Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft
File:                     B3M_xjuPGIDlwK9rRkPR4yGB16U.mft (raw, json)
Hash identifier:          gGVBd7SaDKKSFEdsLpVdUy2SnuazRT4Sk9fAz7H4Nos=
Subject key identifier:   A4:B4:39:47:C2:4E:4E:A7:83:FE:41:EE:6A:4D:98:60:96:2E:EE:33
Authority key identifier: 07:73:3F:C6:3B:8F:18:80:E5:C0:AF:6B:46:43:D1:E3:21:81:D7:A5
Certificate issuer:       /CN=07733fc63b8f1880e5c0af6b4643d1e32181d7a5
Certificate serial:       01962E98C4CBDF5957DE5D770E975925763C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:25 +0000
Files and hashes:         1: B3M_xjuPGIDlwK9rRkPR4yGB16U.crl (hash: T9zbfS2wdXHJZXnxBW3pqKmX4u1R8g9eHH1Er6bTcWM=)
                          2: wfzCH1I_jaacEoQG0qX5DBfYP5Q.roa (hash: lkjeD8VK2uApBBO5OoQq9Fe2IWIHnY1S+YXHFJmJj3M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c4:cb:df:59:57:de:5d:77:0e:97:59:25:76:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07733fc63b8f1880e5c0af6b4643d1e32181d7a5
        Validity
            Not Before: Apr 13 10:01:25 2025 GMT
            Not After : Apr 14 10:01:25 2025 GMT
        Subject: CN=a4b43947c24e4ea783fe41ee6a4d9860962eee33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ca:cd:9f:15:b9:eb:b4:cc:58:54:d4:d6:47:
                    b6:54:6c:9f:be:ef:f5:63:57:d9:71:2e:a9:41:b3:
                    dc:3d:41:46:06:ba:c9:45:99:e1:8a:e1:20:b7:e3:
                    cf:fb:cb:d3:cb:9f:1f:43:85:f8:8c:da:b9:f9:3c:
                    92:b7:4c:f3:6a:ce:0f:b4:7e:c6:29:e0:ad:5e:a6:
                    20:b1:ea:0f:62:e7:ab:62:24:09:a4:c1:13:46:dd:
                    6b:66:13:5e:70:29:05:54:c9:0e:c8:a6:97:54:59:
                    da:1d:ea:79:c0:63:35:94:f1:c0:5f:10:3d:01:88:
                    a3:c9:da:18:23:6d:fb:49:61:3c:fc:ea:4f:cf:7d:
                    80:9e:8f:af:4b:12:21:40:3b:38:cc:46:50:94:e1:
                    80:66:d6:d7:be:a7:9f:98:6e:80:2f:34:bf:f5:15:
                    b5:c7:fb:fc:b5:5e:d3:6d:c5:35:3f:af:23:d8:86:
                    6e:b8:5c:c0:04:82:23:30:12:e1:70:b9:3a:20:f3:
                    d7:02:54:91:09:84:21:6a:b4:33:26:25:54:5a:a9:
                    5c:52:c2:00:d4:d6:d4:3f:8d:d6:10:3b:07:d7:8b:
                    d7:a7:ed:f3:ba:d3:cd:b3:ae:62:05:e4:75:7e:6a:
                    97:67:94:22:cb:06:8d:e1:c6:b0:2a:00:87:c7:84:
                    6d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B4:39:47:C2:4E:4E:A7:83:FE:41:EE:6A:4D:98:60:96:2E:EE:33
            X509v3 Authority Key Identifier:
                keyid:07:73:3F:C6:3B:8F:18:80:E5:C0:AF:6B:46:43:D1:E3:21:81:D7:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3M_xjuPGIDlwK9rRkPR4yGB16U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c383cb-33ea-43cf-8e2e-14d07bd1889c/1/B3M_xjuPGIDlwK9rRkPR4yGB16U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:b7:62:0c:ff:eb:07:ae:f6:0c:48:c4:0f:3c:cb:e6:2d:1b:
         88:ea:f1:52:32:fc:0b:07:fe:79:a7:83:fe:2e:a0:5e:59:e9:
         ea:cf:3f:03:e5:99:14:56:30:01:8f:43:f7:03:c1:40:71:01:
         37:90:3a:4b:2c:fd:8c:4a:56:4d:55:99:78:6c:8f:5c:86:f3:
         26:a9:95:f2:ab:e4:b9:c2:3e:33:ce:0c:16:99:d7:df:44:67:
         74:21:50:80:e8:39:cb:e9:ec:52:2a:57:85:9c:ee:82:5a:a2:
         92:6c:86:14:cd:0f:ee:57:c5:53:17:6a:20:30:3b:e9:b7:40:
         3e:52:e9:98:37:b5:45:86:40:38:21:be:fd:79:8a:65:0c:81:
         95:f1:cc:aa:cd:e5:91:9e:17:41:71:dd:20:1b:2e:1f:cb:24:
         6b:5b:f0:e3:36:f9:43:de:6c:d2:e5:26:9d:ea:ad:26:f9:17:
         4a:d4:b0:d0:91:b6:4b:79:29:f8:c9:65:33:5b:43:ed:87:50:
         5e:c0:2c:bb:b4:aa:4f:7b:2e:60:d4:91:5b:05:9f:1a:6e:a8:
         7c:8a:28:9b:93:0d:0c:58:de:a3:28:81:5e:86:84:6e:1e:6c:
         d5:3b:1c:7c:ed:5b:2f:f2:8f:b7:a0:5b:8b:1d:84:15:87:eb:
         16:b1:ce:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----