Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
File:                     34h388VbUo4aKds9eZIGVvDGaus.mft (raw, json)
Hash identifier:          H2SYOjfCJSGEo6+6llwwyyiV/2QFBmsfJ5YMdZIrW4c=
Subject key identifier:   BA:62:71:6C:3E:F3:21:CC:D0:D9:C1:D5:19:7B:B0:A5:9E:D6:7C:A6
Authority key identifier: DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB
Certificate issuer:       /CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
Certificate serial:       01962F3DCC5508EA3292DD42C5A83CC78D10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft
Manifest number:          0ED3
Signing time:             Sun 13 Apr 2025 13:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:41 +0000
Files and hashes:         1: 34h388VbUo4aKds9eZIGVvDGaus.crl (hash: Gpqphh/j+KoCndXDbsrmDIh/zDNrEPWKWyc9xvVyYwY=)
                          2: 63KLq4xWCCCiZXA-wVIdQJ4PdKc.roa (hash: WWbZVpPXaQ4lgKGhfzlX90xgl3LD+KyLy9eYy0r99WI=)
                          3: DED9vt3vinq5uo7W8xf1qKgQoDQ.roa (hash: 4ofAOFKN04CoU+Upz0jkwmu0l7yf9aj6OLtWjSx3Wtk=)
                          4: qjem72uO7DgkEP8SDk6XnjOnFt8.roa (hash: oYe+IghrANew49oUvqDKOy68qs0Z1UKOAqVvGxaiu7o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:cc:55:08:ea:32:92:dd:42:c5:a8:3c:c7:8d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df8877f3c55b528e1a29db3d79920656f0c66aeb
        Validity
            Not Before: Apr 13 13:01:41 2025 GMT
            Not After : Apr 14 13:01:41 2025 GMT
        Subject: CN=ba62716c3ef321ccd0d9c1d5197bb0a59ed67ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:55:6b:3c:a1:6b:22:b3:e1:0b:9c:a9:3d:7a:
                    9b:4e:16:7d:28:61:ba:e3:9b:b1:85:97:e6:52:50:
                    a9:fe:82:64:dd:ee:9f:17:73:76:3f:32:5d:2e:fb:
                    7f:ec:d4:d8:29:f5:28:54:66:e0:0e:fe:fe:87:74:
                    4f:8d:3f:6c:e0:2d:0d:00:27:c9:d3:b2:e3:76:3d:
                    b6:2b:ed:eb:1c:8f:e3:e9:b6:ef:ef:ce:ba:bc:a8:
                    22:42:ff:35:66:f0:2a:73:23:04:5a:a3:7f:aa:39:
                    e5:89:99:a1:31:2d:cd:d5:9f:8f:91:58:e2:58:f3:
                    42:cb:5b:65:30:e2:49:e5:6d:33:60:7a:cd:0b:d2:
                    14:c3:c8:fe:fa:51:49:2f:13:a5:9e:20:71:40:d6:
                    8b:a5:b9:09:ed:fa:ee:d3:1e:29:0a:ee:4c:2d:d2:
                    aa:50:75:5d:eb:f9:a6:f7:59:2d:a2:5d:2b:25:47:
                    2c:74:ca:0e:92:4b:7e:25:bd:e7:cb:fe:c7:72:6a:
                    6b:dc:43:51:32:e7:6e:97:ee:a7:aa:c4:a4:f1:b0:
                    12:85:dc:42:02:dc:86:df:c8:c2:9b:66:fe:6d:be:
                    87:ac:ae:13:e2:d1:63:9b:30:05:13:8e:71:db:0d:
                    98:f9:7c:ad:e4:6f:98:78:35:43:c2:b7:eb:8e:c6:
                    cc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:62:71:6C:3E:F3:21:CC:D0:D9:C1:D5:19:7B:B0:A5:9E:D6:7C:A6
            X509v3 Authority Key Identifier:
                keyid:DF:88:77:F3:C5:5B:52:8E:1A:29:DB:3D:79:92:06:56:F0:C6:6A:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34h388VbUo4aKds9eZIGVvDGaus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d21d60-210f-40b3-9d89-25455a8ddd45/1/34h388VbUo4aKds9eZIGVvDGaus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:1a:1d:0a:ce:9a:ff:c7:8e:18:4b:c5:a0:37:7a:67:bd:c8:
         47:de:49:76:da:a6:48:fa:d4:ce:03:27:9a:3d:48:99:03:ae:
         f9:a8:11:34:eb:7b:1e:db:b0:42:01:29:71:a5:8b:c4:c1:b2:
         09:53:ee:5b:e6:21:e2:d9:35:79:1c:78:1b:04:b1:9a:b1:52:
         5a:c4:70:51:de:fa:08:4f:78:e7:9c:89:b6:69:67:20:25:89:
         ef:a4:70:50:4f:34:3f:e4:92:3a:66:3a:60:20:1a:68:44:09:
         a0:13:21:98:c3:ed:16:66:59:c6:ba:e8:dc:bc:7f:ae:0e:e9:
         e1:50:f5:93:8e:55:a7:c8:1c:54:0c:aa:fc:2f:51:1b:11:b3:
         00:e4:79:c5:05:91:64:76:63:76:57:34:e9:d9:00:48:a1:01:
         b7:af:d7:06:0f:40:48:4d:a9:f4:cc:c5:73:92:e0:d3:18:18:
         b6:1d:54:fc:44:4e:55:d7:33:ae:d0:e8:53:54:05:dc:0b:6a:
         84:1b:b3:d9:bc:95:06:ba:66:53:54:94:d9:7b:82:f9:4d:d9:
         4c:42:8f:3b:06:ae:b9:28:95:b0:ab:74:8c:47:fe:f5:f5:39:
         8b:2b:3c:ee:46:ea:98:d7:e2:65:6c:98:bd:c4:a7:00:f6:9f:
         30:9d:16:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----