Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft
File:                     3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft (raw, json)
Hash identifier:          txTWHZUuN6lijnBOpuvQTW/9kJ3jgymWKP743Yt35qQ=
Subject key identifier:   65:EA:0B:4C:A9:85:10:09:BA:05:41:F9:9F:44:00:1C:BC:0B:BC:B5
Authority key identifier: DD:5B:22:4B:65:93:E5:58:03:8A:9E:40:E6:60:C7:71:42:75:5C:1B
Certificate issuer:       /CN=dd5b224b6593e558038a9e40e660c77142755c1b
Certificate serial:       01962E2AD829354DE90392C79A05B5FD9964
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3VsiS2WT5VgDip5A5mDHcUJ1XBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft
Manifest number:          08FB
Signing time:             Sun 13 Apr 2025 08:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:21 +0000
Files and hashes:         1: 3VsiS2WT5VgDip5A5mDHcUJ1XBs.crl (hash: RPO1lOAztn4MbiRQ+266gzva8tASV64sOfZtSY4LyuA=)
                          2: jU0yi7PHweJFHYaEaX0jg-4Q_RU.roa (hash: 8PA9xbvSb0ZvYzYhTOCmIzBIyrP4FgGrFueLXskDR54=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d8:29:35:4d:e9:03:92:c7:9a:05:b5:fd:99:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd5b224b6593e558038a9e40e660c77142755c1b
        Validity
            Not Before: Apr 13 08:01:21 2025 GMT
            Not After : Apr 14 08:01:21 2025 GMT
        Subject: CN=65ea0b4ca9851009ba0541f99f44001cbc0bbcb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c6:be:c9:10:15:89:ea:d0:c2:6b:61:ce:8c:
                    a5:1b:c1:35:1e:18:e4:38:ec:24:91:15:5c:1b:fe:
                    52:1e:58:b3:a6:f6:6e:ba:43:f8:e4:0d:3b:4a:58:
                    ae:24:9a:37:92:fb:44:ae:a4:b6:56:c0:55:34:ec:
                    b8:8e:d7:9c:56:c7:85:cf:ed:f0:89:63:37:7b:7f:
                    85:9b:14:57:17:ec:9c:b8:ea:4e:7c:ea:c8:40:49:
                    9d:4e:a6:ab:4b:91:b5:36:96:3f:bc:d5:db:60:cc:
                    84:76:ac:38:40:61:ff:f7:76:cc:2b:b7:d6:9f:18:
                    42:78:05:24:b3:d2:7c:07:ef:e2:04:bc:86:88:53:
                    d5:b0:ee:db:bc:7e:4d:7d:98:6d:3c:f9:49:1c:9c:
                    6d:66:a8:44:36:a4:02:44:5d:48:b1:83:17:b6:4f:
                    6f:3a:2a:ad:0d:8a:78:51:df:a6:cd:4c:e7:ab:be:
                    69:d8:5d:f1:ec:8a:c9:ef:f3:68:18:12:7f:84:fd:
                    fa:76:f2:56:b5:d7:a0:d5:5b:bc:fd:ab:7a:24:02:
                    46:58:c3:e7:56:6a:e6:a6:db:4c:8d:82:0e:a7:95:
                    e4:3e:dc:00:39:23:1e:cf:c7:01:4d:ff:6b:e6:64:
                    62:39:a0:fd:0e:3f:6e:cb:15:90:4d:49:9f:38:7d:
                    96:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EA:0B:4C:A9:85:10:09:BA:05:41:F9:9F:44:00:1C:BC:0B:BC:B5
            X509v3 Authority Key Identifier:
                keyid:DD:5B:22:4B:65:93:E5:58:03:8A:9E:40:E6:60:C7:71:42:75:5C:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3VsiS2WT5VgDip5A5mDHcUJ1XBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/652dfe-acae-4243-bf33-30bbfc0855e4/1/3VsiS2WT5VgDip5A5mDHcUJ1XBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:24:24:60:70:04:d6:b7:d9:f9:f0:32:40:91:55:b0:d7:d2:
         ff:13:b0:75:2f:3e:6d:53:35:f0:37:2f:be:2a:67:8f:5e:1c:
         29:21:4d:bf:a3:fe:e7:41:b3:6e:05:97:28:b6:dd:46:4d:20:
         9b:6a:c1:b3:85:4a:4b:a7:95:d9:e1:5e:2c:12:55:48:93:7f:
         fe:0e:b0:f6:5c:13:ba:bf:a2:b4:d4:36:cc:d0:8d:e7:d6:4c:
         72:8d:c3:41:d0:fa:55:66:13:ed:06:1d:52:83:76:4b:a5:24:
         c1:d7:c8:21:62:6f:c6:ba:f8:32:23:9a:db:ef:5b:9f:fe:d9:
         84:b8:1b:9f:12:0b:59:d9:84:4c:4f:03:52:12:30:11:a8:c4:
         ca:23:bb:a2:64:79:0d:77:9f:43:87:3f:e5:4c:88:67:a1:1a:
         37:5d:75:fc:ab:0b:97:80:c7:c3:b5:8f:2a:95:48:75:c5:6d:
         d0:ad:21:36:2d:fd:f3:10:81:a3:fc:d0:7f:7c:8f:9d:db:58:
         7e:7a:14:a3:86:cb:ce:02:7d:ab:a2:d0:09:2c:b6:de:1e:f8:
         dc:a6:1b:32:a8:3d:3e:f3:28:ee:dd:29:78:0f:af:74:65:2a:
         50:6c:66:99:26:51:0b:9b:a0:d2:5f:35:27:74:e1:dd:cf:27:
         84:63:81:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----