Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
File:                     _3CGjwwsIYdl-mtTq5rwZf8znwY.mft (raw, json)
Hash identifier:          XedKuTtGJI8lDIE84bX8mOjXlZR2XemXPNbdqSADQSo=
Subject key identifier:   1F:2B:F1:64:57:B5:12:26:FA:82:5A:01:32:D6:14:42:83:F2:E4:80
Authority key identifier: FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06
Certificate issuer:       /CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
Certificate serial:       01962E61CB921DCE84C058860BFEA3E08067
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft
Manifest number:          0C24
Signing time:             Sun 13 Apr 2025 09:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:23 +0000
Files and hashes:         1: ReFijUPsIVT0JnrY05_yeSrYpfM.roa (hash: 6xv/Nzbw1MhH+laW+tJrBXU6SEJVZqBXBHHnSnM5yB0=)
                          2: _3CGjwwsIYdl-mtTq5rwZf8znwY.crl (hash: rBo5tjPSzrOWj3GNSeA+2NEq2W54tHCoAS5sYm8OKq4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:cb:92:1d:ce:84:c0:58:86:0b:fe:a3:e0:80:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff70868f0c2c218765fa6b53ab9af065ff339f06
        Validity
            Not Before: Apr 13 09:01:23 2025 GMT
            Not After : Apr 14 09:01:23 2025 GMT
        Subject: CN=1f2bf16457b51226fa825a0132d6144283f2e480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:57:c9:7b:a5:85:27:54:13:b1:b9:cc:99:1a:
                    a1:9d:c6:a1:eb:f5:ac:dc:9b:5b:c2:d2:5d:50:1f:
                    91:c8:05:0f:bd:95:66:62:05:0f:f5:35:b3:4d:98:
                    f9:ad:5e:c1:38:1f:11:29:40:67:e2:0c:da:4a:09:
                    5c:6a:02:dd:1d:3a:c0:8e:d1:3a:e5:88:41:d6:e5:
                    a4:39:0e:bb:ee:aa:c4:86:a3:8a:d2:db:46:5f:5e:
                    01:28:40:42:64:11:82:aa:43:9a:cf:db:22:91:af:
                    1e:e7:d7:1d:f2:d1:cd:31:00:e5:cd:20:8b:73:d0:
                    58:ab:83:94:9e:b0:f1:c6:13:97:86:1d:96:49:e0:
                    8d:ad:89:24:4f:97:7d:94:32:2d:ae:a4:2e:bc:3c:
                    13:2e:e8:3f:73:0c:10:92:49:ce:d4:80:4b:da:d5:
                    c6:ed:e8:88:63:a6:dd:ef:ab:ce:25:12:02:f1:75:
                    25:6a:12:1f:0f:82:76:7f:b7:9e:cc:c4:dd:45:a2:
                    eb:40:39:d8:39:74:d3:b3:ae:c9:82:3e:7e:18:f6:
                    09:ea:ce:af:29:3f:db:6e:1a:2d:19:89:92:cd:3e:
                    b8:86:d5:c1:0e:df:5f:5d:67:96:92:c3:ff:e2:17:
                    60:ac:9f:2f:b7:89:69:78:c0:33:af:54:ec:c0:84:
                    4f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2B:F1:64:57:B5:12:26:FA:82:5A:01:32:D6:14:42:83:F2:E4:80
            X509v3 Authority Key Identifier:
                keyid:FF:70:86:8F:0C:2C:21:87:65:FA:6B:53:AB:9A:F0:65:FF:33:9F:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_3CGjwwsIYdl-mtTq5rwZf8znwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/354b3b-5d76-49d5-a56c-007c4e58527e/1/_3CGjwwsIYdl-mtTq5rwZf8znwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:03:da:43:33:c3:ad:e8:34:70:20:35:b5:49:d1:c5:79:59:
         bd:96:8f:d2:a6:73:e1:62:b8:b4:cb:e0:a5:bf:75:c5:e4:a3:
         f7:19:cb:7b:f4:c3:da:49:0d:20:e4:c2:54:0f:54:66:e1:4b:
         64:76:e4:2a:13:58:e2:cd:d8:dd:b8:c6:06:f0:5d:fe:35:b1:
         28:78:ae:4d:80:85:88:5d:4d:21:67:c8:df:e4:51:b8:dd:0e:
         f6:85:b5:1b:63:f8:d1:ed:2d:20:2a:08:94:3b:d6:7e:a0:10:
         78:aa:d4:de:e3:30:ed:53:65:d2:ee:c6:d8:55:66:36:79:0a:
         e7:69:2a:cd:ff:78:29:95:0f:b2:22:f4:58:56:62:cd:01:65:
         83:d4:d7:76:32:d5:6a:9c:e5:19:10:c8:af:bc:e4:1b:98:39:
         ea:20:88:90:1e:d6:4d:d2:c0:83:04:84:a7:86:26:14:07:1f:
         f2:00:0d:b7:9f:8d:5f:d1:58:d6:99:3f:03:3a:a7:51:ff:1c:
         bb:57:d6:d8:fa:aa:42:84:ae:b5:e9:b5:c6:79:cf:cc:c8:56:
         79:4c:44:6e:d7:a1:cd:3a:b2:31:8a:9b:b0:96:18:95:61:b8:
         a4:74:85:20:b3:a7:40:29:9e:7c:3c:16:59:35:fd:1e:98:3f:
         4c:95:da:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----