Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
File:                     3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft (raw, json)
Hash identifier:          YOWtA21wHEKNnTELfMX9K4NYH+9Mid2QhL1cZ9HF6Bs=
Subject key identifier:   7B:CC:86:CF:AD:CC:5A:BB:37:26:B0:43:4E:60:FD:DE:F9:7C:9B:60
Authority key identifier: DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3
Certificate issuer:       /CN=de37812bd45273ea3b2a53d9e96f6dba215826f3
Certificate serial:       01962E98D731259596DD3F1FF51B2523ED9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 10:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:30 +0000
Files and hashes:         1: 3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl (hash: Yb2RJ/iBt1BGuVIJdQCCdRAEhgFplVrJCll+wHahi/w=)
                          2: XQd1c0isqEth9h07f_gdrmhW6kM.roa (hash: WoVAodjsDqf5sS0K6LPcCANkMFHDsRKs5Hf+/9kb228=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d7:31:25:95:96:dd:3f:1f:f5:1b:25:23:ed:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de37812bd45273ea3b2a53d9e96f6dba215826f3
        Validity
            Not Before: Apr 13 10:01:30 2025 GMT
            Not After : Apr 14 10:01:30 2025 GMT
        Subject: CN=7bcc86cfadcc5abb3726b0434e60fddef97c9b60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ed:d2:d6:5d:7e:75:e9:07:fe:67:d5:c2:45:
                    dd:ba:02:1e:dd:e2:cb:61:55:85:7b:83:62:03:0c:
                    76:75:cd:56:11:ce:b5:43:b2:59:41:7c:3d:cb:60:
                    fe:4b:5a:98:a6:f8:68:25:38:41:a0:31:3f:53:e4:
                    72:fa:e7:a1:47:64:cc:4b:7a:b8:28:9f:62:9e:53:
                    b1:1f:f7:29:29:20:ab:90:b3:7d:7b:b4:01:f4:0e:
                    6b:d6:d5:85:18:b5:fc:f1:b9:d5:4b:51:67:22:bc:
                    bb:74:64:7e:bb:27:64:f9:df:a0:fb:b2:6c:bf:9d:
                    71:22:6d:16:c4:42:d4:90:6e:2b:d2:2d:6b:a7:48:
                    ab:58:38:b2:1f:7c:66:b9:0b:f8:4f:a1:c5:43:a1:
                    91:a9:ca:ea:68:3f:e2:e2:3e:76:db:e7:c5:a0:54:
                    df:e1:fc:42:3b:2d:e5:28:6d:61:59:d1:5c:3e:2a:
                    84:3f:2c:b9:a2:53:c6:5b:57:3c:80:2b:cc:fb:40:
                    52:5f:d7:e7:4b:fb:98:9d:7d:53:b8:c9:20:9d:7a:
                    2d:dc:6a:d6:23:8a:49:d9:33:43:fc:ee:df:e1:80:
                    e3:3e:3c:f2:05:28:10:91:29:28:a8:f8:54:46:ad:
                    c0:f7:e2:27:56:6a:f2:42:f7:64:80:2c:be:73:c2:
                    49:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CC:86:CF:AD:CC:5A:BB:37:26:B0:43:4E:60:FD:DE:F9:7C:9B:60
            X509v3 Authority Key Identifier:
                keyid:DE:37:81:2B:D4:52:73:EA:3B:2A:53:D9:E9:6F:6D:BA:21:58:26:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b26c44-9d16-4c3d-9f1d-af646c8f4af6/1/3jeBK9RSc-o7KlPZ6W9tuiFYJvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:f6:f5:42:ad:8c:56:ea:10:6d:29:9d:17:0c:e6:c7:95:43:
         73:5a:e4:1c:bf:0b:8d:37:3b:e7:37:9e:ed:2e:52:3d:e3:e3:
         d4:ab:42:9d:53:02:1a:99:b2:c9:0b:31:03:79:a5:c1:be:aa:
         4a:41:dd:8c:92:d0:5d:7a:b0:b5:6b:4b:14:7e:3f:d1:4e:2c:
         fc:f2:26:43:15:54:b1:3e:af:55:79:e9:52:bb:26:ba:d4:b3:
         72:77:99:68:a7:99:c8:0f:6b:1a:21:7e:6b:82:4c:f9:eb:57:
         9a:29:05:d1:c6:54:c5:44:bd:b9:31:8c:3b:ea:99:c9:3a:53:
         26:47:fa:9b:71:72:2a:c7:65:c9:7d:9f:36:af:5a:7e:81:1b:
         48:42:2a:d3:7a:d0:5e:54:7e:c3:2d:b7:93:7f:f6:00:57:ca:
         e9:05:9a:59:88:6c:a5:b9:52:dd:ea:cc:36:23:21:96:74:c8:
         4a:94:70:94:49:0d:d7:99:91:95:d7:d1:44:8c:67:f6:bd:4a:
         67:58:1e:57:8c:c7:bb:7b:a2:ee:96:b5:13:36:52:de:17:7a:
         74:0a:6e:9c:49:05:42:bb:1a:c6:af:f5:dc:b8:2c:c2:c8:81:
         ce:13:00:ba:1e:f7:14:89:47:ca:44:f2:af:c3:c8:7b:a6:f4:
         14:83:58:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----