Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
File:                     03fcZqVjo68h7gerM-i__nr5KI4.mft (raw, json)
Hash identifier:          1Q2DqXFTiQ7RTLk9hWvF5bVJn8OCkLo+eM9YJc+DjoU=
Subject key identifier:   00:86:90:DC:5F:34:7C:96:73:BA:6F:29:CF:C1:AD:1D:87:19:61:10
Authority key identifier: D3:77:DC:66:A5:63:A3:AF:21:EE:07:AB:33:E8:BF:FE:7A:F9:28:8E
Certificate issuer:       /CN=d377dc66a563a3af21ee07ab33e8bffe7af9288e
Certificate serial:       01962F068694020F8B49B36C2462467543C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft
Manifest number:          0335
Signing time:             Sun 13 Apr 2025 12:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:18 +0000
Files and hashes:         1: 03fcZqVjo68h7gerM-i__nr5KI4.crl (hash: Bv0yAu7rKPR9+QNFMYU3cp55QvAKjbKbKhFaNRpmXFY=)
                          2: 6NWP4SmZYIKGrMKHkiHYbZ6J5I4.roa (hash: m+2x+5LklJoq5rlCh1u/r9pBwdaQs57tN+EGau9SsmU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:86:94:02:0f:8b:49:b3:6c:24:62:46:75:43:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d377dc66a563a3af21ee07ab33e8bffe7af9288e
        Validity
            Not Before: Apr 13 12:01:18 2025 GMT
            Not After : Apr 14 12:01:18 2025 GMT
        Subject: CN=008690dc5f347c9673ba6f29cfc1ad1d87196110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7f:e0:ac:da:dd:33:1f:40:d7:72:43:3c:30:
                    88:bc:8b:6c:34:b4:84:9c:fa:bd:0b:7d:11:ff:ff:
                    b0:ba:41:1f:82:b8:74:f7:eb:5c:73:26:0d:2e:e0:
                    81:34:7e:be:20:15:fb:9d:6a:58:d6:8e:9f:af:17:
                    33:71:8f:22:0e:6f:8e:0c:e0:d4:5a:dc:07:b9:65:
                    e1:22:f8:63:3e:0b:56:67:59:c3:b4:3e:5a:e1:31:
                    1d:28:67:db:d9:ae:ed:4b:3d:8c:1f:e9:24:f7:da:
                    7a:92:84:89:a1:95:1a:57:9d:4a:09:76:09:7e:07:
                    86:9a:b6:57:07:6e:77:04:a7:dc:9d:97:f0:72:d7:
                    e9:b8:92:3b:8d:a8:e4:78:52:00:ff:de:5c:21:7a:
                    b8:58:6b:2b:2c:52:ab:57:b3:a4:ad:69:3f:44:b5:
                    96:c3:ef:54:fb:02:fc:78:5e:c0:fb:66:04:fc:4d:
                    3d:fd:b1:de:7f:de:10:0c:de:11:55:b6:cb:d0:02:
                    ec:63:91:d8:a8:4e:8e:62:fd:f8:e1:20:58:e2:0e:
                    b4:1d:f4:88:b8:e4:3f:73:fd:76:32:fc:4c:45:51:
                    c9:60:8e:20:ea:fc:09:db:19:3d:41:d7:5f:ac:a6:
                    96:ab:40:3e:e8:02:2c:2c:38:ca:6d:ea:83:c4:b9:
                    2a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:86:90:DC:5F:34:7C:96:73:BA:6F:29:CF:C1:AD:1D:87:19:61:10
            X509v3 Authority Key Identifier:
                keyid:D3:77:DC:66:A5:63:A3:AF:21:EE:07:AB:33:E8:BF:FE:7A:F9:28:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03fcZqVjo68h7gerM-i__nr5KI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/1d5081-e4d2-40db-a5e9-af2404c25acf/1/03fcZqVjo68h7gerM-i__nr5KI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:26:cd:1c:3f:53:ce:bb:4f:99:3f:33:35:ca:2f:21:56:c7:
         ce:30:01:9f:18:d4:6e:28:30:59:6a:fa:24:7d:dc:a5:c6:bf:
         b5:b3:bb:53:49:13:dc:e1:ee:41:85:a9:ae:d6:49:42:b6:a8:
         5c:13:fa:bb:c2:9f:73:0a:c7:d9:a4:4e:bd:dd:10:cb:3e:9b:
         af:25:dc:b1:55:d9:fe:db:e3:4f:2f:71:4f:fb:01:d0:f0:d8:
         ef:23:74:95:2f:d7:19:14:34:86:6c:0d:47:88:4d:d9:ad:ff:
         cc:61:3c:09:38:65:98:36:41:e0:43:c5:e3:e0:f6:f3:4b:47:
         d7:01:8d:22:db:6a:e5:8e:90:02:1b:01:81:8e:e0:81:aa:81:
         4d:64:0d:4f:95:6b:ec:0c:78:40:ab:fd:b5:90:b1:c1:70:ac:
         49:45:e1:61:88:90:21:56:91:f5:43:ba:de:9e:20:a6:8b:3d:
         a2:45:98:53:01:a5:db:4f:58:f4:7d:39:18:e8:a9:d4:43:61:
         de:6f:d0:a4:49:92:61:4d:dd:3b:16:62:03:2d:18:9c:4e:21:
         5c:a4:e5:fd:0d:35:40:53:45:c4:e7:1a:a5:75:1e:48:86:37:
         c3:14:aa:c1:27:a6:e2:4a:7d:64:3d:ec:91:3b:94:0f:07:9b:
         58:5b:c6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----