Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
File:                     x3oRzK0S5FUob10OswQOhj8wyZM.mft (raw, json)
Hash identifier:          VBhB63GqV5mcKCL9X+6PgLEl1EQa/35TkCO83nwClmg=
Subject key identifier:   EB:86:4C:0D:91:BC:F4:3E:4C:64:86:DB:78:14:22:C4:9D:22:11:99
Authority key identifier: C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93
Certificate issuer:       /CN=c77a11ccad12e455286f5d0eb3040e863f30c993
Certificate serial:       01962F065BAACF0712293499F3E358898C2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft
Manifest number:          0519
Signing time:             Sun 13 Apr 2025 12:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:07 +0000
Files and hashes:         1: bpJaNyuRoeNygXab7GKwiGTrmYw.roa (hash: ffBzNxihOHhGjmbYdQ7gFGqXeGCQ0x6ARcmv1ly/R9w=)
                          2: x3oRzK0S5FUob10OswQOhj8wyZM.crl (hash: f/H76yMziynp4wScK0MXQemo2Qe+NsHG3vbU6KYiPU4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:5b:aa:cf:07:12:29:34:99:f3:e3:58:89:8c:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77a11ccad12e455286f5d0eb3040e863f30c993
        Validity
            Not Before: Apr 13 12:01:07 2025 GMT
            Not After : Apr 14 12:01:07 2025 GMT
        Subject: CN=eb864c0d91bcf43e4c6486db781422c49d221199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:15:67:75:57:f9:a8:f9:f9:1b:06:1d:60:a5:
                    83:9d:6a:89:f7:f3:73:4f:fe:88:94:87:9d:c7:7b:
                    b1:a9:d4:ef:e7:ae:06:3e:0a:e0:e9:96:df:2f:87:
                    cf:1d:54:ae:58:6e:98:8b:77:d0:74:de:c8:0c:0e:
                    7d:0f:ac:ae:5d:2f:41:6a:14:7a:08:36:4b:da:90:
                    c3:2f:e2:2a:d1:a7:06:6c:d4:08:e1:22:84:da:6f:
                    86:08:11:34:80:ce:55:4d:f6:42:1b:64:3b:0a:71:
                    62:05:01:2a:a0:24:b8:ae:73:a4:69:a3:64:82:d8:
                    db:b6:99:d4:19:e9:07:26:ee:ed:fb:25:a2:e5:b0:
                    ef:8c:73:44:bd:1f:11:9a:b7:69:83:b7:be:09:92:
                    0b:e8:5f:f8:d6:37:a0:54:bc:3c:d7:cd:4b:4c:39:
                    00:10:ea:dc:44:4a:66:f4:d9:52:1c:18:f2:53:5b:
                    4b:6a:82:d8:f9:26:93:b4:31:d3:a9:d2:d1:4f:3d:
                    0d:6a:b3:87:59:e0:23:21:a3:15:95:51:68:46:0f:
                    d0:26:9d:08:c2:69:15:03:85:df:fb:d0:d8:a7:66:
                    c5:f6:9b:81:f6:9b:04:df:83:d6:15:b8:e5:99:b9:
                    0f:ee:b2:b4:11:12:ad:cd:22:e7:0e:65:bc:7b:c8:
                    87:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:86:4C:0D:91:BC:F4:3E:4C:64:86:DB:78:14:22:C4:9D:22:11:99
            X509v3 Authority Key Identifier:
                keyid:C7:7A:11:CC:AD:12:E4:55:28:6F:5D:0E:B3:04:0E:86:3F:30:C9:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3oRzK0S5FUob10OswQOhj8wyZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b664cb-349a-4ffb-b268-090e5bd580b3/1/x3oRzK0S5FUob10OswQOhj8wyZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:01:7e:f0:3e:98:c6:36:2a:ab:5a:8a:3e:2d:11:41:9b:07:
         a5:f5:c3:c2:d7:8f:36:8d:7a:dc:77:a9:4d:a3:5f:ab:b7:43:
         4d:3b:ef:e1:b0:54:45:b0:2c:75:14:41:14:50:e0:d6:d3:ad:
         ca:a9:d6:08:6f:27:bc:ec:e5:fd:6e:b0:9c:f0:8d:4c:80:dc:
         d8:3b:42:3d:2c:bf:da:81:60:87:76:38:e8:35:9f:37:97:a0:
         b8:c6:b0:db:b2:4e:78:a0:eb:2e:f8:11:38:9a:e6:31:b1:6b:
         2d:c5:ad:52:59:14:0e:ba:8f:af:20:24:22:7d:68:42:15:d0:
         82:66:4b:1b:4f:58:12:83:fe:54:35:96:43:5a:9c:c0:82:8d:
         35:0c:12:1c:78:e0:c2:df:33:4b:84:62:78:cc:75:fe:08:6c:
         7c:4e:dd:86:7d:44:37:92:9f:63:c9:95:ae:d4:0d:f3:7f:f0:
         f9:3a:7b:92:1f:8b:85:6e:32:a3:24:cb:a9:35:66:8b:8b:32:
         39:f1:2f:4d:f9:09:1c:3f:e5:fc:d5:df:5d:a7:21:92:e3:76:
         c7:94:65:31:1e:72:54:f5:23:4f:e8:5b:bd:85:33:44:73:c9:
         31:a0:fb:14:f9:31:7a:87:5a:3c:81:69:f5:9f:03:8e:ce:ca:
         89:ff:79:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----