Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
File:                     15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft (raw, json)
Hash identifier:          9/XUVVSP1bhO6Id89CrpQ2hde9yHJeYdwfyyYKXNsPI=
Subject key identifier:   3D:3D:86:CA:7C:C3:0A:E7:4F:B5:B1:9C:2D:85:AB:97:91:8C:A5:5C
Authority key identifier: D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
Certificate issuer:       /CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
Certificate serial:       01962ECF80E7B257CABE6C468BAE3BD0FFB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
Manifest number:          0C74
Signing time:             Sun 13 Apr 2025 11:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:12 +0000
Files and hashes:         1: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl (hash: x0lNAWs4H6GGV7/E43UvxEeZEKipbWiGxhPGXdsLTQg=)
                          2: 4nov_nt6GEsQWCkcquH9SVS1bMU.roa (hash: Ylgq5sDsdH7k78HDH4UBmheF5iyrFEvrHVeDharXE+U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:80:e7:b2:57:ca:be:6c:46:8b:ae:3b:d0:ff:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
        Validity
            Not Before: Apr 13 11:01:12 2025 GMT
            Not After : Apr 14 11:01:12 2025 GMT
        Subject: CN=3d3d86ca7cc30ae74fb5b19c2d85ab97918ca55c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:06:33:b2:b7:6c:2a:61:16:0f:70:9b:06:56:
                    a2:c0:f4:3b:22:d4:0a:99:b5:6a:b7:77:9d:02:75:
                    ee:89:9d:aa:40:db:d1:b0:3c:ec:33:79:38:0b:a3:
                    2f:63:83:55:89:f1:08:9e:f8:d5:a0:60:cf:72:fc:
                    30:0b:2f:ad:8c:9c:7a:2d:d8:84:5e:87:e0:85:9f:
                    05:8b:a1:ea:83:0a:70:e0:12:4d:0f:1a:7e:16:9f:
                    65:3f:1d:b8:f6:5c:26:fc:f7:12:13:f9:36:4e:48:
                    80:47:b5:75:6a:b5:53:ac:eb:d3:aa:fb:00:88:ee:
                    ba:95:68:e4:92:de:8d:a8:5e:bd:7c:7f:73:a0:13:
                    c9:75:8f:bf:4e:24:c9:47:8a:09:a8:19:ee:48:5f:
                    6e:0e:00:72:bf:6c:57:f5:2c:16:84:8e:d4:bc:32:
                    13:2b:a3:2d:15:3d:61:96:5c:40:f0:c2:4a:b8:e2:
                    b9:92:f1:ba:59:aa:43:43:fa:32:8d:a7:4b:e4:2c:
                    96:ab:95:96:50:ac:ec:fe:66:31:1a:27:ed:c9:22:
                    a2:68:8c:ae:59:9f:4a:91:b5:28:cd:a9:d3:f9:0a:
                    cc:96:18:9b:fa:de:28:0e:8b:e4:f6:58:05:6c:3f:
                    79:8e:ea:ba:95:a5:f0:b0:79:3c:3a:50:ce:f1:fd:
                    ef:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:3D:86:CA:7C:C3:0A:E7:4F:B5:B1:9C:2D:85:AB:97:91:8C:A5:5C
            X509v3 Authority Key Identifier:
                keyid:D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:10:f0:38:0d:50:af:cc:27:9c:f8:c0:b4:e0:d0:f2:2f:90:
         fb:cf:32:2e:4b:a2:3b:75:22:59:9c:9f:5e:8d:f9:a9:a7:fe:
         01:66:af:23:4d:57:33:b9:c2:49:29:c0:53:9e:15:e8:52:fd:
         f1:19:f7:a0:28:f6:36:93:c4:c5:fe:d6:3f:95:89:b5:4e:a7:
         28:7f:3f:f6:c2:e5:02:78:e4:21:7c:1d:5d:66:7d:2d:7c:d7:
         15:80:4e:05:ad:41:9e:52:d2:c9:ec:ec:48:f6:bd:2a:e9:dd:
         af:f6:41:01:39:90:30:ab:f2:d3:8e:35:64:4a:04:6a:88:d8:
         50:fe:4c:b2:ca:e1:1f:83:59:4f:c8:6d:d1:5e:b0:c2:a2:57:
         69:ef:4a:c7:2f:e2:7b:70:0d:e7:a0:73:e3:81:c4:62:ca:b1:
         bd:04:0e:a7:26:d2:75:f5:a5:eb:be:a8:0c:0b:f7:fa:3e:63:
         e6:37:4a:f5:a4:9a:8b:07:80:35:03:5c:23:8f:91:75:7a:81:
         96:85:ec:a6:bf:5d:30:e7:83:50:48:b8:6b:b8:96:ad:e2:fc:
         3c:c0:84:0f:c9:4c:ac:df:49:28:c4:2a:5c:52:e6:2f:b0:b3:
         89:00:d0:74:6f:ef:42:4e:4f:5a:f0:1d:38:ba:df:55:cd:9b:
         d4:c1:58:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----