Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
File:                     3ihtA6NzvWie8EYQocithHPr3a0.mft (raw, json)
Hash identifier:          0suog7eDMGt3hehO6rKznbseXxwIpcm5F85Q+0mi3LA=
Subject key identifier:   EA:C7:85:24:62:AF:FB:B3:A8:7B:7B:97:E0:4F:30:1A:41:B6:0F:8C
Authority key identifier: DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
Certificate issuer:       /CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Certificate serial:       01962FAB33C7C8059C13CE4F271C46229611
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
Manifest number:          102B
Signing time:             Sun 13 Apr 2025 15:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:11 +0000
Files and hashes:         1: 3ihtA6NzvWie8EYQocithHPr3a0.crl (hash: wFNVFAsAMPLBcJ7KyMv/aOgG5w99WBQIpojjIN6+Th0=)
                          2: _Sn3RhfY--fiVliyrSpcw_Dpx8U.roa (hash: 0DlsX3tbgemelzimR5EC4gu2Xnu0fF/hzb1n4QMYZI8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:33:c7:c8:05:9c:13:ce:4f:27:1c:46:22:96:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de286d03a373bd689ef04610a1c8ad8473ebddad
        Validity
            Not Before: Apr 13 15:01:11 2025 GMT
            Not After : Apr 14 15:01:11 2025 GMT
        Subject: CN=eac7852462affbb3a87b7b97e04f301a41b60f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:25:e6:ae:8b:5d:54:07:d6:a0:6d:3f:c9:f3:
                    8a:d2:6f:b0:f0:d4:da:78:73:e0:be:d6:5b:78:72:
                    3b:c2:c6:67:c7:bf:18:48:d2:9b:3f:26:cc:76:ee:
                    7c:be:c2:73:74:ef:a3:d0:2d:a6:f2:c7:1f:04:7f:
                    88:2a:0c:f3:92:40:12:94:f2:fe:44:95:61:1e:b2:
                    1c:fa:3a:71:7f:ef:bf:c4:d9:7a:59:97:9d:8f:2b:
                    18:86:e6:2a:d5:a3:af:c7:d8:7e:9d:2a:a8:c8:5c:
                    71:31:4b:be:92:97:04:79:9b:17:ed:8f:8e:e0:d5:
                    91:b1:cb:67:fd:ac:e3:b6:e1:52:ce:49:e1:40:53:
                    e0:49:45:9e:f6:cd:69:be:b7:60:aa:96:11:cc:6e:
                    d8:a9:15:6c:d6:15:3e:94:ee:f4:38:50:b8:4c:a6:
                    a6:e9:b4:fa:1d:0c:27:1c:6d:72:2f:74:8b:40:ea:
                    39:69:d6:28:82:65:0e:6d:e4:fc:4c:40:20:f3:2b:
                    93:12:55:af:22:f3:e4:cb:75:f8:3f:e5:d2:de:18:
                    b8:fb:4f:b2:bc:47:5f:a2:c0:f8:3a:64:ff:32:fc:
                    e8:29:93:18:34:66:b6:5b:3e:d7:cc:8f:aa:0b:cc:
                    11:e5:87:17:7d:a6:bd:65:d3:b5:06:66:52:f9:ec:
                    29:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C7:85:24:62:AF:FB:B3:A8:7B:7B:97:E0:4F:30:1A:41:B6:0F:8C
            X509v3 Authority Key Identifier:
                keyid:DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:aa:38:6a:2a:d6:93:b3:d3:c6:cd:cf:e8:99:cc:c8:82:27:
         81:8e:bd:e6:22:9a:db:c9:a2:32:83:71:18:c0:e4:24:f1:12:
         fc:13:7b:99:ef:8b:89:d1:15:38:66:c3:1f:8d:83:07:2e:c2:
         1a:6f:e6:73:d5:fb:7e:db:66:cc:f7:fe:6e:23:04:95:c9:5a:
         d6:fb:65:d2:d8:2e:82:b8:63:af:52:f8:29:cf:8f:cb:73:41:
         44:96:87:56:53:43:60:ee:14:e7:e7:04:19:89:1e:c9:bc:d3:
         e2:72:af:05:86:88:9f:c8:26:82:5d:bc:aa:b2:38:0e:be:d5:
         1e:be:70:5d:fe:97:39:16:55:c4:62:db:e1:e2:4b:91:91:12:
         3f:6a:ac:a5:9a:1d:20:69:7b:6a:45:25:a4:ff:22:a5:e8:71:
         ae:c0:a2:14:0d:87:57:be:78:b5:3e:7b:73:6d:58:4e:b9:fc:
         17:42:a3:a2:5e:7c:d0:5c:eb:ec:58:e6:8e:19:d2:91:46:96:
         68:55:7d:d7:32:b5:30:72:b8:93:fe:80:36:4e:c9:cc:aa:c5:
         90:79:48:e3:38:d8:4d:e6:ab:85:49:a9:18:1e:a3:cb:eb:fa:
         3e:ad:55:df:ae:ac:d6:9f:ff:59:eb:b9:90:56:ea:62:bf:45:
         69:99:97:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----