Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
File:                     _TrysG9KUBbg5avtGD9GXbFfQdU.mft (raw, json)
Hash identifier:          3cESJtNIWuipi9S44UJ+3LroWpgC5APu7nue7ezyhdo=
Subject key identifier:   AA:70:36:5A:B1:4B:7E:1B:35:86:B1:39:EA:2A:FD:31:88:37:34:73
Authority key identifier: FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5
Certificate issuer:       /CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
Certificate serial:       01962E61E4431F7F386D7BB3C8769B7BBC8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft
Manifest number:          0CDD
Signing time:             Sun 13 Apr 2025 09:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:29 +0000
Files and hashes:         1: _TrysG9KUBbg5avtGD9GXbFfQdU.crl (hash: ML0nOqdruW4JdmoLk/XYVkMwsApR02w6Gm8lagruLAA=)
                          2: miFtnjs24Q4-RR01JpCMeAQD8WI.roa (hash: hNI7H2ayjIbmcGVqvenpoZ5nB2aID+7Eteg64XuKiJk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e4:43:1f:7f:38:6d:7b:b3:c8:76:9b:7b:bc:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd3af2b06f4a5016e0e5abed183f465db15f41d5
        Validity
            Not Before: Apr 13 09:01:29 2025 GMT
            Not After : Apr 14 09:01:29 2025 GMT
        Subject: CN=aa70365ab14b7e1b3586b139ea2afd3188373473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:11:97:ba:53:2d:34:e5:04:b8:95:6e:7c:b6:
                    7c:9b:92:e5:65:f2:80:0f:4a:f8:a4:a5:33:a0:c6:
                    6b:b3:ad:9e:b9:cb:cd:9e:54:72:62:ff:3d:f4:d2:
                    9e:35:42:2d:19:3d:7f:e4:cf:af:5a:98:46:f9:21:
                    78:28:70:12:d9:aa:e5:f9:b6:0d:e1:2f:3e:c3:c5:
                    bd:1e:11:4d:3f:f3:71:d6:d0:06:50:6b:35:fc:38:
                    1c:0d:da:34:0c:92:69:b1:f4:69:a2:5d:0c:12:76:
                    78:4f:9b:ae:aa:70:fc:5d:71:ba:4c:71:c8:8c:5f:
                    11:20:9a:65:9e:e2:d5:aa:78:d2:08:bb:fc:1a:fb:
                    4e:c4:07:04:53:84:30:6b:ce:f0:fa:97:fd:fd:6a:
                    57:c3:88:78:33:33:11:9a:4f:84:3e:c6:38:70:cd:
                    4a:e8:18:e8:c3:7d:8c:dd:6c:31:63:f2:6e:75:5a:
                    83:ca:0e:c6:86:69:54:31:af:d2:7e:2c:d0:d9:42:
                    b6:c9:d6:f8:43:8e:d9:20:89:41:6d:88:b2:f3:56:
                    bd:05:e1:0d:1c:6a:69:d4:ec:30:eb:0b:7d:7a:ca:
                    39:56:98:40:18:b7:7f:09:c8:b3:ee:cf:c6:50:6b:
                    49:72:9d:c6:74:59:70:aa:38:84:d8:3a:d4:b6:0b:
                    e6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:70:36:5A:B1:4B:7E:1B:35:86:B1:39:EA:2A:FD:31:88:37:34:73
            X509v3 Authority Key Identifier:
                keyid:FD:3A:F2:B0:6F:4A:50:16:E0:E5:AB:ED:18:3F:46:5D:B1:5F:41:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TrysG9KUBbg5avtGD9GXbFfQdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/92262e-2276-4a88-a733-049bd7b1e119/1/_TrysG9KUBbg5avtGD9GXbFfQdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:27:37:d2:e9:e9:fb:5f:99:ce:c2:2b:62:bf:7c:a6:e4:32:
         66:5f:dd:03:20:36:3a:d5:31:90:eb:cf:11:39:f2:a8:37:4f:
         ff:58:e9:b1:07:a0:0d:6f:33:d1:b3:31:92:c5:cf:76:a1:3d:
         43:eb:3e:0f:8a:02:03:39:58:a0:88:a6:b7:e0:c6:1c:73:ec:
         01:11:bf:9e:84:a9:d3:ae:5e:b2:05:05:8e:33:ee:6d:f7:87:
         4a:a0:71:1b:89:58:b1:47:c5:d6:73:8c:45:f9:4d:1d:06:d6:
         be:fd:47:4d:37:af:84:68:cf:c4:42:b5:ed:55:92:55:0d:52:
         8d:78:90:65:c4:37:b2:5a:b1:00:f2:15:89:42:25:88:86:2e:
         c0:d0:bd:20:89:b9:b6:9e:93:7a:bf:db:8b:05:7e:17:4a:7c:
         79:3f:b6:01:8e:6d:79:35:66:8a:5d:23:bd:b6:27:15:e7:49:
         b5:f5:6b:ec:c4:12:01:38:9c:48:bd:e2:e2:f9:e7:8d:07:06:
         14:a6:6b:43:bf:90:04:09:18:9b:15:60:52:f5:e6:8c:e0:6e:
         13:aa:3e:ad:a9:60:1b:9e:71:18:32:a2:41:ad:37:9e:5c:01:
         21:37:7c:7b:b7:b3:99:6d:ed:49:2b:ae:9a:4e:01:b6:d4:53:
         d0:0a:07:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----