Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/335e98-8b36-4017-928a-ddade3d341c7/1/_D39VAG24EhxYrQuBDdnosKTGnc.mft
File:                     _D39VAG24EhxYrQuBDdnosKTGnc.mft (raw, json)
Hash identifier:          1vaow862U1gx+mFbx7O2Gz3Xp8uiOZyTrK5/qn5mXPo=
Subject key identifier:   F9:AB:C1:C5:3E:B6:60:99:96:9E:B7:CC:01:9F:A9:B1:3B:00:A9:89
Authority key identifier: FC:3D:FD:54:01:B6:E0:48:71:62:B4:2E:04:37:67:A2:C2:93:1A:77
Certificate issuer:       /CN=fc3dfd5401b6e0487162b42e043767a2c2931a77
Certificate serial:       01962E99494413F26CFB4A95D61707C445A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_D39VAG24EhxYrQuBDdnosKTGnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/335e98-8b36-4017-928a-ddade3d341c7/1/_D39VAG24EhxYrQuBDdnosKTGnc.mft
Manifest number:          086C
Signing time:             Sun 13 Apr 2025 10:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:59 +0000
Files and hashes:         1: _D39VAG24EhxYrQuBDdnosKTGnc.crl (hash: w/teLLW3VycjoXlm9UZWGRmdufmkwbxVOpo8ThDx2E4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:49:44:13:f2:6c:fb:4a:95:d6:17:07:c4:45:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3dfd5401b6e0487162b42e043767a2c2931a77
        Validity
            Not Before: Apr 13 10:01:59 2025 GMT
            Not After : Apr 14 10:01:59 2025 GMT
        Subject: CN=f9abc1c53eb66099969eb7cc019fa9b13b00a989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:42:1e:7d:4b:07:f2:80:94:d3:f1:db:40:82:
                    f3:77:43:a3:ab:e6:be:15:68:b2:92:22:ea:c8:be:
                    29:cb:a3:ab:3a:49:66:16:85:4b:bf:e2:9f:89:95:
                    59:8e:7a:22:20:36:c8:ce:58:25:82:1c:55:4e:ea:
                    55:87:cd:1d:f2:62:87:1d:c5:80:b9:2a:33:5a:89:
                    b8:e7:6e:0e:68:cb:52:c4:8b:67:bf:da:70:8f:e3:
                    e4:df:c6:4c:c6:d9:51:7a:61:8d:87:63:f5:5a:1e:
                    9d:ec:b1:59:6b:1c:98:04:98:01:5e:29:6f:a5:56:
                    72:03:22:e9:73:c5:b9:16:ca:97:2f:47:14:60:a4:
                    5a:fe:27:08:d5:65:a0:d7:1a:8b:f7:95:98:5f:5c:
                    78:d9:6a:21:ea:63:cd:f1:4e:07:08:3f:8a:39:c6:
                    c2:85:cd:15:af:f3:ae:c2:91:7f:9e:1b:b6:2e:45:
                    ae:79:1e:2c:ec:c1:70:e6:3f:ca:1f:2e:a8:b9:8e:
                    20:9e:9d:67:d2:4f:ef:30:e1:24:6e:80:58:ad:8d:
                    52:79:46:31:ac:6e:13:ce:8c:0d:3a:9d:e2:bb:38:
                    d9:e9:a5:46:12:d8:f2:c6:38:ad:f1:fa:58:d5:5d:
                    81:c0:9e:7c:e4:a4:52:3f:e7:16:03:80:56:94:7e:
                    b5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AB:C1:C5:3E:B6:60:99:96:9E:B7:CC:01:9F:A9:B1:3B:00:A9:89
            X509v3 Authority Key Identifier:
                keyid:FC:3D:FD:54:01:B6:E0:48:71:62:B4:2E:04:37:67:A2:C2:93:1A:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_D39VAG24EhxYrQuBDdnosKTGnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/335e98-8b36-4017-928a-ddade3d341c7/1/_D39VAG24EhxYrQuBDdnosKTGnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/335e98-8b36-4017-928a-ddade3d341c7/1/_D39VAG24EhxYrQuBDdnosKTGnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:a9:86:a0:d8:9b:9b:99:fe:a8:04:0c:bf:bf:ad:71:f7:1e:
         7f:af:53:a6:3a:d3:6a:9a:22:11:8a:9a:b1:e8:13:4e:f7:22:
         8a:36:0a:64:cf:35:89:b0:19:a5:3f:81:ac:b9:41:47:78:c7:
         4c:d3:f4:ce:50:61:61:cf:33:6f:fb:ab:67:38:09:09:e2:36:
         d4:f5:f5:a5:ff:a6:a6:4a:d1:09:17:55:1a:93:a5:cc:b7:f0:
         d8:50:84:3d:8c:95:2f:36:e9:05:90:bc:aa:1f:5d:e2:7d:1d:
         2b:7b:cc:9d:3b:e7:3e:9a:4a:ff:65:42:f5:68:92:8a:3d:46:
         a8:17:20:68:1d:a1:cc:a1:fd:2f:1c:7c:fd:48:f2:2d:dd:9b:
         bc:c4:0b:88:f4:03:fd:84:0d:8b:94:43:c9:12:3d:7d:94:86:
         0f:ef:d3:5f:95:f0:95:ca:95:27:5e:d3:7d:40:1d:2b:ca:b5:
         50:da:64:5a:64:7f:22:d5:b1:da:71:dd:49:4b:a5:c1:f3:81:
         cb:bd:19:4d:e0:51:2a:48:ab:d0:46:09:f4:de:08:ac:c0:9b:
         e4:07:8f:25:62:31:a7:a2:4e:04:0a:6e:88:11:66:b2:14:a1:
         e7:fa:78:21:cd:79:3b:3b:15:a2:6c:05:57:73:a3:5a:46:f3:
         a4:5e:10:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----