Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
File:                     rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft (raw, json)
Hash identifier:          52K6cwVIfubIUt+sXCV8A7KtNrEIduR6jqlBbe8Fd7k=
Subject key identifier:   7D:AC:27:A0:C0:77:56:69:71:B0:D0:FE:C6:BD:8D:4A:C9:1F:77:BD
Authority key identifier: AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64
Certificate issuer:       /CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64
Certificate serial:       01962E2AD11C6909A771C2A10A2BD8FA8F17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft
Manifest number:          10AF
Signing time:             Sun 13 Apr 2025 08:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:19 +0000
Files and hashes:         1: TImGbHFcysH3yKCENp7I2KDKakw.roa (hash: wV738mzWH7BpaMNjeVJLX60iXYrXwr7zU2chvPIlwaE=)
                          2: rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl (hash: LrFuLExIpuMqYpOsy2+llEQmspcmfbAzq6DAV0PR0SQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d1:1c:69:09:a7:71:c2:a1:0a:2b:d8:fa:8f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad3dd8d32cfc717a6e690ebe3e1db4386d8f6c64
        Validity
            Not Before: Apr 13 08:01:19 2025 GMT
            Not After : Apr 14 08:01:19 2025 GMT
        Subject: CN=7dac27a0c077566971b0d0fec6bd8d4ac91f77bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2c:19:45:b7:a4:54:2a:30:37:35:7e:8f:02:
                    f8:06:44:5f:4b:43:fd:cd:8d:f0:70:95:6e:1e:96:
                    e2:3d:64:67:5d:b6:74:f0:78:b9:9d:d7:f6:f8:14:
                    d1:66:1d:0c:10:ad:ac:18:35:58:26:e2:56:50:97:
                    31:fd:9c:9e:42:c4:6d:ba:8d:46:cd:5c:13:21:fc:
                    df:9e:44:21:f4:e1:fc:33:1d:aa:63:a5:99:6e:db:
                    3b:4f:d2:74:16:1d:57:2f:5c:57:32:7a:0a:72:d5:
                    d9:be:7c:c8:30:63:e8:de:c9:9f:80:bf:e2:87:72:
                    22:b3:22:d6:59:7e:8f:63:70:06:55:b2:76:c1:74:
                    74:c3:d5:cd:63:62:97:5b:b5:ec:57:e3:5f:c8:e3:
                    7d:95:ce:01:62:7a:81:46:04:02:07:d4:cf:38:14:
                    7f:83:be:c2:08:55:52:d1:c1:75:81:9c:2e:a6:79:
                    d2:93:00:19:d7:52:16:4f:69:5c:ed:6d:92:7d:c3:
                    00:dd:f1:ac:86:e6:c8:75:d8:f8:53:5a:72:85:b2:
                    1f:74:7e:99:75:de:5f:f1:ac:e4:a9:9e:5e:88:dd:
                    ba:d2:5d:31:08:af:ed:b3:fe:03:75:d1:31:95:6c:
                    2a:4f:44:1f:53:d8:fa:10:c4:97:8e:1e:e7:61:e2:
                    5e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AC:27:A0:C0:77:56:69:71:B0:D0:FE:C6:BD:8D:4A:C9:1F:77:BD
            X509v3 Authority Key Identifier:
                keyid:AD:3D:D8:D3:2C:FC:71:7A:6E:69:0E:BE:3E:1D:B4:38:6D:8F:6C:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/812800-9e70-4cd2-90fd-3bcd2399ee64/1/rT3Y0yz8cXpuaQ6-Ph20OG2PbGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:f8:99:6f:f6:d3:c8:57:8b:47:d6:44:e8:58:4c:f0:3f:03:
         e9:67:47:8f:a1:10:84:d6:91:f5:13:0c:85:32:dc:8a:a2:f9:
         5d:7e:54:27:1d:72:14:64:eb:41:66:71:81:6e:0d:d2:8b:9e:
         03:7d:3f:68:39:b6:68:93:08:b8:a5:4c:ea:43:d3:f8:22:02:
         0d:7d:f6:0b:d2:cf:68:38:7c:9c:f4:53:ac:8c:5c:d1:b2:13:
         95:28:dd:55:27:85:04:46:b8:7b:a8:8f:81:0c:1d:e6:5f:7b:
         6f:99:37:8d:59:93:32:d8:92:25:bb:8c:16:84:de:39:39:e0:
         0f:32:7e:0b:48:d9:52:51:40:69:9b:d8:4c:0d:fc:85:f6:49:
         5a:a1:c4:b9:64:08:4b:7e:da:d9:f0:f7:0c:90:6a:1f:54:78:
         8b:2b:41:d1:c7:92:e1:f0:9b:7a:a5:90:99:81:24:a5:13:ff:
         d6:0b:45:95:b7:51:61:be:56:38:48:72:c0:a8:89:14:cc:37:
         71:e4:ae:84:6d:d8:64:62:1c:d8:09:ba:ea:af:66:c9:dd:b5:
         f4:80:d8:5d:eb:d4:21:e1:01:10:55:09:c3:be:db:40:06:87:
         fc:9a:60:33:09:f1:51:12:ec:7b:62:8f:38:db:86:47:5b:60:
         94:84:36:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----