Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
File:                     3fHfWY9KjzotB0zLb20WtU0dERw.mft (raw, json)
Hash identifier:          bzyC7pZimke84pc8pxQ1pTDLVYj0/1yvJKR4c2ZOO5I=
Subject key identifier:   77:4B:A7:CC:89:F1:11:C6:32:60:41:98:4C:CB:82:E1:D6:0D:8C:39
Authority key identifier: DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C
Certificate issuer:       /CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
Certificate serial:       01962FAB57FC9E1AEC95A3CEAE45CA49190A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 15:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:20 +0000
Files and hashes:         1: 3fHfWY9KjzotB0zLb20WtU0dERw.crl (hash: UtruuQT5iNf9IvnzVDIZsqvgO4No7k9sW2wMA7rDzS4=)
                          2: 5395RGU-O7_Y-Wk8o5ckF03TEl8.roa (hash: 2x9LkbbQVmDZR4+CDqZEC8HuaScYKr9cs6YHpuOZlvY=)
                          3: JRT-ehjK87EWSX2wN_VxdPNgZVU.roa (hash: FFbMq3Jl0t/JwkKVVNHldSFfVrz4m+b2CW8bGskb98A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:57:fc:9e:1a:ec:95:a3:ce:ae:45:ca:49:19:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddf1df598f4a8f3a2d074ccb6f6d16b54d1d111c
        Validity
            Not Before: Apr 13 15:01:20 2025 GMT
            Not After : Apr 14 15:01:20 2025 GMT
        Subject: CN=774ba7cc89f111c6326041984ccb82e1d60d8c39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d6:91:7d:24:27:78:fc:c6:bd:ce:70:8d:43:
                    77:23:85:6c:20:57:3b:c7:fb:7c:31:b6:1f:be:9b:
                    4d:9c:82:c9:8b:86:a6:7f:3a:bc:cf:06:e6:16:19:
                    7f:bb:47:b6:ba:ac:7e:ff:7e:3f:63:8d:d1:02:17:
                    ca:eb:50:d6:16:56:41:e4:bb:38:a5:25:aa:55:cb:
                    7a:d8:d8:08:69:2d:16:26:3d:f3:d8:53:07:02:3e:
                    b3:62:01:b0:fc:10:a9:ab:48:88:8f:92:74:18:8b:
                    d0:84:51:e2:62:43:8e:01:02:1e:84:5c:2e:b7:88:
                    c8:17:bd:e0:0b:6d:e9:56:e3:47:ba:a0:5a:67:45:
                    ae:19:3d:69:6b:56:a1:3c:f0:89:82:01:ef:51:6e:
                    c7:f7:52:ab:fb:54:8c:64:2e:b0:2c:4e:74:0b:32:
                    25:d9:09:3d:c0:65:3d:e4:4d:4e:80:86:8b:cc:b2:
                    72:08:32:5c:a9:df:03:a2:42:f8:17:0a:dd:11:cb:
                    89:7b:1d:c2:84:ad:4d:0d:bc:5f:33:17:ab:df:3f:
                    1b:b6:ba:18:d0:a3:0c:56:be:20:c3:4a:25:d1:48:
                    7d:c3:2c:1e:7c:c9:51:e7:a6:1b:6c:7f:2a:6e:5e:
                    4e:9e:72:1f:27:c5:e2:ba:d2:58:f5:50:02:69:32:
                    e0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4B:A7:CC:89:F1:11:C6:32:60:41:98:4C:CB:82:E1:D6:0D:8C:39
            X509v3 Authority Key Identifier:
                keyid:DD:F1:DF:59:8F:4A:8F:3A:2D:07:4C:CB:6F:6D:16:B5:4D:1D:11:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fHfWY9KjzotB0zLb20WtU0dERw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6b8bce-584c-492c-bd7e-d0f31bc93079/1/3fHfWY9KjzotB0zLb20WtU0dERw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:b6:c6:a1:46:d2:bb:68:00:c2:2b:01:ac:7d:93:02:af:c8:
         93:34:10:98:3d:5c:48:4e:51:27:ce:25:97:c5:98:93:5f:d0:
         c7:f6:06:fa:5e:37:fc:be:ed:a7:1a:69:b5:32:22:97:1c:b1:
         e5:d8:32:9a:d1:8a:17:ee:01:dc:8e:71:b0:8c:6f:89:97:1f:
         9b:a9:0e:d5:3c:81:fa:d5:74:9e:d8:a3:82:da:e5:49:24:b0:
         6f:ae:cf:f7:ff:bb:64:eb:3c:ca:f4:4f:56:42:4e:58:d2:0a:
         f4:c3:da:42:59:22:53:3d:49:dd:70:f5:64:6e:e7:bc:f2:ee:
         b5:39:a4:96:f4:b0:71:c3:bb:fe:9f:5c:cc:e9:64:ec:e0:a9:
         09:49:00:67:a7:b3:07:e0:46:ca:90:a5:8d:89:f8:3f:1f:db:
         55:d3:56:8a:80:ac:e4:2f:e0:d9:b2:af:fe:79:03:a6:4b:53:
         01:51:97:2c:3b:e2:70:e7:69:24:6f:17:59:8a:f0:dc:aa:b7:
         6f:0b:2a:f8:d7:40:24:6b:e5:77:fb:c7:ea:2d:43:eb:27:21:
         88:b6:1b:8e:25:24:91:a0:72:1b:1f:8a:01:47:52:6d:af:a5:
         4a:5a:03:a9:0f:a4:d4:e0:5d:d3:13:6e:71:f6:28:1f:27:61:
         62:5d:20:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----