Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
File:                     b3c-s9MHlNItdc2HK5GjuoSIQtc.mft (raw, json)
Hash identifier:          +NFNmShhymnpgLfwNzLDl7BOGQNycAIM9QkZK9RyHVY=
Subject key identifier:   12:CD:59:30:4C:D8:64:5C:FC:E8:7C:7B:33:55:0E:2A:39:B7:98:E1
Authority key identifier: 6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7
Certificate issuer:       /CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
Certificate serial:       01962E99C0F12A8AA037E19F9563F5B138BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft
Manifest number:          1221
Signing time:             Sun 13 Apr 2025 10:02:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:30 +0000
Files and hashes:         1: b3c-s9MHlNItdc2HK5GjuoSIQtc.crl (hash: BsBoCfElY35Cta7CLdffsW/MzpfuFrjrNygZQdDThc0=)
                          2: wCDrJf6K3N6SQxouZVxxkGAndwU.roa (hash: RDCOaghInO75GT81gEgSeMeIYDUyZ4Fou/t1PYJdixY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:c0:f1:2a:8a:a0:37:e1:9f:95:63:f5:b1:38:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f773eb3d30794d22d75cd872b91a3ba848842d7
        Validity
            Not Before: Apr 13 10:02:30 2025 GMT
            Not After : Apr 14 10:02:30 2025 GMT
        Subject: CN=12cd59304cd8645cfce87c7b33550e2a39b798e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:48:36:8c:3a:5e:43:c4:5a:f3:46:62:b6:96:
                    61:ab:b0:b8:50:78:fa:3b:95:f0:aa:62:fb:82:51:
                    ad:d3:81:33:8c:0e:0b:10:f2:78:9b:b5:a3:4c:bf:
                    57:c5:c8:e9:75:34:a7:09:0a:3a:94:5f:9b:25:88:
                    d1:64:54:90:ff:bf:4f:f7:89:2d:72:8d:6a:e4:bd:
                    3b:84:d0:e6:57:2c:34:8e:e8:aa:d6:3c:0f:36:9e:
                    1a:6c:05:f8:90:89:56:f4:90:f3:72:d6:a5:fc:85:
                    1a:59:ca:b8:2d:dc:46:e8:6d:df:67:45:3c:d0:12:
                    8b:11:b1:35:fe:b6:78:3b:44:c5:e2:ac:de:72:c6:
                    54:f8:9d:e3:6d:c8:7b:91:1c:1e:19:f8:0f:16:6b:
                    b5:df:f2:d7:3d:d3:76:d2:b6:6c:2b:aa:5c:06:16:
                    fd:4a:6d:f4:f3:95:4b:ed:4e:d6:7f:06:60:0f:86:
                    19:44:67:2a:f6:cc:e4:8c:42:9c:db:59:f8:6e:6a:
                    e4:25:d6:f5:26:ee:be:94:ed:36:c9:c8:12:3e:d8:
                    ad:db:fe:f1:6e:77:99:2b:4e:2f:6c:55:7d:73:f9:
                    8e:5a:17:4a:d3:ff:72:75:43:47:41:64:8c:f6:34:
                    39:2c:c2:47:57:38:7e:07:f0:fb:07:dc:73:36:9f:
                    ae:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CD:59:30:4C:D8:64:5C:FC:E8:7C:7B:33:55:0E:2A:39:B7:98:E1
            X509v3 Authority Key Identifier:
                keyid:6F:77:3E:B3:D3:07:94:D2:2D:75:CD:87:2B:91:A3:BA:84:88:42:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3c-s9MHlNItdc2HK5GjuoSIQtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/24d79d-1766-4045-9d24-6a0baeb2336e/1/b3c-s9MHlNItdc2HK5GjuoSIQtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:f9:0a:1c:20:59:35:32:a9:d9:0c:bf:70:6f:a0:b2:58:ce:
         47:42:34:23:78:81:f0:b2:cc:a7:14:86:3e:df:bf:50:11:24:
         bc:b1:0f:08:73:91:73:12:57:12:cf:24:0a:7a:4d:33:ad:73:
         8c:3a:a8:94:07:95:2d:62:89:d2:ba:77:01:3e:b7:00:ed:69:
         37:22:dc:8a:9d:ce:a9:11:82:f6:be:3a:05:f0:22:22:80:3c:
         32:ab:f3:cc:d5:08:e9:14:8a:02:e2:ba:3e:1a:7b:c4:ac:99:
         3c:00:e9:f6:8e:29:4a:f3:c1:ed:93:66:ae:24:72:8b:94:ec:
         66:fa:91:09:f7:63:7c:7f:05:7d:71:92:50:a0:ce:3f:fb:93:
         98:09:58:0e:0a:b6:be:59:f7:53:98:8c:05:14:c8:13:4f:ba:
         b5:86:70:25:fc:1c:cc:d5:7d:48:99:50:d3:25:41:ad:bd:d7:
         37:89:46:7f:c5:67:ce:a9:6d:9b:bf:8b:74:50:f5:60:4e:d7:
         6e:df:e2:61:c8:23:e6:0b:0a:b4:82:e9:47:e5:80:0c:a9:ef:
         ba:8f:c6:71:d1:aa:91:9b:bb:fc:05:af:a6:54:5d:02:68:2f:
         53:cf:76:96:98:51:93:13:fc:66:d5:14:82:ff:bf:c8:a2:ae:
         be:a3:f9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----