Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
File:                     A3s99teDmfAxgoVW_NkOv99NDS0.mft (raw, json)
Hash identifier:          HbiMiuggr4Ln0GO8lHz/CR9RRd2+go4KLQv84LWa2+c=
Subject key identifier:   84:C5:5F:AA:43:F9:74:7A:A8:8B:01:2D:53:BC:79:68:8C:3C:74:74
Authority key identifier: 03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D
Certificate issuer:       /CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
Certificate serial:       01962F071F2D9132AC157922A55D6EA06AA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft
Manifest number:          1214
Signing time:             Sun 13 Apr 2025 12:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:57 +0000
Files and hashes:         1: A3s99teDmfAxgoVW_NkOv99NDS0.crl (hash: lvD6FRxGTQm8Bl666F2CadV4qwYVWX4pf/DOMC0eNMM=)
                          2: AB4qyh-GFm_4fCIscWpIBFj0Kek.roa (hash: eMCLNriDfdANy3mBQaEbKePj36AsyrGRMWbPR231aA0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1f:2d:91:32:ac:15:79:22:a5:5d:6e:a0:6a:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037b3df6d78399f031828556fcd90ebfdf4d0d2d
        Validity
            Not Before: Apr 13 12:01:57 2025 GMT
            Not After : Apr 14 12:01:57 2025 GMT
        Subject: CN=84c55faa43f9747aa88b012d53bc79688c3c7474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f2:75:1f:14:e7:e4:8b:cf:a0:bc:eb:7c:e6:
                    b9:de:8d:44:ea:fb:1f:ad:b1:fb:1f:5c:18:ad:c3:
                    dd:af:35:de:f8:b2:65:67:cf:0e:89:d2:bd:8a:59:
                    c1:2a:e9:b3:a8:5d:37:b6:32:bc:4d:c3:ba:f4:d8:
                    1a:ed:1f:87:7f:11:ef:05:8e:c0:8d:9a:4a:94:79:
                    af:b2:04:2c:2b:bd:66:5e:49:7e:9a:fa:91:57:20:
                    9b:e0:8e:11:46:63:ed:92:e4:e6:c1:25:2d:54:47:
                    8b:fd:72:e5:ef:84:64:47:ae:0d:1b:80:99:2b:ff:
                    91:b4:f1:42:f6:d0:7f:98:ca:97:82:20:6c:e7:f5:
                    df:58:67:1a:8f:59:02:f0:76:fb:a6:68:d5:d4:9b:
                    c8:4d:ef:50:67:97:ff:13:0d:44:dc:3f:8d:8c:74:
                    05:cb:44:39:4a:21:1b:e4:46:73:37:13:27:54:82:
                    a2:49:85:cd:32:29:62:47:1f:80:85:63:95:dd:ce:
                    97:ab:c3:e4:b5:22:b2:f4:a1:3b:0d:a2:88:21:79:
                    4e:7e:f0:aa:42:71:29:bb:a9:c6:76:25:93:5d:d2:
                    cb:4d:53:b0:95:33:cb:b1:5e:9c:7a:ae:78:81:51:
                    2e:ad:fb:7b:9b:86:21:0e:2f:2e:0c:0c:74:de:03:
                    00:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C5:5F:AA:43:F9:74:7A:A8:8B:01:2D:53:BC:79:68:8C:3C:74:74
            X509v3 Authority Key Identifier:
                keyid:03:7B:3D:F6:D7:83:99:F0:31:82:85:56:FC:D9:0E:BF:DF:4D:0D:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3s99teDmfAxgoVW_NkOv99NDS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/e22ef8-50b7-4046-9208-a475aebb08d5/1/A3s99teDmfAxgoVW_NkOv99NDS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:6b:22:16:9f:34:eb:6b:27:04:61:b7:df:d1:3f:50:dd:e8:
         45:e1:b1:5b:3b:d4:0a:67:b2:45:13:13:08:67:b8:1c:b8:8d:
         58:a6:17:36:53:7f:3a:41:ec:d3:51:5d:c5:50:b2:7f:0d:ad:
         7a:19:88:17:0c:ca:91:9a:f2:7e:29:a3:d1:a1:9f:6c:93:48:
         8f:0d:42:ba:2a:a0:a5:c6:59:e9:61:20:76:a4:a0:df:3f:03:
         9c:73:df:47:c3:9d:6c:7e:ec:b3:ee:93:f3:1b:7c:51:7c:c4:
         d5:c8:b4:11:51:5c:b3:df:8c:59:31:4d:b7:2a:04:0b:8c:ee:
         42:0e:95:0e:53:3f:d3:6e:6f:d7:48:a4:5b:ef:54:f8:45:e4:
         0d:e4:88:df:b4:9e:94:c4:ee:1e:50:29:34:a3:7c:c6:3d:d9:
         f7:7f:36:90:69:ff:5d:97:52:57:36:c9:8c:05:29:5c:e2:56:
         e3:e7:e2:ff:10:5d:92:24:ce:07:83:d0:68:eb:ef:18:4e:6c:
         00:27:a3:d8:27:95:5b:82:13:5d:1a:18:57:25:2e:11:92:00:
         db:af:a8:e5:bf:b3:f1:8d:77:12:50:8f:ac:f9:ae:fc:09:da:
         fe:80:43:0b:a5:ef:bd:a4:d1:eb:e6:d3:0d:06:55:bf:a9:2a:
         0c:b0:ea:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----