Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
File:                     1-PvIQVghSG6P4IYLW-w-koO4A4U.mft (raw, json)
Hash identifier:          GSUEAk3wPAW+GZYC/J/RJ46C8Ix6h7jnVfGodoNFlQE=
Subject key identifier:   A3:03:44:2C:49:7E:AA:F0:B4:8C:90:27:39:FB:5B:0C:16:CF:61:14
Authority key identifier: F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85
Certificate issuer:       /CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
Certificate serial:       01962F74E2742C61644AF9779A58FA501011
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:51 +0000
Files and hashes:         1: 1-PvIQVghSG6P4IYLW-w-koO4A4U.crl (hash: eXe+isxIeNjkJ43bC1mNj8g82OcSnrWTuvU1Abrf+Io=)
                          2: Dn9PJQBV1DBDQ0-rgh6HR3KDZu0.roa (hash: gZf47H7ZNPeHNBxmm1n+mb7mTaHE9Uiqqc+N1w8TQc8=)
                          3: rkGv9bkZwGnroE2E1JMq5CMdQAQ.roa (hash: DQuQsqAZ9ADD7G7O8fgD2/H25auaCw74dHGUBLobCk0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e2:74:2c:61:64:4a:f9:77:9a:58:fa:50:10:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8fbc8415821486e8fe0860b5bec3e9283b80385
        Validity
            Not Before: Apr 13 14:01:51 2025 GMT
            Not After : Apr 14 14:01:51 2025 GMT
        Subject: CN=a303442c497eaaf0b48c902739fb5b0c16cf6114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5b:5c:89:dc:82:85:c9:a0:6b:d5:4c:bd:bf:
                    0a:f2:4f:df:23:65:d5:a8:75:a3:37:e3:49:ed:cf:
                    12:30:67:59:27:37:84:c0:52:69:67:75:99:f2:cd:
                    16:45:29:67:99:63:40:39:c1:f0:65:e9:c4:30:f3:
                    c3:a7:dc:55:bb:ce:45:b3:cc:ec:00:dc:8a:e8:91:
                    82:16:c9:9b:4f:e2:8f:a4:87:64:de:1f:7a:60:bd:
                    27:fe:20:89:41:37:8a:68:d3:94:6f:e9:a6:22:f6:
                    30:aa:15:a5:d7:1e:f8:21:8f:8c:81:fc:17:c0:f7:
                    67:5f:d2:6d:e6:d3:22:10:23:54:08:eb:24:6d:4a:
                    81:31:35:b7:05:27:35:18:86:be:9f:8b:d6:57:4f:
                    5a:c6:48:4e:6b:ff:ac:70:a9:d9:e2:22:ea:32:f8:
                    b0:f0:76:94:c4:8a:a2:c9:f9:06:b6:d3:8b:b6:ff:
                    21:28:fe:4c:c5:e9:9d:62:e9:d6:04:61:86:fc:26:
                    fb:41:4d:cf:a4:35:23:fe:88:75:40:ee:c3:5c:61:
                    ca:a6:e0:bb:a9:d3:fb:0f:cd:50:50:fe:6c:f8:4f:
                    fe:07:33:43:91:41:a4:80:6b:db:a0:67:e8:26:72:
                    3c:d8:22:c8:1b:7e:5f:73:11:47:42:9a:34:76:2f:
                    7f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:03:44:2C:49:7E:AA:F0:B4:8C:90:27:39:FB:5B:0C:16:CF:61:14
            X509v3 Authority Key Identifier:
                keyid:F8:FB:C8:41:58:21:48:6E:8F:E0:86:0B:5B:EC:3E:92:83:B8:03:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PvIQVghSG6P4IYLW-w-koO4A4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/361c57-ea42-47e2-a68f-ec967b511d7f/1/1-PvIQVghSG6P4IYLW-w-koO4A4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:52:24:1d:60:d9:0b:34:f3:01:45:8b:e2:e0:ee:c9:23:4b:
         af:2d:13:20:9f:1f:58:fe:ea:44:b6:28:88:10:4e:41:36:81:
         31:9c:88:2e:ba:f8:4c:db:6e:87:c7:4e:46:9f:bc:f2:0b:fe:
         10:92:76:6b:c3:43:73:8b:f3:16:cc:62:30:50:76:5c:d5:71:
         38:a9:52:36:44:2a:45:4d:85:85:ed:05:3e:e6:dc:48:b3:e4:
         4d:c7:91:69:e9:5e:bc:b1:c8:41:84:cd:b9:de:ad:c6:f3:47:
         36:00:1c:54:17:63:15:4e:a0:0d:96:01:1e:fb:23:f3:fd:44:
         2d:28:4f:a9:b6:10:5a:3c:ac:58:46:74:46:e4:2e:f4:5f:73:
         eb:19:81:9c:9b:2b:10:00:b2:16:31:0f:81:f0:20:c8:1b:9c:
         eb:5a:11:25:18:9f:1d:57:e8:6a:95:f9:7e:03:f9:03:63:4b:
         42:7a:4d:e3:55:4b:5a:00:b4:97:f3:06:7f:9a:0b:64:60:39:
         bb:e2:f2:d4:c3:f2:39:7d:42:c8:7c:4e:13:35:3f:80:03:1f:
         88:7b:db:9b:79:8a:16:38:bd:25:73:ea:f6:6c:6d:50:2c:70:
         d8:00:db:91:a2:31:95:b0:4d:18:3a:03:f2:46:e7:6a:0b:b2:
         1d:f3:45:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----