Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
File:                     3Go3QvDw-xIJIrM57wHOz4f00e4.mft (raw, json)
Hash identifier:          KNfKAz/aZh0g7521eQ0YRySCVY3/ksdY5ay4IJUYAiY=
Subject key identifier:   52:7E:18:A3:7F:47:E0:B9:C4:60:B4:68:F0:86:10:50:5C:F3:D4:F6
Authority key identifier: DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE
Certificate issuer:       /CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
Certificate serial:       01962F06B7567C0C8A43218A65E3611FAB38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:31 +0000
Files and hashes:         1: 3Go3QvDw-xIJIrM57wHOz4f00e4.crl (hash: xZGnlZoCN0hSgMJQngsDbIQZ53Aq3g1jUnM+THxRMJ4=)
                          2: JiXA3NEuZkH0QXN05zeuUA5jMwY.roa (hash: YFDd4vweHXAu3AFKCBPOWScIToP/BlFEZooHjiGGKLQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b7:56:7c:0c:8a:43:21:8a:65:e3:61:1f:ab:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc6a3742f0f0fb120922b339ef01cecf87f4d1ee
        Validity
            Not Before: Apr 13 12:01:31 2025 GMT
            Not After : Apr 14 12:01:31 2025 GMT
        Subject: CN=527e18a37f47e0b9c460b468f08610505cf3d4f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5c:9e:74:2f:60:dc:14:6a:83:03:e8:37:81:
                    37:05:e9:ae:1e:dc:9e:10:9e:5e:56:a8:26:76:4f:
                    76:55:fd:c5:cd:e0:fb:34:93:2e:3e:ba:a0:ae:99:
                    5a:3f:1e:18:24:68:2a:34:53:4d:50:38:82:e6:b9:
                    9d:d2:8a:9d:3d:b0:30:74:e9:68:f1:9d:11:f0:96:
                    f8:55:9f:ac:4f:25:84:ca:82:45:1a:38:fc:41:a7:
                    25:18:94:6c:4a:49:3a:d0:be:3e:00:c1:2b:d6:cc:
                    09:ff:80:71:44:14:99:a9:bc:3a:8e:55:79:04:57:
                    09:9c:4a:09:e0:61:cc:29:04:e7:0d:f2:30:49:1c:
                    05:90:56:eb:b3:9d:b8:17:b6:29:bb:f0:ac:42:eb:
                    42:54:4e:b0:38:19:fc:58:d9:d9:0a:37:c1:e3:f8:
                    89:29:2f:0d:ea:bb:8c:4b:7a:6a:fc:fd:3f:b1:14:
                    3e:db:02:45:1c:0b:67:cf:f4:b7:9b:3c:16:7b:8a:
                    3d:f2:d1:6f:0d:c6:05:d4:08:17:f6:c1:e5:22:f8:
                    31:3f:91:8e:1c:f7:0b:4b:52:0f:23:67:96:f9:96:
                    b8:db:13:6d:5a:6a:e5:d2:6a:ce:c7:c7:35:62:8f:
                    c2:43:d6:2b:10:28:51:db:d1:a5:b0:dd:f4:db:85:
                    f0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:7E:18:A3:7F:47:E0:B9:C4:60:B4:68:F0:86:10:50:5C:F3:D4:F6
            X509v3 Authority Key Identifier:
                keyid:DC:6A:37:42:F0:F0:FB:12:09:22:B3:39:EF:01:CE:CF:87:F4:D1:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Go3QvDw-xIJIrM57wHOz4f00e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/47c973-205b-4197-8698-cc1d2c5e1b31/1/3Go3QvDw-xIJIrM57wHOz4f00e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:60:56:11:62:f3:4c:bf:cc:1c:3f:15:22:78:76:6b:af:fb:
         e9:29:7f:58:86:bd:05:ae:bd:b7:d7:ce:a6:57:d3:63:0b:f0:
         e6:20:5a:60:fa:63:06:39:f7:2e:a6:67:68:b8:aa:6f:35:6c:
         2e:30:ee:f6:4c:66:94:0d:e2:be:19:ef:da:b7:17:0d:c7:98:
         70:d8:91:d0:a3:f8:af:2d:dc:9d:2f:20:44:93:8c:ca:5b:1a:
         2d:1e:2e:4c:e7:29:26:5c:27:d1:5c:62:c5:a2:59:5d:55:4e:
         3f:38:ad:85:e9:b1:cd:4f:d6:ed:25:4c:45:7b:df:60:0d:67:
         5f:88:46:92:8e:42:4d:1f:68:4f:d5:cc:c2:7b:04:0e:4a:29:
         a5:08:56:6e:9e:d5:2a:56:88:84:21:ed:e0:31:31:6a:d3:b2:
         73:7f:95:bd:42:42:51:9d:16:1a:48:a3:d4:df:5f:dc:6c:75:
         3a:d6:db:3e:ea:45:83:d4:02:54:b5:82:ae:d3:2b:14:50:78:
         86:10:17:d2:39:e9:41:70:5d:10:d6:f5:08:0d:e8:e2:93:69:
         b1:ab:f5:e8:1f:86:fd:13:80:cd:8b:b3:a1:19:4d:61:d3:0a:
         80:f8:23:da:fe:f1:ab:5b:98:20:df:23:93:0a:4f:7f:37:5a:
         ef:db:20:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----