Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
File:                     3Bo6oM-N-pFn0k2S7YoW6054BEw.mft (raw, json)
Hash identifier:          ci27W3jfX3siMNd08n5XMjtnkUMANFBXmopgvZFMQwM=
Subject key identifier:   28:F0:B9:21:B0:8E:C5:B6:A0:11:B5:94:A5:19:EF:9E:7F:12:56:70
Authority key identifier: DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C
Certificate issuer:       /CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
Certificate serial:       01962FAB5386F88BEEF94A4D00A50302FAC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft
Manifest number:          06C0
Signing time:             Sun 13 Apr 2025 15:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:19 +0000
Files and hashes:         1: 3Bo6oM-N-pFn0k2S7YoW6054BEw.crl (hash: JfO79flWuFkRHLHJBRE5V8qkHjoR0jBAg+sDYuOum5w=)
                          2: tmyLpJpJchhVaXtc4hY4-3-tLv0.roa (hash: ptDhwK/duydywl6VxB7EOOZhOpM1y3n5bCF72ET2KLE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:53:86:f8:8b:ee:f9:4a:4d:00:a5:03:02:fa:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc1a3aa0cf8dfa9167d24d92ed8a16eb4e78044c
        Validity
            Not Before: Apr 13 15:01:19 2025 GMT
            Not After : Apr 14 15:01:19 2025 GMT
        Subject: CN=28f0b921b08ec5b6a011b594a519ef9e7f125670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:22:cf:67:81:82:0b:20:f5:c2:9a:cb:93:c5:
                    e8:3c:3c:ef:1b:3c:b8:05:61:79:20:ce:44:00:3b:
                    a8:b3:2e:f9:dc:e4:77:9d:33:77:2e:6f:f3:66:42:
                    2f:f9:8b:e9:c4:d5:09:cd:34:6f:c3:a2:0a:92:8d:
                    a2:81:34:ce:49:5e:52:d4:cf:da:86:50:62:65:25:
                    1f:7d:08:5f:32:b3:3d:99:8e:a4:0c:70:ad:3f:a0:
                    82:38:dc:be:ff:71:41:08:f2:53:7c:d9:a0:62:08:
                    8e:ed:1b:bc:72:c4:c8:59:5b:b8:cd:de:66:67:a5:
                    1f:17:df:6b:f9:04:7f:4a:08:b8:7f:97:52:25:e5:
                    18:2d:81:7d:43:e2:d8:fe:0b:2e:ab:46:de:ca:fa:
                    8c:d0:8b:00:1b:fc:dd:25:94:27:45:e7:65:db:fc:
                    6d:76:e2:9c:25:e7:a6:fb:33:5e:14:fe:98:32:e7:
                    4a:70:6c:c9:95:30:20:1b:3e:86:fc:54:aa:ec:82:
                    76:20:5b:e7:14:d2:ee:bc:d1:b8:99:95:c6:69:b5:
                    03:25:40:da:a1:68:8f:89:9e:b9:90:fe:af:19:fc:
                    ec:4a:4b:e6:f3:9a:00:a2:6e:d7:3c:57:9d:57:e5:
                    ab:9d:92:76:83:13:67:b4:67:2d:23:68:df:25:b5:
                    ac:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F0:B9:21:B0:8E:C5:B6:A0:11:B5:94:A5:19:EF:9E:7F:12:56:70
            X509v3 Authority Key Identifier:
                keyid:DC:1A:3A:A0:CF:8D:FA:91:67:D2:4D:92:ED:8A:16:EB:4E:78:04:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Bo6oM-N-pFn0k2S7YoW6054BEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/99184f-1c80-47cd-a685-2dd650ea4ac3/1/3Bo6oM-N-pFn0k2S7YoW6054BEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:d0:0e:64:48:9d:31:b9:cd:ef:b0:f0:fb:00:f4:49:00:8c:
         86:94:ef:f1:20:9a:cb:65:e0:2e:05:30:9e:90:4b:08:9f:f9:
         08:2e:cc:98:dc:b6:7d:b9:07:4e:65:40:9f:a9:43:66:a9:ee:
         6c:43:dc:12:3e:c0:81:6c:84:6a:56:d3:09:26:19:e2:c9:fb:
         1b:cd:7e:c5:cb:f7:c2:c8:a1:3f:3e:82:d8:ec:c0:8c:59:ae:
         50:1f:e6:78:6d:c3:0b:45:f9:3c:be:1a:23:dc:b8:05:cb:83:
         b6:b6:6b:05:d0:f2:92:0a:2f:8b:c0:4d:ac:a0:52:3a:f9:7c:
         73:90:e8:cb:b5:44:07:47:52:ea:9c:c7:26:0e:65:ba:d5:15:
         ea:36:d0:66:58:9d:d0:9e:cf:e7:c9:3b:67:d9:17:f3:2b:8d:
         24:c1:ad:55:f7:33:c4:37:a1:b3:43:4c:fa:9b:a6:be:5d:48:
         58:3a:ba:5a:ae:b4:ba:5f:6a:42:e5:63:2a:6e:f5:30:3b:4d:
         2c:3a:3e:4e:12:69:f7:6c:bd:16:b3:b0:3f:2c:d5:b4:20:c1:
         ab:a4:13:64:85:9e:90:45:d6:7c:8e:be:47:27:f6:91:0b:b7:
         20:a7:73:23:7b:5d:71:2f:f7:a7:5d:91:42:60:77:ba:a9:22:
         ca:6e:57:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----