Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
File:                     3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft (raw, json)
Hash identifier:          ZfpHoliwqlodxa8atWmI+co6jaTQQI/h+o0xCifNTwE=
Subject key identifier:   F0:06:11:AD:B7:DF:20:C0:02:C1:77:B2:B8:84:C7:A5:F1:DC:1D:E1
Authority key identifier: DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52
Certificate issuer:       /CN=de23f18c576d6fa609133533c0d0e38d7732c652
Certificate serial:       01962ECFBAEA43EBCBCE395EC812F1AFD348
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft
Manifest number:          0192
Signing time:             Sun 13 Apr 2025 11:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:27 +0000
Files and hashes:         1: 3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl (hash: mumSMu68Ea8glZmc3oySOakDh2zvBXoj6v6VHdrgHTE=)
                          2: _uzKcHUnRqCblBfJ7LQOWwPDs9E.roa (hash: QtEg8CgvNKFjK8sDnq+KQm/gvMScP6wDUlBc5heZNlQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ba:ea:43:eb:cb:ce:39:5e:c8:12:f1:af:d3:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de23f18c576d6fa609133533c0d0e38d7732c652
        Validity
            Not Before: Apr 13 11:01:27 2025 GMT
            Not After : Apr 14 11:01:27 2025 GMT
        Subject: CN=f00611adb7df20c002c177b2b884c7a5f1dc1de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f4:da:37:38:19:b1:6d:b6:19:d7:72:25:75:
                    ad:ba:8d:0c:ed:43:b5:3a:9d:e8:eb:8f:cf:13:87:
                    3d:76:9c:4a:8a:cc:e8:8a:1b:68:c5:c1:87:eb:48:
                    86:d4:76:88:fd:16:79:b5:81:e3:13:06:1d:8c:6a:
                    dc:be:a1:67:73:1a:ff:95:74:e6:e9:6b:50:4e:d3:
                    75:1e:16:56:f7:c5:bb:37:e6:d8:ea:9c:52:5a:3b:
                    8f:0e:8d:1c:2c:ab:ce:60:98:4c:70:2a:17:4c:37:
                    b8:ed:d8:5c:17:52:c6:2e:6e:8b:85:3f:e4:5d:aa:
                    9b:5f:93:fd:00:40:ed:67:a3:1d:56:e1:b8:6f:68:
                    5e:69:34:2b:5d:f1:6d:fd:45:33:f6:1d:94:bd:4a:
                    4f:ae:53:aa:7a:53:1b:48:5a:fa:ce:80:36:76:6c:
                    a5:d9:05:14:b9:3d:95:e3:d0:00:d8:15:50:18:b3:
                    dd:5c:76:3f:c8:94:9c:88:6b:4c:0d:9e:e9:27:be:
                    9a:ed:fa:27:77:68:fc:f2:99:dc:1f:20:30:e6:4d:
                    97:e7:90:2b:77:dd:41:0d:b1:3a:29:bf:c8:b0:6d:
                    0e:83:90:11:2a:77:8a:ea:1d:bd:80:03:40:6b:f3:
                    7c:a8:84:08:6e:91:75:49:9c:2b:82:e0:8d:ec:ad:
                    7f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:06:11:AD:B7:DF:20:C0:02:C1:77:B2:B8:84:C7:A5:F1:DC:1D:E1
            X509v3 Authority Key Identifier:
                keyid:DE:23:F1:8C:57:6D:6F:A6:09:13:35:33:C0:D0:E3:8D:77:32:C6:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3iPxjFdtb6YJEzUzwNDjjXcyxlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/98c5d9-e2be-493b-8657-5e86006e20ae/1/3iPxjFdtb6YJEzUzwNDjjXcyxlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:51:e4:d8:44:9b:5a:be:40:23:12:b1:59:f9:98:17:8b:b7:
         5e:ad:97:08:3a:8a:3a:66:64:de:df:e4:b1:6d:a6:a1:83:e8:
         81:a8:03:c0:9e:fd:24:96:9c:2d:7e:89:ba:02:f9:08:a1:4e:
         89:54:dc:ff:ec:f0:d3:f3:57:fc:ca:ed:87:d4:94:c0:34:6a:
         b7:09:11:d1:ad:35:14:9a:83:18:10:11:00:d1:54:af:04:63:
         43:06:1d:2e:b6:71:88:96:37:84:c6:25:02:7b:49:e8:88:8b:
         07:60:83:4f:23:ae:59:84:cd:fb:b0:2c:43:01:f0:9f:46:50:
         58:2e:d6:d8:d4:f1:4b:92:9b:c0:cd:ae:e1:3a:4c:0c:81:46:
         48:e4:d5:73:d7:d7:e0:25:92:0a:3d:68:42:5e:ef:a5:c0:75:
         9f:9e:0f:c3:5f:b6:98:23:b1:15:2a:6f:a8:93:74:90:3d:db:
         86:e0:4a:e0:32:05:e8:43:ab:0b:b0:19:00:ad:c4:51:1a:41:
         d6:f7:ec:b9:ae:5e:36:7e:3d:cc:0b:db:28:14:1d:55:c2:8f:
         b0:bb:8e:4c:27:72:67:af:de:73:a7:d6:ee:4e:4c:87:ba:d8:
         e8:a7:56:be:f0:bf:5c:e3:a7:e3:7a:f2:3a:2f:44:f4:b5:98:
         ed:8e:04:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----