Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft
File:                     O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft (raw, json)
Hash identifier:          54aUsMZqs606UK4A0aBgMbMT/eeKJCpUB5iUXjfekDk=
Subject key identifier:   3D:D1:DF:A2:44:5D:D5:2D:8F:13:7C:AA:ED:31:FD:01:5A:33:AF:20
Authority key identifier: 3B:77:8C:7E:0E:59:83:25:27:34:7C:2E:21:1F:C4:8C:54:71:08:CF
Certificate issuer:       /CN=3b778c7e0e59832527347c2e211fc48c547108cf
Certificate serial:       01962F3DAE74AD15A7E4208DAA8F2EBB9468
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft
Manifest number:          04CC
Signing time:             Sun 13 Apr 2025 13:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:33 +0000
Files and hashes:         1: O3eMfg5ZgyUnNHwuIR_EjFRxCM8.crl (hash: +W9BkpyVSWPrUVwf0U/0v/C7tWuZ6kKbSYpZL7gyOVQ=)
                          2: o2x3XOFjpyXp0a8ZF3YUMEZhNmk.roa (hash: EInA3F+cdzhiSEh4Cbcxk6l2zqAf00tJgnQUKeSBqLU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:ae:74:ad:15:a7:e4:20:8d:aa:8f:2e:bb:94:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b778c7e0e59832527347c2e211fc48c547108cf
        Validity
            Not Before: Apr 13 13:01:33 2025 GMT
            Not After : Apr 14 13:01:33 2025 GMT
        Subject: CN=3dd1dfa2445dd52d8f137caaed31fd015a33af20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:da:57:f0:f7:f2:c0:80:22:51:e9:1b:ac:9f:
                    f7:24:2e:8f:70:7c:95:71:e9:75:c2:76:f6:54:69:
                    d5:63:37:32:c6:17:9f:75:f5:eb:23:a3:b0:c5:d5:
                    3a:96:f7:bd:d1:89:02:5e:d7:a8:ba:dd:c4:88:a2:
                    b6:56:5c:b6:8b:2c:c4:2f:ef:40:06:45:70:97:00:
                    83:7b:08:03:5f:48:1b:de:c5:d4:75:73:67:70:e1:
                    88:4a:f1:a4:0b:b3:70:76:1f:29:76:9b:db:28:1d:
                    77:0b:75:09:51:fb:5e:5a:6d:28:3d:0c:04:e5:12:
                    4d:63:7b:04:a8:68:02:02:84:f2:13:1f:fc:e1:3d:
                    c2:af:1b:17:54:89:bf:1c:fc:53:15:23:ff:c5:36:
                    74:b5:fb:1a:3c:b2:ad:bc:67:e8:94:1e:6f:30:1d:
                    a2:f2:ec:63:83:33:b2:e0:d3:c5:10:ae:3a:72:46:
                    d6:4e:1b:d8:e0:c3:63:8a:03:3e:b2:3b:b0:b8:fe:
                    d1:8e:c1:40:87:99:74:a0:47:4c:b4:e5:fe:1d:ca:
                    99:89:2b:2b:6e:99:54:1d:13:ad:d6:1a:c1:c9:27:
                    97:98:49:23:ab:d6:c1:ad:8f:92:42:05:40:4c:de:
                    81:42:c4:48:75:fd:2d:b8:4b:ac:d3:0c:08:63:e6:
                    78:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D1:DF:A2:44:5D:D5:2D:8F:13:7C:AA:ED:31:FD:01:5A:33:AF:20
            X509v3 Authority Key Identifier:
                keyid:3B:77:8C:7E:0E:59:83:25:27:34:7C:2E:21:1F:C4:8C:54:71:08:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:2a:bf:b4:80:b1:e3:31:3c:24:bc:f1:37:d1:3c:4b:b7:e5:
         72:14:6e:1e:b3:7e:14:2a:3d:67:5f:da:e4:be:4f:13:0a:a6:
         88:2c:5a:30:54:55:da:3a:66:26:ff:87:7b:2d:92:85:71:4d:
         bc:32:b3:24:61:c3:f2:2f:6c:a7:a5:ad:b9:72:e0:0e:63:2d:
         68:cb:ab:12:4e:a1:81:a6:0b:c1:b1:a2:83:7c:ef:bd:32:17:
         fc:ba:9a:ad:b2:2d:a1:b4:4d:c2:a3:a0:99:1b:af:64:bd:ff:
         c0:e0:e6:87:64:e1:ca:8e:2a:b8:69:1c:44:9e:bb:02:60:60:
         5e:a9:2c:8b:a3:c3:b9:c1:b4:5a:fa:ef:b3:23:b4:ce:57:97:
         1d:e9:45:d7:02:4e:2c:59:f2:4f:5c:6b:a7:c2:e7:08:80:af:
         fe:6d:6b:9c:57:2d:50:b4:b2:a3:01:e0:b6:ab:fb:10:fb:12:
         86:2e:d9:1a:66:54:6a:ba:73:00:38:b2:b8:58:c0:c9:f3:81:
         3d:5d:d8:b8:ba:f4:57:98:40:f9:bd:a7:4c:53:45:d1:e9:eb:
         4e:62:7f:92:de:9f:c0:c7:19:08:5e:1e:9f:54:24:7a:50:e9:
         b6:90:7a:1a:91:b8:50:bf:1d:d6:b1:9d:80:15:15:07:09:98:
         bf:b0:7b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----