Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
File:                     3A4bkNUSzDQC92FBQGKXleTUrEw.mft (raw, json)
Hash identifier:          zRRb3zIcnE9n8wpiekcS1M79T4sW8GeBNC1i+hTq/Jg=
Subject key identifier:   A6:38:B7:56:AA:40:CC:2C:EA:07:E8:8D:A7:F8:CA:16:EA:90:88:52
Authority key identifier: DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
Certificate issuer:       /CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Certificate serial:       01962F3D84AD5548D4093CBD2E2719CB9E4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
Manifest number:          0FFC
Signing time:             Sun 13 Apr 2025 13:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:22 +0000
Files and hashes:         1: 3A4bkNUSzDQC92FBQGKXleTUrEw.crl (hash: eafrwozca/CqZetzzAd6uLC/gLvo8Ma4Y++gnRaorLE=)
                          2: ruyaJPOfuuheWzXgHxMIwRIiRmI.roa (hash: dOziRNC4DuCftQxbewVCKgY2HoDJCSSxS8NFyfVWRc8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:84:ad:55:48:d4:09:3c:bd:2e:27:19:cb:9e:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
        Validity
            Not Before: Apr 13 13:01:22 2025 GMT
            Not After : Apr 14 13:01:22 2025 GMT
        Subject: CN=a638b756aa40cc2cea07e88da7f8ca16ea908852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:21:2a:da:d7:85:1d:df:3c:3d:6d:f0:b7:04:
                    9c:38:23:21:a3:f5:e5:b2:0c:bf:04:d7:ad:10:0e:
                    f0:13:07:4b:bb:65:fc:39:a7:a0:5c:ab:dd:76:fb:
                    f2:7f:d2:28:7a:04:a0:75:c7:76:6a:ab:81:90:a7:
                    3f:a3:ad:da:4e:a6:86:fc:df:d5:e7:18:2d:cb:e7:
                    23:4e:8e:6d:40:02:4d:f4:da:19:e6:94:86:a8:d0:
                    1b:16:46:87:89:63:47:b1:81:6e:aa:18:6c:09:e4:
                    9a:1f:ec:84:23:2a:24:21:e9:8b:4e:bc:f3:29:83:
                    96:20:78:7a:0b:1c:cb:58:68:5d:01:e3:9d:e8:30:
                    e9:79:b4:33:09:b1:d4:fa:00:c4:87:26:1d:7a:67:
                    6e:32:e8:97:c5:5b:c2:ed:1e:c0:46:15:be:2e:bd:
                    ab:ef:e6:74:61:9d:2d:95:85:03:12:6b:ba:92:a4:
                    2d:ef:90:57:65:1e:fe:17:71:2d:c7:ba:f8:5b:16:
                    02:79:8a:11:d2:07:7d:a9:4f:8e:3d:c3:e1:bf:52:
                    7b:b3:b3:90:8d:e2:3c:d4:c5:98:f9:2d:c5:ed:ec:
                    46:2a:29:6b:3a:52:02:d5:8f:0a:55:bc:8e:03:c7:
                    63:7e:e2:d1:f3:67:b4:b3:23:5e:e5:b8:ac:10:42:
                    be:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:38:B7:56:AA:40:CC:2C:EA:07:E8:8D:A7:F8:CA:16:EA:90:88:52
            X509v3 Authority Key Identifier:
                keyid:DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:48:10:8d:84:8b:ae:7a:5f:ac:a0:7c:f4:8a:b5:d2:9b:c0:
         1a:ee:4c:8b:3e:b4:b1:04:06:ab:72:cf:9b:e0:c4:6c:15:57:
         7c:ed:3f:ae:48:d4:28:42:ad:79:63:1b:0b:ac:70:01:46:93:
         64:f2:cb:64:bc:40:76:17:1b:85:31:92:42:1a:13:27:f7:83:
         89:0e:3f:8b:b3:c1:fe:62:2d:17:7b:64:39:0d:8c:af:49:81:
         9d:02:7d:d3:a2:86:e4:3b:7d:3c:40:6f:92:f4:71:35:27:e7:
         24:aa:bf:3f:55:2c:5d:4b:39:ec:37:13:e2:ec:bf:ab:d2:fa:
         9f:ca:8c:91:18:1e:9b:ac:e1:4c:10:d2:45:b0:7b:7c:3d:8c:
         4f:fe:58:18:a0:93:68:c6:83:80:b3:f6:1e:bf:90:33:91:66:
         7e:3b:8f:93:fc:79:72:5a:93:6c:16:8e:68:a6:d8:f2:38:ed:
         65:5f:7f:62:e1:e0:76:19:e3:b2:18:c8:2a:16:20:6c:7f:15:
         86:6d:24:2b:2a:c0:7a:3e:d0:e2:73:eb:a9:9b:04:de:05:33:
         2a:b6:f6:5e:65:a5:da:97:72:fc:46:1a:67:ea:71:1a:e6:b9:
         7b:1f:df:6b:ed:6a:5d:0d:c0:c5:48:23:a2:91:4e:26:b6:12:
         a2:24:29:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----