Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
File:                     3fz_0QDcAH8alqRDDqhyOJxX1s8.mft (raw, json)
Hash identifier:          3o9U8dM+Njab40mV8pgrqCUub/BrlbVKnv47EiO3sgg=
Subject key identifier:   89:45:FE:A9:26:BD:27:25:C1:38:BC:09:AE:95:F6:7A:18:FD:8B:93
Authority key identifier: DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF
Certificate issuer:       /CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
Certificate serial:       01962ECF75AE5BD083CFA7D3FAB795F3DFFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft
Manifest number:          01DC
Signing time:             Sun 13 Apr 2025 11:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:10 +0000
Files and hashes:         1: 3fz_0QDcAH8alqRDDqhyOJxX1s8.crl (hash: 3w1Ct2OuWk2/E3rU/jXj96eSpVLWlboxO9aQplEjyP8=)
                          2: SHvoKKIBU3wgrybj6zWAE812zjc.roa (hash: yK7W9vbdAmqtnEpvGmawrHGyq/oUYACQgVTYc+60SM0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:75:ae:5b:d0:83:cf:a7:d3:fa:b7:95:f3:df:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddfcffd100dc007f1a96a4430ea872389c57d6cf
        Validity
            Not Before: Apr 13 11:01:10 2025 GMT
            Not After : Apr 14 11:01:10 2025 GMT
        Subject: CN=8945fea926bd2725c138bc09ae95f67a18fd8b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:52:4a:3e:ab:44:50:25:32:ac:36:7c:79:4b:
                    e8:f6:17:e6:b6:4d:f2:98:06:12:d9:8d:c2:d2:00:
                    cb:cf:d1:78:16:fe:48:6c:3d:df:6f:63:3d:7c:8e:
                    4e:3a:8e:df:c1:28:e1:a7:2f:38:d9:e3:ca:91:be:
                    f2:8c:21:44:4c:55:53:7b:8c:37:2a:27:bb:bd:a5:
                    fe:4a:bc:8f:6a:31:8a:2f:43:9c:12:43:77:ef:db:
                    26:a8:ff:a6:d4:34:f1:8c:b9:3f:51:49:9a:ec:f6:
                    55:33:da:22:0c:93:65:2b:b7:ce:34:38:87:33:5f:
                    fb:c6:f4:7e:6a:6f:43:32:b1:ef:48:cd:44:01:e0:
                    2e:6d:9e:51:f4:3a:fb:6c:bb:3a:62:9b:90:40:48:
                    0a:bd:70:ac:44:a7:c0:ee:f5:f6:0d:3a:36:8f:10:
                    24:c3:01:3b:8e:99:b1:8b:26:e8:c4:34:c6:c6:0e:
                    42:fa:67:7e:b0:2c:4e:cb:ec:9b:43:33:8a:f4:e2:
                    7f:fd:c5:9e:5c:6a:77:ea:49:ba:14:e1:13:7b:14:
                    24:59:d0:68:69:65:81:5e:f8:d6:bc:c4:74:b4:7a:
                    d4:66:71:5c:6a:d5:6b:91:d4:f0:11:ed:1c:0f:50:
                    d5:17:0c:d3:d7:e0:6b:b6:33:3c:b6:8d:a0:5c:f1:
                    90:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:45:FE:A9:26:BD:27:25:C1:38:BC:09:AE:95:F6:7A:18:FD:8B:93
            X509v3 Authority Key Identifier:
                keyid:DD:FC:FF:D1:00:DC:00:7F:1A:96:A4:43:0E:A8:72:38:9C:57:D6:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fz_0QDcAH8alqRDDqhyOJxX1s8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2fc375-da14-4f7f-8fae-15a6e7df45c9/1/3fz_0QDcAH8alqRDDqhyOJxX1s8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:1d:cc:c2:8f:a7:9f:ee:a9:d6:1b:7f:1d:16:62:7d:c9:57:
         f1:6e:2c:60:46:c7:bc:51:b7:9c:cb:2a:d2:bc:68:20:b6:8e:
         eb:f6:4d:93:d0:8d:e7:86:15:94:37:22:f6:be:c3:bc:42:74:
         c0:f7:54:83:63:8a:df:59:15:cf:62:85:ec:6c:c8:10:08:47:
         7d:b6:22:44:9a:cf:4e:bb:89:0a:9f:c5:7f:ad:37:f2:dc:e0:
         1a:b7:13:bf:56:f5:63:f0:83:10:72:f5:ee:b6:44:49:1f:36:
         2f:f0:4a:da:4f:f7:d9:27:c5:e8:87:ff:88:07:4f:61:bf:da:
         4c:ce:2e:c3:4c:26:e1:db:53:90:c5:7f:c3:d3:dd:be:e6:bf:
         ed:da:05:60:8b:14:6c:4e:00:15:8d:fb:4e:cf:42:86:48:3f:
         0f:b3:44:1f:9f:84:fd:25:72:12:f7:79:0c:2f:02:ac:b2:2b:
         f5:86:97:85:75:d0:08:44:f8:e7:09:d9:52:15:0d:88:f0:9a:
         db:8d:6e:5a:23:db:a6:d4:d3:41:63:06:02:89:15:49:11:31:
         61:4a:a0:52:72:46:5f:b9:bd:85:3b:f2:2c:ca:24:66:3f:af:
         73:ff:04:3a:96:77:d6:57:d8:b4:93:20:18:f0:8f:d4:12:ce:
         e4:a0:e1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----