Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
File:                     3ciCMsB94s3Llur551FVC6pmxYg.mft (raw, json)
Hash identifier:          ixLds3P2U980B9BQfAtlaxXn7+kzMr0AVkncAp2erwU=
Subject key identifier:   B4:B5:8A:05:53:F5:4E:A6:00:B7:79:24:E8:1D:BB:C0:03:B2:A8:9E
Authority key identifier: DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88
Certificate issuer:       /CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
Certificate serial:       01962E2B30049954F31B0EB5BA9A055889A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft
Manifest number:          0C4C
Signing time:             Sun 13 Apr 2025 08:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:44 +0000
Files and hashes:         1: 3ciCMsB94s3Llur551FVC6pmxYg.crl (hash: 2yRzy+uZnaTMaYOmmNNTuR5q28+eIVnZLAl2rjkgeGA=)
                          2: OK60eEXoBVz15pEwVmX0yYULZbk.roa (hash: irOuBXNJpmhp7Bb40BZggz4rGVp00h/PvH1AyeAmbL8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:30:04:99:54:f3:1b:0e:b5:ba:9a:05:58:89:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddc88232c07de2cdcb96eaf9e751550baa66c588
        Validity
            Not Before: Apr 13 08:01:44 2025 GMT
            Not After : Apr 14 08:01:44 2025 GMT
        Subject: CN=b4b58a0553f54ea600b77924e81dbbc003b2a89e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:96:99:54:7c:3c:d2:93:55:f2:fc:8e:bc:87:
                    b9:74:8d:9c:a2:03:eb:5a:8a:92:5d:42:3b:57:92:
                    da:91:27:ec:1f:66:4c:96:67:fa:25:a9:c9:1a:e0:
                    00:84:b4:8a:41:6e:e3:f9:f9:d5:6a:4e:fd:75:3b:
                    ed:f8:71:f1:66:3d:49:ac:25:00:91:ef:7f:37:84:
                    53:60:87:49:60:c7:dc:18:7d:3b:1e:00:5e:8f:7f:
                    3c:bd:6c:d6:9e:7d:2a:1b:7c:c1:aa:b1:76:b7:6c:
                    eb:20:a0:25:81:03:9a:1e:66:e9:1f:ff:06:01:12:
                    21:16:cf:0d:87:c7:18:a6:f9:71:5d:6c:b6:ba:94:
                    4c:3d:48:df:5c:11:27:b9:51:35:7f:60:0e:04:71:
                    67:1b:f7:1a:ed:61:cd:0a:73:25:2a:f4:12:27:fb:
                    25:d1:73:03:61:65:e7:3b:d1:47:2d:47:64:8d:92:
                    b6:39:32:62:ba:a4:61:57:1e:41:70:4e:81:12:8f:
                    6f:b0:62:18:37:5a:14:2b:e6:7d:90:ff:b9:17:64:
                    1e:7e:1d:52:95:ff:c1:cb:0e:1a:b6:e1:4f:29:ba:
                    07:b2:5e:9c:1c:f9:d9:2e:51:28:e4:8d:ca:59:b3:
                    4e:0e:0a:40:1e:a5:ae:a1:1e:5d:42:e4:f4:75:5f:
                    06:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:B5:8A:05:53:F5:4E:A6:00:B7:79:24:E8:1D:BB:C0:03:B2:A8:9E
            X509v3 Authority Key Identifier:
                keyid:DD:C8:82:32:C0:7D:E2:CD:CB:96:EA:F9:E7:51:55:0B:AA:66:C5:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ciCMsB94s3Llur551FVC6pmxYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0c96d4-c760-4aa6-85db-42c79b03b4df/1/3ciCMsB94s3Llur551FVC6pmxYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:45:bb:4f:42:45:16:dc:61:98:50:2d:e8:21:02:1d:10:eb:
         0d:63:e6:72:8f:34:a4:c9:06:13:25:30:56:7d:be:98:c0:20:
         e0:23:52:73:7e:6e:f3:d1:10:50:f9:d3:ee:c4:1c:0b:43:84:
         0f:7b:1c:90:d6:f8:5f:ab:bd:7a:13:cb:ff:55:19:16:2c:b0:
         a8:92:9c:ad:d5:7f:29:bb:1f:e3:4b:21:c7:d6:af:67:fd:c5:
         6a:d9:ef:11:b1:5b:b8:2e:e4:6c:ee:9c:96:b7:f0:ab:5a:6e:
         39:df:0a:54:2e:c8:56:37:b3:7a:ca:63:62:11:98:8d:4d:80:
         39:d2:ed:4d:6b:72:1f:1e:87:be:bf:bb:8a:87:e8:51:4d:2b:
         c5:0e:67:3c:51:39:b0:20:15:5e:b6:09:16:8c:b8:08:e3:bd:
         ff:14:2d:fc:8c:1b:a3:88:2c:e3:fa:11:83:ef:1e:b8:57:cc:
         02:43:3b:c1:1a:0e:42:e1:4f:44:68:9f:2e:cc:ec:74:cc:24:
         d3:11:c6:a6:a6:01:26:e9:58:a0:ac:de:d9:43:4d:27:1a:56:
         3f:4a:f2:4d:8b:56:46:5e:4c:60:e5:29:3d:60:f2:c2:c3:86:
         0d:7a:ac:01:8f:72:0c:d7:a6:6d:c6:73:6c:42:7d:52:f4:f8:
         d8:19:20:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----