Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
File:                     3z_cS_M72A_hKNdWhD9gs51b7uM.mft (raw, json)
Hash identifier:          6xEJZ8vBn5wpD6pj6Akbl7APfY4rV3e8PQw5+m86BUE=
Subject key identifier:   53:A6:87:D4:8C:1F:98:3B:E6:EB:E4:CA:0C:80:BB:F5:24:3A:13:82
Authority key identifier: DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3
Certificate issuer:       /CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
Certificate serial:       01962F74C8F3F2BC96A86B37EC044CB05980
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft
Manifest number:          045F
Signing time:             Sun 13 Apr 2025 14:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:44 +0000
Files and hashes:         1: 3z_cS_M72A_hKNdWhD9gs51b7uM.crl (hash: cU5UOTr7uui2YkPmFr4gIPNLLfrDq2zQCn5SOx84Fso=)
                          2: A_DdgpizT--rlZ-ab-YZdIwkNLE.roa (hash: hfZgPH/DllsEyaUJjbheadfPG1jNf80tTNcLY41EaYQ=)
                          3: J29KR6WIqb2jKkibcGzZyVD-APE.roa (hash: cX4I13kG6IWcU4y27MvdylWTn5/srzMdc6rdtCLCSL4=)
                          4: RVm4PleqV8m6zGkcPiKBRGWO1cI.roa (hash: 3p0hXdk+JmHhQEiq1MExor2f3lGKmZyobEJTxOu9buE=)
                          5: eHnC0ZqJNqxv3y7mak9QRJMJw-o.roa (hash: +LqAwsdmA3jPuO+2IgsX5kZHBO+HuvNtjbjVsU8ziig=)
                          6: f25v4uVZY4JbTyMqNXKXGA35WKk.roa (hash: Cmqw5364kiAvR31aujca3rQebhgV1WXm34C80bI/lTU=)
                          7: xJ0_FRg6EplS-mzoDbYvP1y_mUw.roa (hash: 7evtOJQCPXqekbIigyPzPGbzquzgJixLY3c438GOL/g=)
                          8: zTq6cqLbZBiRPZ7jFpyiF-kS2nU.roa (hash: 58LUL/KkVIlVDMCj1/N1vyBYpPzDWYfUKAfSIQ9KHh4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c8:f3:f2:bc:96:a8:6b:37:ec:04:4c:b0:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df3fdc4bf33bd80fe128d756843f60b39d5beee3
        Validity
            Not Before: Apr 13 14:01:44 2025 GMT
            Not After : Apr 14 14:01:44 2025 GMT
        Subject: CN=53a687d48c1f983be6ebe4ca0c80bbf5243a1382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:76:f0:72:b2:0e:44:38:26:99:87:17:d4:0c:
                    68:d4:9a:60:a4:d2:5f:55:f8:1c:03:bb:c3:14:9c:
                    5e:64:ec:d9:90:f0:80:0e:c3:df:21:b7:f8:ad:8c:
                    df:d5:c4:11:68:fc:5d:7e:15:fa:af:3e:83:26:16:
                    8a:1b:3e:66:7a:1b:81:da:1f:57:ca:94:74:12:36:
                    03:c7:5d:87:3a:03:14:95:42:81:e5:47:fa:b0:b8:
                    57:f7:2a:c1:4f:fb:1e:7b:2a:d2:40:d2:4e:89:d3:
                    4f:d0:b1:4b:f5:47:93:48:45:8e:f6:92:d0:be:4b:
                    e6:3a:5f:55:87:17:ae:5e:30:a6:0b:2a:5f:6e:36:
                    ee:99:dd:06:7d:a8:a7:f8:46:f8:1b:56:73:c2:d9:
                    d9:4c:80:b4:e4:0e:77:02:34:bd:14:a7:51:02:29:
                    13:22:65:bf:57:2b:ea:a2:e9:16:b6:ad:41:5c:7a:
                    82:c9:da:20:54:2e:3e:88:2c:80:3d:63:19:e8:3e:
                    0f:85:82:16:a5:03:fb:d0:30:12:a6:36:07:54:73:
                    ae:b7:05:1d:39:b1:2d:43:70:a4:83:78:e8:90:49:
                    a3:9d:74:d6:50:68:a0:6f:ca:51:0c:09:10:6e:7f:
                    86:d2:8e:93:5e:c1:56:a3:5e:29:fb:98:0d:0d:65:
                    fa:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A6:87:D4:8C:1F:98:3B:E6:EB:E4:CA:0C:80:BB:F5:24:3A:13:82
            X509v3 Authority Key Identifier:
                keyid:DF:3F:DC:4B:F3:3B:D8:0F:E1:28:D7:56:84:3F:60:B3:9D:5B:EE:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3z_cS_M72A_hKNdWhD9gs51b7uM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/325cd3-7edb-4026-8583-a473ec5410c3/1/3z_cS_M72A_hKNdWhD9gs51b7uM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:a0:ff:1a:dc:77:43:0a:59:5d:07:6c:98:38:a0:ff:61:60:
         c6:d5:3a:56:6d:4f:88:d0:6c:7b:db:3b:c5:d3:32:66:5d:c0:
         ef:cc:4c:4c:36:25:d9:12:86:8d:43:c7:08:e6:4e:4c:6b:32:
         07:b8:71:fe:9f:5d:40:e0:94:10:66:c6:98:b8:08:f4:41:d2:
         9e:fb:03:15:45:f8:6a:33:7d:c5:1a:09:0a:47:8b:b3:fb:51:
         87:2d:14:5a:31:3f:29:38:e1:2a:f7:73:81:6a:51:a6:20:60:
         ec:8a:2d:b7:ba:29:41:9c:ba:f2:55:cc:bd:b7:42:61:6f:4e:
         ec:e0:fc:fa:3a:5e:a5:b1:d8:1f:99:8d:fd:cf:77:b5:b3:1e:
         55:f5:87:63:f4:ea:d1:9e:59:67:3d:21:7c:ba:27:ee:9d:f4:
         48:bf:7b:7b:88:6c:d7:d7:39:cc:3a:d4:b1:48:ec:a0:fa:f5:
         bb:5f:e6:0f:4e:e4:b5:a8:9e:e6:90:05:dc:b9:de:27:eb:92:
         a9:27:6a:56:78:99:b6:b2:0e:4f:b0:cd:ec:a5:27:72:50:7c:
         5a:0a:ea:df:87:0e:1b:cb:5c:4a:db:cc:94:46:c5:bc:18:6f:
         1c:9a:85:2f:97:33:02:29:37:dd:af:1c:ff:21:d1:8d:f1:2a:
         0f:10:de:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----