Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
File:                     3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft (raw, json)
Hash identifier:          p1hkg/OcrcUDAWN/hJJG2ApQbXgV7/54OEPDW52n+gg=
Subject key identifier:   03:3C:87:EE:AA:E3:18:15:E6:CE:5D:E7:BB:55:E1:B7:BC:AB:EB:79
Authority key identifier: DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89
Certificate issuer:       /CN=dc296cf7043836ebe1749c5c14547c79841e1b89
Certificate serial:       01962F3D3251B56455FD3AD2F63D25398D6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft
Manifest number:          0FF1
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:01 +0000
Files and hashes:         1: 3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl (hash: cpkh9j78Y9tHXHbW9nvHau0EuHx7I5x963WCVxnRvf0=)
                          2: _eQTxfZZbwefhXlLKHO7CEbeNzo.roa (hash: XwbhtEsqMzoTs493oAMc1WoC+bVurXPqsNp3fAtN59M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:32:51:b5:64:55:fd:3a:d2:f6:3d:25:39:8d:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc296cf7043836ebe1749c5c14547c79841e1b89
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Apr 14 13:01:01 2025 GMT
        Subject: CN=033c87eeaae31815e6ce5de7bb55e1b7bcabeb79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c7:15:5b:dd:b0:db:1e:3e:dd:77:3b:5a:85:
                    38:f9:1a:b5:fd:c1:9c:f8:94:e1:59:bd:c5:fc:e1:
                    49:00:ae:19:30:bd:ac:de:60:07:7b:94:b9:93:fd:
                    9a:17:74:89:bb:0d:fe:25:8f:9d:fd:08:c1:03:47:
                    52:9f:24:1d:df:30:ca:e0:fa:26:82:25:53:cb:66:
                    77:e5:ee:12:dd:f6:b9:f2:6e:0e:fd:b2:b5:84:2b:
                    a7:cc:20:49:63:4f:f0:03:e6:19:46:db:c5:eb:e7:
                    07:92:a1:b4:a3:06:c5:f2:d7:e0:cf:f0:51:e6:34:
                    01:77:03:44:52:35:4a:27:d0:a5:5e:e0:46:0d:d3:
                    3c:01:18:72:6e:b1:ab:6c:65:4a:da:ad:2b:9b:6a:
                    21:85:a5:bc:bd:f8:47:29:ae:db:bc:cc:da:96:0e:
                    39:29:45:3d:d4:4c:04:04:97:4a:89:ef:16:33:86:
                    81:ce:4a:da:8c:f9:dd:c6:9a:80:3f:54:21:3e:f5:
                    29:b7:d0:2e:4d:72:c4:50:eb:58:46:c5:e3:a1:c5:
                    cb:b2:d5:1a:00:b6:38:16:60:b4:b0:ce:88:74:f9:
                    d1:89:38:b0:dc:05:7a:01:69:81:ec:3e:f1:48:cf:
                    63:f8:f6:52:52:38:c2:ea:a6:d5:18:c3:9d:5b:10:
                    c7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:3C:87:EE:AA:E3:18:15:E6:CE:5D:E7:BB:55:E1:B7:BC:AB:EB:79
            X509v3 Authority Key Identifier:
                keyid:DC:29:6C:F7:04:38:36:EB:E1:74:9C:5C:14:54:7C:79:84:1E:1B:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/786720-6a8c-4549-b403-68abe52d3034/1/3Cls9wQ4NuvhdJxcFFR8eYQeG4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:70:ff:51:e8:47:40:93:59:7e:b4:35:22:d4:d6:0d:28:df:
         ca:45:af:ed:96:07:cd:fa:86:0b:39:fd:02:13:92:f6:66:7a:
         82:fc:41:de:84:32:56:d3:4b:29:f6:75:88:03:d8:5e:6d:b2:
         7b:2e:3a:49:c2:b1:05:2f:17:c8:71:9f:5d:07:b9:dc:2b:0f:
         26:35:0a:ed:1d:95:5c:c8:03:1f:29:2c:ef:d7:4b:fd:43:dc:
         5c:b1:1b:9f:26:18:28:84:d7:b8:cf:bb:d8:be:b8:97:5e:e0:
         98:fb:6d:85:44:10:86:f3:c6:7a:b3:52:19:76:ec:1a:74:d5:
         33:b7:6c:1f:51:79:b4:9b:47:48:5d:03:7c:25:ef:ed:2b:83:
         63:d1:66:65:ef:14:67:13:6c:82:36:9d:0d:ab:04:a0:a5:f1:
         6b:17:3d:ce:e7:49:fa:85:9e:89:16:32:68:87:04:98:4f:2c:
         28:1f:40:5d:48:87:fd:fc:93:89:c4:1c:20:74:92:bc:fd:6d:
         09:d5:04:6b:0b:6e:10:40:82:16:c4:61:82:bc:31:ea:90:c5:
         58:3e:c4:53:4c:b4:1d:92:07:ff:ee:77:49:21:2c:ed:84:0a:
         f8:ba:55:ad:01:bf:1b:cd:40:9f:81:49:15:83:93:12:93:31:
         83:9d:86:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----