zuXVABH3iQHva6C3x_7o7gzuXEY.roa (hash: oBzqdMlIWS4N+t9dxQHDBXhwNKLOQHnlyrSOj0n4CXA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:99:a1:a0:e9:2c:e7:88:4b:d8:62:cb:99:77:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df2c15cf72fcdb8596b7c6489b15a6b720c14eb5
        Validity
            Not Before: Apr 13 11:01:19 2025 GMT
            Not After : Apr 14 11:01:19 2025 GMT
        Subject: CN=2fdb0e71bb1c6097662058d9fe13c18f368c0603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7f:39:8b:e3:79:07:e2:b3:00:51:d3:ee:03:
                    32:c4:5c:a4:46:46:ec:c9:18:2b:1d:9d:1f:f6:49:
                    ce:36:25:86:5e:b4:fc:9e:4c:eb:28:cf:0d:92:3c:
                    d8:7f:60:5f:14:3c:01:23:ed:52:10:a2:c3:4a:82:
                    1d:02:70:f0:3d:f9:2e:b7:d8:25:d3:cc:f8:52:20:
                    c8:91:99:71:2f:bf:21:8d:3c:5f:cd:db:94:8b:c6:
                    f9:86:80:2a:d0:e3:7f:be:c9:90:7f:35:12:d0:ee:
                    12:05:4e:36:a3:f7:d9:ec:4b:2e:2e:a4:21:77:2a:
                    b0:8a:2d:73:7e:0c:f6:38:52:26:40:b9:54:e5:c5:
                    af:7b:10:c4:bb:f7:e6:05:f3:5c:73:3d:6e:7a:87:
                    23:1e:f1:9b:c9:20:78:94:91:05:04:f5:6c:c6:af:
                    eb:d0:79:42:d5:f0:3d:06:4f:93:d4:c2:bb:19:1c:
                    33:58:e5:c8:aa:ca:ae:cb:f6:7f:db:79:8f:73:49:
                    fc:07:94:a4:63:de:0d:1e:84:52:4f:58:e4:50:ee:
                    2f:c9:d0:9c:e7:9d:5a:54:81:f0:02:3f:43:cd:e5:
                    78:33:20:f8:56:c0:b0:57:14:89:fe:d9:6d:22:3f:
                    ff:ef:60:81:b1:c5:c5:bf:3f:e5:5e:7d:a4:d8:70:
                    d2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DB:0E:71:BB:1C:60:97:66:20:58:D9:FE:13:C1:8F:36:8C:06:03
            X509v3 Authority Key Identifier:
                keyid:DF:2C:15:CF:72:FC:DB:85:96:B7:C6:48:9B:15:A6:B7:20:C1:4E:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ea:ef:4f:e7:16:74:44:3e:2b:44:f9:39:a9:91:f9:5c:75:
         c7:52:65:55:06:04:8f:0f:63:27:a8:12:c9:a7:76:40:ab:0f:
         ec:8f:2e:d5:2a:95:db:7d:6d:36:52:ad:4e:10:90:e4:10:28:
         d0:08:69:d5:d9:cc:ae:0e:3e:0f:ac:52:ed:19:ec:1c:d5:67:
         61:f7:9e:4f:ce:cb:86:98:2c:01:ab:f3:0d:57:44:c5:45:a3:
         c4:60:e7:a1:82:ca:2b:37:6f:5f:ed:c9:79:ba:f1:92:cf:5e:
         86:13:be:c6:33:cd:dd:24:02:41:97:44:b6:85:67:c8:dd:ff:
         7c:e0:f0:4b:df:19:8c:ca:b6:ea:6d:b5:cb:6f:96:72:72:08:
         e4:04:97:1b:c6:51:b1:28:ca:1c:47:f3:ba:a1:31:ef:44:ce:
         e5:52:f3:41:e5:74:de:a1:83:d1:ef:45:ec:37:38:86:60:74:
         65:6b:1a:c9:79:28:4e:b3:6a:fc:82:ba:de:c8:2c:88:66:f1:
         b0:2d:f4:69:a1:7c:70:f7:9d:ca:c0:6d:8d:28:bc:e6:bb:db:
         a2:83:71:9b:c2:c3:8b:d5:22:39:a8:11:82:6f:c1:ad:85:c8:
         c5:a0:81:69:d8:00:b0:24:26:ae:62:d3:18:81:d9:84:26:b1:
         d5:fe:c8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----