Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
File:                     PlDR3TG8dEm6zBhksBr5lMVH79M.mft (raw, json)
Hash identifier:          D8HZGq4WvBs4cBq/Rw19KdPc8AkzB24j062blhRX1Yw=
Subject key identifier:   D0:32:14:CB:E6:0B:4E:F0:3E:1C:56:4E:48:92:A4:F6:5B:2B:E5:B3
Authority key identifier: 3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3
Certificate issuer:       /CN=3e50d1dd31bc7449bacc1864b01af994c547efd3
Certificate serial:       01962F74C70873E4BE7F2412183A749224EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 14:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:44 +0000
Files and hashes:         1: PlDR3TG8dEm6zBhksBr5lMVH79M.crl (hash: cCNkvIdF/mMxOEfVdgeHgiGWmzXR/1oI8XS2kHlnt2s=)
                          2: k0fv_0lBTVHhkgh3M6y4FfdKWug.roa (hash: NS6EWo/2W4cdxM4+yYUneBPcsKtB9dlJYih0Lk7s4iM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c7:08:73:e4:be:7f:24:12:18:3a:74:92:24:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e50d1dd31bc7449bacc1864b01af994c547efd3
        Validity
            Not Before: Apr 13 14:01:44 2025 GMT
            Not After : Apr 14 14:01:44 2025 GMT
        Subject: CN=d03214cbe60b4ef03e1c564e4892a4f65b2be5b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:10:37:ab:07:2c:9b:7f:e9:48:65:81:f6:e3:
                    a3:f6:84:1f:57:c1:0a:e2:16:99:08:68:fd:7e:2e:
                    e9:13:1c:2c:cf:05:7b:fd:e1:a4:6e:2e:de:17:80:
                    8c:a6:27:9f:c3:e0:f3:9f:c1:3e:97:b1:5d:b2:57:
                    44:65:5f:53:f0:56:0f:12:50:81:83:85:e4:e0:d8:
                    75:1d:73:86:5d:86:cd:d6:83:3a:3c:ae:55:e2:63:
                    47:94:41:21:1b:46:1a:c5:78:c4:47:b2:06:8c:da:
                    c6:c1:9d:12:54:e2:ae:ed:2b:74:56:b4:73:e3:e2:
                    54:ad:36:68:fa:65:54:80:fb:98:6b:e6:4d:6c:6d:
                    e6:0b:95:5c:c5:28:51:e4:32:2d:84:e4:4d:9c:22:
                    a1:16:04:53:91:39:25:4c:9e:54:19:50:65:b7:76:
                    eb:2a:d8:32:cb:43:36:bc:46:e5:4e:a8:dc:8d:67:
                    bc:bf:ca:84:bc:56:22:44:7b:b5:c1:b7:35:c4:42:
                    34:ff:5c:a3:07:51:dd:e8:72:af:e9:73:3a:42:31:
                    05:3d:ff:cd:6f:7e:c8:60:77:5f:6d:67:5b:40:25:
                    04:fb:d1:a6:54:e6:2a:5c:c0:23:43:a0:68:7d:65:
                    d3:85:53:c4:87:27:72:93:56:87:af:9e:ae:e8:0c:
                    6f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:32:14:CB:E6:0B:4E:F0:3E:1C:56:4E:48:92:A4:F6:5B:2B:E5:B3
            X509v3 Authority Key Identifier:
                keyid:3E:50:D1:DD:31:BC:74:49:BA:CC:18:64:B0:1A:F9:94:C5:47:EF:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlDR3TG8dEm6zBhksBr5lMVH79M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/6ec39c-a9d4-4a12-810a-4f0650da545b/1/PlDR3TG8dEm6zBhksBr5lMVH79M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:5c:0e:14:11:d2:8a:03:f3:0f:be:31:f2:5c:34:a9:a2:a5:
         96:0a:07:b1:34:44:d0:4d:24:da:75:be:7a:ac:3d:ba:e4:34:
         90:ba:fc:f7:a4:c8:58:98:3c:95:e4:52:3c:3e:5a:9e:84:8b:
         d8:9f:30:f1:ec:ba:9f:03:77:e8:3c:66:ee:5f:b1:b2:de:fd:
         a9:c8:d1:39:37:5b:c8:a8:bb:7f:8a:26:60:7b:11:8a:2e:a1:
         b8:4e:d6:97:99:32:3b:94:22:46:15:f0:8d:ab:b8:01:a4:aa:
         2b:ff:66:ae:20:72:4e:4f:d7:7d:99:9d:d8:6e:3c:86:98:ca:
         49:3a:1e:0b:6e:0f:20:56:7b:25:bd:81:63:32:a0:33:6c:1b:
         c4:93:f5:fb:b9:a9:cf:62:1d:d4:05:73:60:28:71:02:8f:36:
         86:be:55:63:4f:75:8b:ee:e3:44:74:c3:dc:05:e6:aa:df:29:
         42:8f:3f:a0:07:9b:5e:f7:a4:1d:b0:9a:69:e2:94:88:7a:b2:
         84:02:9f:19:84:71:c8:b1:67:2c:0d:72:cf:a9:c1:5e:a6:dc:
         e9:e5:dd:dd:22:ae:32:bc:d6:f2:d0:c2:1f:07:b7:48:66:cf:
         a4:f5:4d:6d:80:83:02:c5:ef:59:fd:79:8e:a9:7d:d9:12:fe:
         25:d8:fd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----