Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft
File:                     fDUy5S6q_vlIxCyLHVEUXKydTJY.mft (raw, json)
Hash identifier:          6mJMm0r5Y6x1ffcfntHN1f64a+eweU71ddHnZ3vx8tU=
Subject key identifier:   3C:37:F7:3C:DE:36:30:C1:C8:7A:AD:AB:60:77:F3:B8:00:1D:01:76
Authority key identifier: 7C:35:32:E5:2E:AA:FE:F9:48:C4:2C:8B:1D:51:14:5C:AC:9D:4C:96
Certificate issuer:       /CN=7c3532e52eaafef948c42c8b1d51145cac9d4c96
Certificate serial:       01962ECFA31A7C75141C20F338CDE13B1E64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft
Manifest number:          0AD9
Signing time:             Sun 13 Apr 2025 11:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:21 +0000
Files and hashes:         1: XCHPvb-EkH1zGNPsBprEZBKSmdE.roa (hash: Sji1HnCVrncrNibsWO7N88ENDvFcUSSKPSq/SoaOpWI=)
                          2: fDUy5S6q_vlIxCyLHVEUXKydTJY.crl (hash: PftBfRHpMn+hdGOQatQHl5+blYQMSn2Rkb1cU7p6Lhs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a3:1a:7c:75:14:1c:20:f3:38:cd:e1:3b:1e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3532e52eaafef948c42c8b1d51145cac9d4c96
        Validity
            Not Before: Apr 13 11:01:21 2025 GMT
            Not After : Apr 14 11:01:21 2025 GMT
        Subject: CN=3c37f73cde3630c1c87aadab6077f3b8001d0176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9a:2e:bc:56:30:af:69:ef:55:9e:b0:ab:86:
                    f8:af:a3:93:0c:77:d8:b4:75:2c:31:a6:b7:89:16:
                    37:d8:a5:b5:c8:19:ea:21:65:e4:9b:96:40:95:b5:
                    7b:8f:6a:a5:30:65:12:76:02:ba:3e:13:3b:10:3a:
                    7c:9c:e6:61:45:8c:5f:f0:e6:0e:a8:53:cd:a1:67:
                    20:aa:24:ba:d9:a0:4b:e5:53:58:8a:dd:8a:36:ce:
                    71:e3:0d:cf:71:4b:1b:cc:32:04:7a:64:50:e2:c6:
                    f4:cb:e7:53:07:69:82:ec:fc:2c:26:6f:f4:ed:a4:
                    31:69:c5:15:12:2d:6b:0e:a5:b4:5b:ba:6a:36:35:
                    be:70:dc:90:e7:7f:d6:83:2b:97:e7:d8:ad:5f:72:
                    0d:bf:f8:d5:c7:40:bc:75:60:5c:ae:69:33:b5:85:
                    dd:e6:f4:82:04:3f:1a:87:6d:a1:f0:73:75:aa:e7:
                    64:a6:62:2a:99:87:1b:cd:68:bb:81:aa:1e:ff:23:
                    6e:ba:4f:83:a4:65:74:ae:64:6b:44:8c:7f:a4:6c:
                    14:ed:c5:d3:e5:8b:4f:d4:8b:0c:3d:fc:e4:97:c1:
                    23:8c:eb:8b:2a:78:5b:19:ec:08:95:63:a9:0d:62:
                    1a:97:57:5c:60:71:71:01:62:3b:4d:7a:c7:06:8b:
                    ed:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:37:F7:3C:DE:36:30:C1:C8:7A:AD:AB:60:77:F3:B8:00:1D:01:76
            X509v3 Authority Key Identifier:
                keyid:7C:35:32:E5:2E:AA:FE:F9:48:C4:2C:8B:1D:51:14:5C:AC:9D:4C:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDUy5S6q_vlIxCyLHVEUXKydTJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a43850-02a2-4859-9bde-564ebdcf3f96/1/fDUy5S6q_vlIxCyLHVEUXKydTJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:2b:d8:c6:1a:27:2b:eb:c4:5f:73:85:fa:a2:93:6e:d6:c3:
         8f:b2:4b:95:30:3c:e7:d6:a8:66:9b:0f:90:6a:6d:a2:aa:51:
         90:99:33:2b:24:0e:f7:3e:91:83:19:e8:05:c6:cf:2c:35:49:
         56:ee:1b:75:7b:e5:4e:a8:ef:3b:fd:a0:b6:32:87:83:f6:fa:
         63:60:b9:a0:b4:47:ea:1b:28:d5:60:77:e9:75:7d:3d:b7:c1:
         a2:dd:c0:7b:e3:37:1e:e7:cf:a0:1c:1a:e3:01:d1:9b:5d:b3:
         7b:23:98:ff:81:ff:76:83:0d:5d:ff:2a:aa:b1:ba:79:3c:37:
         24:53:74:f5:8c:11:21:b0:7a:8f:ba:28:1f:14:2d:36:b3:85:
         9f:cc:db:16:94:7d:eb:ac:99:4b:4d:98:9e:19:34:e6:53:81:
         da:16:a3:ef:29:e3:b4:15:39:72:8b:d2:bc:dd:d7:2e:a7:0c:
         72:c0:e6:e4:6e:0e:b6:b1:85:44:9d:c9:4d:be:f4:61:49:6a:
         07:58:0d:01:48:7b:94:9d:de:4f:17:d6:fb:1f:88:76:fb:3d:
         cc:e3:7e:da:32:cf:97:e5:e8:59:56:a0:5c:81:3a:15:88:ec:
         0c:68:a0:ff:1f:86:c8:cb:48:1a:8b:fc:de:89:2e:4e:2d:bf:
         6c:f6:15:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----