Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
File:                     3PhcNsaW1dssu0j9Q-ghc37jQic.mft (raw, json)
Hash identifier:          fL8gnhMORtCM+fL9nNY3X3m8joJDR5oiADv7R6UKets=
Subject key identifier:   D3:1A:25:DB:1B:2C:93:9F:A9:C4:EB:04:15:BF:C7:AA:5C:77:7E:EC
Authority key identifier: DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27
Certificate issuer:       /CN=dcf85c36c696d5db2cbb48fd43e821737ee34227
Certificate serial:       01962DF395095C963E5375CCB209D8E49D42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
Manifest number:          0F24
Signing time:             Sun 13 Apr 2025 07:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:00 +0000
Files and hashes:         1: 3PhcNsaW1dssu0j9Q-ghc37jQic.crl (hash: xV02pTSovpjjbDHc9gldqxP0lM60xFzOVg5L+SFlbkM=)
                          2: AuGSVrNkGgUtthLzU1YbunCRJmA.roa (hash: N+p3SVnY5s1RjPh5Td733eJn6W460syQCiw/MVZ+pqA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:95:09:5c:96:3e:53:75:cc:b2:09:d8:e4:9d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf85c36c696d5db2cbb48fd43e821737ee34227
        Validity
            Not Before: Apr 13 07:01:00 2025 GMT
            Not After : Apr 14 07:01:00 2025 GMT
        Subject: CN=d31a25db1b2c939fa9c4eb0415bfc7aa5c777eec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:87:93:98:71:ec:66:7f:51:db:27:51:60:33:
                    5d:b8:c9:50:25:d9:02:6c:33:51:02:7d:06:d3:c9:
                    33:15:98:0a:a5:fe:1f:4d:36:68:50:9e:d0:55:47:
                    74:84:16:d9:96:96:3a:10:08:11:04:02:4c:0b:d3:
                    b9:a0:47:c3:2d:21:b5:22:83:28:1f:19:86:f4:94:
                    4b:a2:92:5c:56:84:b9:9a:c4:92:26:9f:bb:87:ac:
                    3f:e2:67:42:de:e9:46:23:e5:e4:ca:5a:ef:3d:a8:
                    09:99:de:ef:30:47:f7:26:f7:8f:af:65:52:d7:50:
                    65:e8:79:73:c5:38:7b:ad:96:28:3d:4c:4e:18:23:
                    4c:5b:dd:dc:b7:c5:fb:8a:a5:d5:11:1e:31:ef:4e:
                    c2:fc:e1:4b:de:b6:8d:a3:1f:16:f0:17:9a:79:e0:
                    97:a9:60:3e:81:71:4e:a0:3d:4e:17:39:ad:cb:64:
                    5d:ff:6e:ba:15:86:8b:a0:bd:10:ad:90:27:2a:e4:
                    b8:d8:d0:eb:4e:09:6b:00:06:32:c9:38:ed:78:84:
                    5e:eb:f4:64:fe:5a:50:49:cf:9f:73:55:65:f4:cd:
                    2d:36:ba:7e:24:6f:2c:a5:ee:27:70:44:f2:eb:24:
                    fa:a7:ac:b2:00:f7:6b:6c:44:e3:0c:90:5f:92:82:
                    12:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:1A:25:DB:1B:2C:93:9F:A9:C4:EB:04:15:BF:C7:AA:5C:77:7E:EC
            X509v3 Authority Key Identifier:
                keyid:DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:fe:81:8e:23:5c:b8:8d:55:35:4b:e5:2e:79:1c:19:c1:df:
         9a:fc:65:f7:23:19:2e:69:58:bf:53:77:7a:45:2b:96:88:8f:
         70:93:82:8d:b8:b0:8f:9e:9b:ee:01:18:ed:0d:83:e9:c8:73:
         c8:24:7d:75:2d:9d:d9:00:d8:58:c7:80:b1:eb:58:4e:10:31:
         e1:e6:09:b8:45:f3:5f:98:6a:89:7d:46:21:84:63:3e:97:d2:
         51:3c:09:09:c1:72:bc:77:ee:1b:b0:a1:f4:ff:a8:8a:c3:98:
         72:8c:7c:1c:43:05:53:cb:40:f2:55:2b:58:d3:a0:d4:80:54:
         3e:ec:77:4e:08:f2:66:ab:8f:b4:ab:17:cb:88:99:42:4c:fa:
         fa:22:04:a1:0e:8d:fd:f0:11:79:f2:49:9c:b3:5a:64:ef:c9:
         e8:5d:99:42:e5:c0:80:dc:f8:4d:d8:d8:48:09:c2:24:10:75:
         9c:20:b9:82:ab:69:eb:e1:9a:de:f7:84:59:66:02:07:14:a3:
         b3:dc:27:a7:f0:fd:7e:11:95:d3:28:5a:d1:5b:e7:41:85:ea:
         39:a1:e1:dd:09:a2:a6:d7:91:e2:0f:4b:05:02:c7:ef:55:2e:
         10:c8:da:7c:a3:f7:02:8a:c7:77:3d:41:8e:20:48:ae:cd:4f:
         a0:3c:cf:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----