Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
File:                     3iuimqARP6_TcNhl-0REmHtHMIo.mft (raw, json)
Hash identifier:          bBhoKsD3yolZOsP6bWKwVbp6GIwWqGdJAhbJQKdnDvM=
Subject key identifier:   31:C1:A8:C4:C8:41:66:9C:4F:6B:80:EE:57:5E:AA:D5:A0:A4:79:B1
Authority key identifier: DE:2B:A2:9A:A0:11:3F:AF:D3:70:D8:65:FB:44:44:98:7B:47:30:8A
Certificate issuer:       /CN=de2ba29aa0113fafd370d865fb4444987b47308a
Certificate serial:       01962FAB9518A20E72302FF88B82785A6A2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft
Manifest number:          0956
Signing time:             Sun 13 Apr 2025 15:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:36 +0000
Files and hashes:         1: 3iuimqARP6_TcNhl-0REmHtHMIo.crl (hash: BxCiMUJCQoHlR0JTsHRQVA7vvxYNA0VQu4RAQEaWXrk=)
                          2: PMD1GlDLGk7gMbwF-9_w1YlsV4M.roa (hash: yxn0bsBf+yoGp2ebzQpXlOvhqAaQoPdbhmTGHyH8IaM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:95:18:a2:0e:72:30:2f:f8:8b:82:78:5a:6a:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de2ba29aa0113fafd370d865fb4444987b47308a
        Validity
            Not Before: Apr 13 15:01:36 2025 GMT
            Not After : Apr 14 15:01:36 2025 GMT
        Subject: CN=31c1a8c4c841669c4f6b80ee575eaad5a0a479b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e5:7f:19:38:8e:e0:e3:e5:7f:f8:dd:70:c7:
                    47:3c:12:44:ef:36:98:a4:c7:24:87:71:09:a7:60:
                    d6:2e:5b:70:01:1c:78:4e:3a:2d:30:92:f4:36:df:
                    e5:91:ac:70:6e:70:c3:56:00:a2:63:ac:4e:d9:13:
                    e1:52:2a:7d:6f:3e:c2:49:d6:8e:4f:98:7b:10:5a:
                    1f:d7:5b:b1:27:c3:88:ae:22:4b:b6:08:27:90:79:
                    27:1d:c4:7d:73:8f:43:40:a2:cd:d5:4a:1b:da:99:
                    0b:cf:55:07:6c:85:f9:07:5e:eb:e4:00:d2:73:45:
                    74:84:f7:3b:fb:f8:97:f8:0c:65:fd:e4:83:90:54:
                    65:1b:29:5c:11:99:ee:f2:9a:6c:d6:9f:e9:0c:14:
                    0e:41:bc:af:3d:93:16:b3:72:93:fd:db:b2:74:12:
                    21:5c:ba:ba:17:dd:9f:77:cd:06:12:c5:90:dc:f9:
                    33:a8:ab:31:d3:0f:2a:5f:4c:53:46:b9:eb:db:db:
                    9d:5a:e8:ed:d3:1d:77:96:81:95:f7:b8:c8:9e:81:
                    f9:b9:7b:96:4a:c9:fd:96:9f:2a:dc:94:37:62:ed:
                    89:f6:23:bc:42:ba:b2:36:18:42:51:bd:6e:1d:11:
                    b1:02:04:f2:15:c4:fb:bb:79:8b:02:15:b7:94:0a:
                    0a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C1:A8:C4:C8:41:66:9C:4F:6B:80:EE:57:5E:AA:D5:A0:A4:79:B1
            X509v3 Authority Key Identifier:
                keyid:DE:2B:A2:9A:A0:11:3F:AF:D3:70:D8:65:FB:44:44:98:7B:47:30:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3iuimqARP6_TcNhl-0REmHtHMIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/97004b-b671-4f3d-8d50-d1a4a45fafbc/1/3iuimqARP6_TcNhl-0REmHtHMIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:95:78:37:c1:e7:a4:98:d5:38:d0:0c:ca:78:b4:6d:c0:bd:
         a8:63:89:db:f3:2e:e7:fc:6a:67:f0:c4:01:76:f6:3f:67:08:
         8e:9b:b9:47:05:e7:3c:b7:70:d5:13:08:c0:07:f6:47:d8:c9:
         da:3a:3a:0e:fb:ca:ee:68:c9:2f:fd:51:a4:d1:a6:04:67:e7:
         af:31:7a:72:7e:2a:22:16:f5:d6:2c:96:86:8e:0f:b1:ee:ea:
         49:4d:cb:60:55:50:78:d1:02:a0:22:c9:d3:24:5f:85:d7:89:
         2c:c1:fe:cc:be:6f:a9:1c:47:44:1e:a3:09:32:b0:46:c0:9c:
         9b:3c:d9:bc:36:4d:30:a4:7a:51:fc:be:24:4f:ec:cf:fd:f7:
         af:0c:7a:b2:9c:76:b4:d6:ae:ae:5a:9d:76:23:93:23:50:b6:
         5f:55:c2:7b:b9:2c:13:c6:f5:2f:07:9b:40:a0:e6:f0:a3:6b:
         37:4a:e5:54:1d:ac:34:9d:92:0a:03:f8:fe:61:24:4b:96:19:
         2c:ec:2e:28:d9:b4:85:de:c2:33:7e:bc:b5:28:35:c2:30:f9:
         2f:85:54:10:5a:61:72:be:fb:33:bb:6d:60:3d:83:f4:81:fe:
         61:e8:c1:7c:fe:32:12:5e:95:23:13:fa:6c:03:1e:9e:a5:b6:
         c7:00:55:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----