Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
File:                     x3FxpeRVBshskBa75bFLPbi8bMM.mft (raw, json)
Hash identifier:          PYHHJ0SxXVX3mE4kPGOhnd+mjtmgV73893QLRdjN76s=
Subject key identifier:   31:83:5C:E8:0B:E0:F0:12:A5:19:FE:A0:06:5F:6A:E9:5B:A2:E6:22
Authority key identifier: C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3
Certificate issuer:       /CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
Certificate serial:       01962E997477AA751062923F2A389E78BDD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:02:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:10 +0000
Files and hashes:         1: iMH-2vRf9YeMGRgtztJPUn14aQA.roa (hash: 76FrL/HDDuxO7pj6zl8q4Zgif4vNwjOmJyQV7tycvQk=)
                          2: x3FxpeRVBshskBa75bFLPbi8bMM.crl (hash: AU55CtBkIVb+2e7Memo1eS4MF8nr/RjYBtPRvzSI8lM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:74:77:aa:75:10:62:92:3f:2a:38:9e:78:bd:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77171a5e45506c86c9016bbe5b14b3db8bc6cc3
        Validity
            Not Before: Apr 13 10:02:10 2025 GMT
            Not After : Apr 14 10:02:10 2025 GMT
        Subject: CN=31835ce80be0f012a519fea0065f6ae95ba2e622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cd:b2:1d:e0:f9:bf:52:f0:68:ca:41:e3:9d:
                    23:18:2e:e6:69:50:00:d2:a0:99:9c:be:7a:df:ad:
                    90:2e:d0:b4:4d:2a:0d:44:14:29:4f:ab:2c:19:39:
                    27:6e:4e:80:0a:3c:db:06:39:9b:ba:41:9d:2c:2f:
                    f8:34:c9:0b:4e:61:b6:54:7d:ce:7b:e7:d7:1e:aa:
                    b3:89:c3:fa:12:5c:85:6a:ab:36:5d:da:01:bf:6d:
                    f7:c1:79:92:18:cd:dc:33:1b:10:6e:63:13:98:bd:
                    27:b5:01:5e:76:17:0e:4d:b9:94:35:4f:87:f7:6c:
                    8d:1a:af:23:fe:88:bf:c9:e8:11:62:79:4a:5d:74:
                    05:29:c2:9a:3f:57:5e:35:6e:ba:98:57:b6:1b:cd:
                    b0:81:3c:a1:39:58:cc:54:2e:e2:a3:e6:b2:40:92:
                    1d:1e:3c:20:41:5d:cc:db:66:a5:5c:a3:a2:a9:2b:
                    16:5c:7d:64:46:9a:a9:ec:07:83:d3:34:0b:b3:e9:
                    fa:0a:ec:8f:94:d4:c3:e8:15:94:dc:fe:b1:d8:b7:
                    aa:6b:99:ec:cd:bc:2e:19:3c:e2:67:94:02:b4:a4:
                    fc:73:d3:69:46:b0:71:58:ee:6b:8c:a7:5c:49:af:
                    9a:25:28:dd:0d:ed:aa:43:d6:69:a9:68:2b:20:a9:
                    bb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:83:5C:E8:0B:E0:F0:12:A5:19:FE:A0:06:5F:6A:E9:5B:A2:E6:22
            X509v3 Authority Key Identifier:
                keyid:C7:71:71:A5:E4:55:06:C8:6C:90:16:BB:E5:B1:4B:3D:B8:BC:6C:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3FxpeRVBshskBa75bFLPbi8bMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7f8f58-d83c-440e-990b-b438b5b88cf2/1/x3FxpeRVBshskBa75bFLPbi8bMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:37:b3:f5:39:8e:ae:a6:04:aa:ec:9c:a2:70:4a:6c:b5:54:
         dc:72:40:e3:e6:7b:e3:4e:58:27:93:88:a3:81:75:01:d2:9d:
         f7:7b:6c:8e:bc:c7:da:0f:51:45:27:4d:7d:a9:87:9d:d3:13:
         3d:98:0d:c1:a8:1a:d3:5a:b1:29:90:73:2c:3a:36:72:2d:68:
         d9:7d:e3:b8:ec:6b:3e:ad:81:44:b7:bc:fe:06:7b:9a:5c:75:
         30:a6:92:30:05:bb:3a:62:b7:01:9a:a0:8d:37:79:86:f0:4f:
         1d:18:3c:c2:c8:fd:bc:b3:04:3f:cf:65:7d:85:73:00:b1:99:
         85:08:2c:db:97:c6:25:70:55:87:5b:a3:17:e7:f9:14:95:69:
         70:2f:51:c5:da:7c:d1:a9:44:be:8f:df:ac:87:f6:9c:c0:1e:
         37:a7:0c:15:9d:87:71:7f:ba:27:75:3c:c4:eb:3b:54:bb:24:
         02:34:0b:bc:d8:4b:10:b0:88:c9:a4:ad:8e:82:3f:c1:26:14:
         91:e5:75:9c:1d:b1:a2:fd:c2:49:d3:3c:ae:16:cd:50:bd:36:
         6b:00:26:65:bb:37:09:9e:27:e6:bd:95:69:62:03:47:b8:22:
         9b:d2:1f:34:57:56:77:0d:49:9f:5e:4c:a0:de:27:0a:fa:4a:
         83:b2:de:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----