Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft
File:                     PKap1LWSRrTjNhThpLWRthGOihU.mft (raw, json)
Hash identifier:          jkuhT9ntSH+H0trP3m2/AggQ2CGFfWF2YrJQBhPMnZw=
Subject key identifier:   9C:CC:C8:E5:11:98:57:F4:56:80:44:54:DD:70:A5:5B:85:E2:00:06
Authority key identifier: 3C:A6:A9:D4:B5:92:46:B4:E3:36:14:E1:A4:B5:91:B6:11:8E:8A:15
Certificate issuer:       /CN=3ca6a9d4b59246b4e33614e1a4b591b6118e8a15
Certificate serial:       01962E997B84F830B91EDAA36C5D94619CF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PKap1LWSRrTjNhThpLWRthGOihU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft
Manifest number:          108D
Signing time:             Sun 13 Apr 2025 10:02:12 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:12 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:12 +0000
Files and hashes:         1: PKap1LWSRrTjNhThpLWRthGOihU.crl (hash: FOM8MQ2N9C0bZUjiiNZr9nD0Rl10Cr3xb0o/7vowap4=)
                          2: Szhjvm0y4QI0uwIjWJbCdPZPvps.roa (hash: Y0iaHG2LAJbIgjzTxyOFn6Uuz+FyO1yYuNhr0qnz3To=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:7b:84:f8:30:b9:1e:da:a3:6c:5d:94:61:9c:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ca6a9d4b59246b4e33614e1a4b591b6118e8a15
        Validity
            Not Before: Apr 13 10:02:12 2025 GMT
            Not After : Apr 14 10:02:12 2025 GMT
        Subject: CN=9cccc8e5119857f456804454dd70a55b85e20006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b5:bb:f0:60:5b:65:8e:d0:f0:f1:27:78:b8:
                    38:05:12:05:bb:52:a6:09:d9:92:28:75:1e:de:f3:
                    ed:7a:e7:65:6f:50:35:33:86:0f:f0:23:bc:bf:42:
                    4a:bb:12:0c:f2:e5:c5:b4:96:a9:85:4e:f5:2f:30:
                    06:60:b4:f6:5f:e4:b3:8b:f9:4b:9d:77:bc:ee:08:
                    3e:c6:2c:80:6b:e7:31:eb:ec:a0:67:16:18:71:e4:
                    45:8d:0b:e3:07:7f:a7:53:18:ec:19:69:73:3a:ff:
                    3b:66:37:0c:bb:35:12:11:48:b9:89:67:a2:08:69:
                    4e:1b:1e:b4:2b:70:90:eb:a3:5e:e5:3f:5c:3e:0a:
                    4c:81:7a:28:91:32:d9:0b:3e:63:e1:e5:4e:fd:97:
                    61:71:39:79:3d:9f:e7:42:84:6e:b7:41:95:04:52:
                    ca:34:35:24:48:4c:1d:89:e2:d2:79:c4:ee:d1:45:
                    be:db:ae:af:54:34:59:f5:e5:e2:39:04:4d:36:44:
                    c1:43:95:3e:2a:fc:a4:fb:71:bd:fd:79:56:c6:d4:
                    95:c2:4d:d9:51:bb:91:17:44:24:55:4d:26:f2:41:
                    5e:8a:0f:52:f8:36:5a:93:65:6e:b0:e9:36:43:b6:
                    47:80:63:16:56:13:58:8c:b1:85:c0:06:54:5a:ce:
                    e2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:CC:C8:E5:11:98:57:F4:56:80:44:54:DD:70:A5:5B:85:E2:00:06
            X509v3 Authority Key Identifier:
                keyid:3C:A6:A9:D4:B5:92:46:B4:E3:36:14:E1:A4:B5:91:B6:11:8E:8A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKap1LWSRrTjNhThpLWRthGOihU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/dd6518-bf35-4c58-b81b-94b1493df1f2/1/PKap1LWSRrTjNhThpLWRthGOihU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:d4:2f:85:21:84:03:dd:ef:06:36:32:0c:e8:bf:f5:36:a3:
         63:55:10:fa:aa:5a:d7:d7:e5:6a:fd:4f:e8:8a:10:ba:a5:dd:
         75:6a:fb:87:3e:c8:65:ba:7b:32:26:d4:fa:95:00:2e:f4:99:
         11:d6:a3:fc:11:e1:c5:0d:2b:70:0c:c8:d1:90:cf:87:a4:e6:
         d9:55:8e:8c:ff:f2:60:24:c3:23:a7:fd:3f:eb:47:97:83:f3:
         50:90:e0:f1:7c:28:73:72:12:b0:c1:48:47:8d:a0:c8:1a:40:
         01:aa:dc:b7:0f:aa:b8:e1:06:ed:5a:22:c6:50:27:92:70:47:
         0f:d2:54:9e:f6:76:a6:32:5a:c8:71:d6:f0:e0:72:25:58:f8:
         99:07:38:6c:6f:78:96:97:95:63:a2:00:84:1a:9e:e1:4f:b0:
         47:d8:07:25:c2:02:66:ae:d9:54:66:1d:8a:e9:8b:12:04:c7:
         07:b3:49:bc:b2:c3:49:a7:a6:b2:61:de:da:46:14:02:ef:b3:
         7d:d0:d0:df:be:88:4c:7a:32:fa:ba:d6:aa:27:a6:7e:f0:d3:
         d9:17:54:ea:31:7f:07:b0:03:9d:dc:30:14:b4:68:30:7c:88:
         df:54:8f:91:b2:53:f8:e6:4d:1f:54:90:8c:48:fe:4a:bd:94:
         b4:44:e8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----