Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
File:                     3Hgh4by_bgdOpIFKqlxj47qBPF8.mft (raw, json)
Hash identifier:          te+X8dIW+LL2sNeLlDLO3ifmjJZE3IAjDtFtj3LgAE0=
Subject key identifier:   28:DC:AC:41:A7:86:00:63:97:8D:54:27:7D:85:72:C8:F5:9A:C2:B0
Authority key identifier: DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
Certificate issuer:       /CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Certificate serial:       01962F3D3E3A69DB7D2E3AEE01AC1A1E9ABE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft
Manifest number:          14F8
Signing time:             Sun 13 Apr 2025 13:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:04 +0000
Files and hashes:         1: 3Hgh4by_bgdOpIFKqlxj47qBPF8.crl (hash: uzzsJIRhVlgKSh+CfUj/hMfybKcAOFAYAS3ybO/10y8=)
                          2: 4MXMdJWAndzkkiHFnmOxrlOkHIs.roa (hash: OiJ7+6r4bWAFN5vOHYBjk8U2TGkBpOBvwNxXY+Qb+To=)
                          3: FnxhJQ5jd2jBoCiaTZ0_b7pYcn4.roa (hash: YbjDITXwnNkMY1d8iM5sg8TPIw1q/oeZDc75wOKQiOE=)
                          4: KYs_VMmQL9k2rQHns_O4m4f35bc.roa (hash: 1ns98Zta2gRWyrvr5wyrj8EwmfBa9CnA+/wYUmR2SA0=)
                          5: ThB5ArM42WkjWUEQcQYsflTBSWo.roa (hash: bddz7FyKEk1/5lgcU0RqcQHG7LiGlbilafV868t6FT4=)
                          6: e8yyBy_WYk0MmiOF_-c6ZOE78e0.roa (hash: XCwVuTCuJ/Y/WAoLWIkeepq2X2E/4/mFMfojm79U0cM=)
                          7: uRWNqrl7lEtL4BdXY6zm3up7W9g.roa (hash: 5dZDwl/VQCf/bzBpVyR3+W+VZSdwG299LMVlDR4jvrU=)
                          8: w6y6tA7YYKjCRBu0w7S_pejO5kU.roa (hash: m4339RdE053FyeU5wm1JX9FNzAT+cE85Onp7E9j3YoE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:3e:3a:69:db:7d:2e:3a:ee:01:ac:1a:1e:9a:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
        Validity
            Not Before: Apr 13 13:01:04 2025 GMT
            Not After : Apr 14 13:01:04 2025 GMT
        Subject: CN=28dcac41a7860063978d54277d8572c8f59ac2b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f8:7e:1a:37:d6:c1:2a:59:49:85:ed:02:33:
                    c7:8e:c4:3a:2a:c2:c8:b4:35:5d:8c:57:52:b4:a7:
                    8a:cb:2e:65:8d:98:b0:f1:f2:a5:dd:45:69:77:f2:
                    84:58:da:b5:5f:6f:57:12:de:26:26:99:14:0b:70:
                    35:20:1b:1b:b6:c2:87:f7:10:09:4c:02:37:4c:68:
                    d4:43:32:9f:7d:7f:cb:20:d7:b0:32:b9:90:23:c2:
                    d4:d1:ac:1c:8b:f3:d8:3a:44:72:cd:b6:b3:58:0e:
                    a2:e3:de:27:1b:a3:80:3f:34:17:1c:2c:9d:b2:d9:
                    3e:ce:42:38:93:42:be:20:2e:e3:e6:18:31:da:8c:
                    7b:8a:77:12:c2:05:15:75:84:1f:a8:ef:55:de:8f:
                    12:0b:e4:92:ca:35:a9:5f:aa:d1:f8:95:42:af:97:
                    61:e9:a8:5f:dd:28:95:24:f2:e9:9c:be:90:96:01:
                    a1:a2:37:15:a4:de:f6:1d:78:55:76:ee:d3:13:39:
                    1d:e4:31:d2:c6:68:fd:54:f5:e2:0a:40:25:95:9c:
                    b1:9f:31:45:5a:a5:74:34:80:f1:35:aa:6f:8e:1b:
                    29:2a:be:3f:13:02:34:fa:11:7b:17:fb:43:1b:a7:
                    92:37:2b:8e:d2:89:bc:3f:54:af:f1:6f:76:96:19:
                    9b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DC:AC:41:A7:86:00:63:97:8D:54:27:7D:85:72:C8:F5:9A:C2:B0
            X509v3 Authority Key Identifier:
                keyid:DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:96:3a:16:f0:70:87:f3:44:d5:05:0a:0e:70:ca:79:6c:1c:
         a2:9e:43:8b:ad:f0:e4:93:fe:b2:88:e0:39:91:0d:52:26:02:
         b0:0b:c6:f4:2d:3c:38:99:b6:4f:37:f5:c3:53:66:1b:91:8e:
         3b:8d:72:5b:70:f8:73:1e:cd:31:a7:5c:15:ba:5b:e0:db:6d:
         01:66:14:b8:d2:de:c2:5e:83:39:34:db:ba:f6:55:73:26:00:
         ac:cd:88:22:ff:c7:bd:d8:19:0d:ac:87:df:64:bc:24:7a:87:
         b0:22:e5:e1:07:e0:31:87:99:4f:91:3f:60:0d:17:85:7e:5c:
         de:be:4a:8c:7d:59:f5:02:fb:99:01:66:4d:19:5a:74:fa:b3:
         78:8d:0a:bf:07:15:97:5c:81:e5:fc:72:b0:ea:9e:a5:90:e3:
         fd:10:ad:e9:92:8a:59:c5:31:0d:4c:7e:77:78:34:24:0d:0a:
         da:6e:02:2e:0f:89:e8:43:57:88:6e:cc:f6:de:91:9b:8e:22:
         b4:06:c8:7b:99:2b:ef:8b:c6:a7:4b:e3:95:35:b8:6c:69:0b:
         e8:61:33:a2:6d:0b:6d:93:8d:c8:9b:f2:f5:8b:b6:5b:e7:af:
         15:af:e9:64:ca:45:7d:10:a3:82:fd:f1:60:55:ff:17:f5:00:
         c6:aa:3f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----