Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
File:                     3t-aZxvPF4nBtaw2MMdBvlYNraA.mft (raw, json)
Hash identifier:          HiD7L2jvT3tNapd9ThnZVL25rErX2P7okh7fdXKsNog=
Subject key identifier:   10:51:FE:04:0B:E1:78:CC:B3:33:7D:43:4C:A9:52:04:49:DF:D5:E5
Authority key identifier: DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
Certificate issuer:       /CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Certificate serial:       01962FABA2059ED3A293F90342005660CE76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
Manifest number:          1061
Signing time:             Sun 13 Apr 2025 15:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:39 +0000
Files and hashes:         1: 3t-aZxvPF4nBtaw2MMdBvlYNraA.crl (hash: htun/6T+zHDL5ulPBgUQO7U5z1Q8rWN9GzYsC2QLap8=)
                          2: RNkRhX3yK-TkHlh9YWWsykby_Dc.roa (hash: vp+4Wych+XwTPbr9Bjf9hawO/Jnhv86eVFw3KntPsww=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:a2:05:9e:d3:a2:93:f9:03:42:00:56:60:ce:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
        Validity
            Not Before: Apr 13 15:01:39 2025 GMT
            Not After : Apr 14 15:01:39 2025 GMT
        Subject: CN=1051fe040be178ccb3337d434ca9520449dfd5e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fe:a8:98:3a:3e:36:3e:f4:c5:5c:33:c0:a0:
                    4c:bf:ea:52:a0:61:98:86:6e:e5:89:dc:b8:85:ee:
                    bd:e4:f6:25:76:e3:df:63:12:f8:de:d7:54:57:f7:
                    b9:10:92:7f:4e:d9:eb:50:3d:c0:9a:5f:88:c0:0e:
                    d0:18:ce:1a:e8:4d:ee:a3:6a:7d:93:f1:32:20:52:
                    f4:6b:cc:3c:7c:5b:00:5a:7f:6d:7a:50:3e:41:2f:
                    51:e9:a6:b1:96:f7:b1:2d:e3:8d:a2:0a:0e:23:dd:
                    72:17:85:36:29:b0:d2:30:26:df:98:ed:d0:47:74:
                    cb:11:47:0e:17:06:91:35:8d:1c:35:60:f5:7d:d0:
                    0a:b7:90:50:8a:c4:f1:bc:4c:30:a0:0b:3e:85:5a:
                    9a:77:2d:08:99:80:6c:7b:b9:f7:f6:ad:62:79:54:
                    20:29:2c:51:d8:01:52:62:92:6b:51:67:52:45:47:
                    43:e5:23:9b:eb:55:5a:36:73:1f:80:69:e7:15:d6:
                    7b:53:a6:a4:72:a8:95:ae:3d:8f:d6:99:0e:e4:31:
                    a8:35:ba:0e:15:5f:cc:4c:c1:5f:09:c6:ef:2f:87:
                    0d:c1:04:19:de:7a:0a:28:0f:85:78:36:bb:2f:8a:
                    63:b0:0e:57:ab:b9:6e:14:8e:93:28:26:32:b4:8b:
                    be:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:51:FE:04:0B:E1:78:CC:B3:33:7D:43:4C:A9:52:04:49:DF:D5:E5
            X509v3 Authority Key Identifier:
                keyid:DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:64:52:d8:f7:01:9d:06:85:ea:42:9e:47:81:c0:7f:dc:eb:
         9f:ab:f4:0d:09:81:b4:0d:4f:35:1b:a3:1f:33:c2:0c:a7:ad:
         30:63:66:c9:d5:6f:de:48:ce:cb:92:d8:9d:f8:32:5e:47:6c:
         04:9f:c7:38:3f:36:56:1b:52:80:61:f0:4a:a7:bc:cf:31:b0:
         67:76:ac:08:fa:59:3a:c9:c4:47:3a:4f:1e:2e:93:48:2a:20:
         17:b5:9c:2f:d4:2a:cd:6b:8b:3c:58:6b:8e:1d:55:c9:2f:ed:
         05:f3:cb:fd:c6:69:f9:4d:b4:d3:02:03:d6:31:53:0a:5a:8a:
         eb:24:86:e5:85:48:3d:bb:45:7b:0e:14:3d:c3:b4:21:7e:07:
         0a:49:9e:d2:de:27:55:03:af:39:7b:04:e7:c2:00:40:de:16:
         e4:b1:34:f7:6b:62:18:f6:81:5d:a6:c2:ff:dd:04:03:5d:07:
         13:d9:cc:59:51:ac:71:36:d4:74:2a:71:92:41:47:98:55:f5:
         87:0e:34:cd:8c:56:41:b9:a9:92:67:e2:e7:5a:01:2d:c2:56:
         f5:f8:4a:0c:a0:c1:39:fe:6c:53:b0:47:7f:21:f8:7b:32:3a:
         85:0f:8e:37:43:45:28:1a:21:50:38:c8:99:8b:ad:f0:47:3d:
         86:85:fa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----