Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
File:                     3o5guxEQh9CAP8P8xK8yeqhcC4E.mft (raw, json)
Hash identifier:          r3F1kXowGJDvvuhOoGS3IQ2VchztvfEAe8BWYu+Bv1E=
Subject key identifier:   82:7A:61:A8:5D:15:99:01:73:8A:E6:D5:85:D5:16:73:19:0F:08:9E
Authority key identifier: DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
Certificate issuer:       /CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Certificate serial:       01962FAB477091B45B654D95CD6469149A3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:16 +0000
Files and hashes:         1: 3o5guxEQh9CAP8P8xK8yeqhcC4E.crl (hash: UckNl1qWtO1kOxIvoAAUYYx3upOiwhJpCHeEh4UePdA=)
                          2: Q6UDfcr6-wjzrSR02hz91bMMgCQ.roa (hash: Ri+ho1nwscaoaR+lGA/lmNvU5bMAzGg4wnbtbjS6IAo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:47:70:91:b4:5b:65:4d:95:cd:64:69:14:9a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
        Validity
            Not Before: Apr 13 15:01:16 2025 GMT
            Not After : Apr 14 15:01:16 2025 GMT
        Subject: CN=827a61a85d159901738ae6d585d51673190f089e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:83:4d:25:ef:31:e6:fb:8e:b3:cd:86:59:5d:
                    32:47:bd:53:11:22:3b:82:eb:03:a5:21:37:b5:69:
                    86:5a:79:d9:95:72:03:6c:cb:90:24:7d:b1:8d:ce:
                    3a:3c:e7:17:d1:9b:fa:2c:9f:d4:55:c3:c3:a9:fb:
                    a0:cb:15:84:9a:9e:6d:76:08:ba:00:07:08:0f:fc:
                    a9:c0:a8:c2:62:41:34:be:aa:fd:33:9b:40:cb:ab:
                    a5:6d:dc:08:8e:ee:d9:50:4e:c3:49:56:84:d3:0c:
                    75:20:43:36:b1:53:3a:42:b2:19:83:ce:59:d2:2a:
                    cf:6b:a5:4a:b5:2a:3e:db:2d:ef:db:02:bf:d7:fa:
                    f3:8e:8f:d4:2c:99:82:a6:f2:1c:e3:34:d3:95:c4:
                    02:26:9e:78:1e:d7:1d:e9:e5:23:48:fa:af:cf:c8:
                    cb:58:cf:07:e5:48:f7:23:36:de:68:a5:ac:a6:96:
                    53:ab:12:7a:d5:1e:09:ba:23:44:6b:3f:4f:3e:a4:
                    93:d2:ef:95:df:14:ac:57:1f:59:9a:eb:91:0a:c9:
                    24:71:2f:e7:f2:63:a9:1e:b6:12:16:dc:6a:45:0f:
                    0c:2c:e0:83:d2:0d:86:37:a5:6b:76:67:56:28:db:
                    ef:29:c3:d0:7c:5c:50:90:97:78:3a:86:45:6d:33:
                    18:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7A:61:A8:5D:15:99:01:73:8A:E6:D5:85:D5:16:73:19:0F:08:9E
            X509v3 Authority Key Identifier:
                keyid:DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:3a:27:fc:48:1b:64:9a:d3:da:ad:1b:a2:ad:54:f0:7c:bf:
         ee:f3:d1:e3:16:ca:15:a2:61:cd:50:69:04:67:81:95:f4:d5:
         27:7f:bb:01:dc:75:6d:ff:56:ec:05:51:51:91:92:22:59:cc:
         30:31:a3:49:5c:12:3d:de:c9:ef:b5:97:43:56:d6:07:86:54:
         b4:06:73:73:3b:99:3b:b7:10:73:e3:e7:d1:51:90:5a:7e:76:
         3d:3c:db:06:c1:10:71:20:02:8e:7a:3f:32:18:56:91:9d:3c:
         64:86:97:94:4f:9e:ef:73:c5:72:28:97:9b:3a:72:90:bd:0b:
         1f:02:8e:d5:b6:d5:96:19:55:bb:73:d9:f7:2a:51:63:b3:05:
         3a:fb:e8:ed:d6:6b:e1:9c:73:ac:ca:e5:e0:b8:cf:bc:3e:e6:
         34:0f:dc:68:63:9c:e8:7d:ad:db:b2:27:42:0c:b8:0a:50:a8:
         9f:1c:76:c0:8a:38:f2:f3:e9:fb:98:bd:b8:29:4c:f9:2f:6e:
         a3:24:db:70:5a:6e:d5:52:88:6a:ee:af:b5:da:91:b6:18:d2:
         7f:c7:83:10:6c:f1:51:55:ec:bf:9f:33:bc:44:09:d5:55:d1:
         a4:3b:f6:eb:15:bf:95:b6:78:71:c3:46:94:a0:b9:04:85:fb:
         a8:b3:8f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----