Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft
File:                     PqU6yajcRG-34BE7aLOOlwwZ98w.mft (raw, json)
Hash identifier:          B5Ge2cGir0GDg4u+M4Qi1JYWQiYkC/rXJM8S42WeHwc=
Subject key identifier:   0F:6B:AD:F7:95:AD:48:E8:F3:D4:86:E7:9E:4C:DF:DA:C9:2E:17:48
Authority key identifier: 3E:A5:3A:C9:A8:DC:44:6F:B7:E0:11:3B:68:B3:8E:97:0C:19:F7:CC
Certificate issuer:       /CN=3ea53ac9a8dc446fb7e0113b68b38e970c19f7cc
Certificate serial:       01962FAB078FBBC812B695ACFC736049A279
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PqU6yajcRG-34BE7aLOOlwwZ98w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft
Manifest number:          1478
Signing time:             Sun 13 Apr 2025 15:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 15:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 15:00:59 +0000
Files and hashes:         1: PqU6yajcRG-34BE7aLOOlwwZ98w.crl (hash: nNfeDcf6hfxxvCneqGMYsi9S7Xe1LB5XOGL5air40FU=)
                          2: ZFcvFlhDWryyoXWXMpIDlrIOANM.roa (hash: vf4LDljSHDeogKMO6SAS7Y9xTDtYGGINc31+p97CZuM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:07:8f:bb:c8:12:b6:95:ac:fc:73:60:49:a2:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ea53ac9a8dc446fb7e0113b68b38e970c19f7cc
        Validity
            Not Before: Apr 13 15:00:59 2025 GMT
            Not After : Apr 14 15:00:59 2025 GMT
        Subject: CN=0f6badf795ad48e8f3d486e79e4cdfdac92e1748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5d:7f:1a:72:55:c3:14:da:b6:ae:c2:50:e2:
                    f1:a7:5e:82:55:a3:74:4f:d8:55:37:e8:66:fe:f9:
                    f3:da:b6:4a:da:69:c7:40:59:b8:bd:43:78:8a:9f:
                    10:d8:e1:48:27:b2:bf:d1:d3:b5:69:b9:ac:38:03:
                    79:63:85:ce:47:85:4c:4e:d1:d7:c4:36:16:f2:10:
                    aa:c6:9f:11:97:c3:86:de:b0:23:22:03:92:1b:b2:
                    be:65:2a:4d:31:e1:49:c5:fe:1a:99:8e:21:14:7f:
                    b6:8b:7a:ac:26:37:bb:a7:87:bf:af:41:ec:3f:08:
                    c8:08:0a:d5:5d:37:e5:31:65:8a:bd:3d:36:6c:96:
                    6f:99:14:7d:4a:30:b1:e8:2f:3d:a0:a9:5d:0a:b1:
                    c1:39:ec:8c:da:a8:75:8a:36:19:14:45:00:6c:fb:
                    b0:ca:a4:11:6f:d3:85:0d:ea:82:34:b9:8a:d1:37:
                    6b:d9:de:f4:fe:69:85:66:aa:f9:a1:b2:3d:5a:26:
                    7c:03:4c:68:91:43:cd:1e:77:50:0d:0a:ac:2e:f1:
                    74:43:b2:a3:5a:83:d2:b5:f3:dd:e1:2d:83:14:8a:
                    fc:5b:f4:14:da:27:e2:ae:b7:95:0b:21:0a:3e:53:
                    32:6d:e8:fe:29:28:13:14:d0:c9:e6:cd:0d:09:98:
                    07:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:6B:AD:F7:95:AD:48:E8:F3:D4:86:E7:9E:4C:DF:DA:C9:2E:17:48
            X509v3 Authority Key Identifier:
                keyid:3E:A5:3A:C9:A8:DC:44:6F:B7:E0:11:3B:68:B3:8E:97:0C:19:F7:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqU6yajcRG-34BE7aLOOlwwZ98w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e73cb5-8bfc-4139-9a27-351c21192c65/1/PqU6yajcRG-34BE7aLOOlwwZ98w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:58:7f:d4:0c:e4:54:df:bf:1b:ae:df:1c:fa:62:72:b8:71:
         2f:09:b7:9b:6f:bd:3d:cc:00:60:04:ba:e0:d0:b2:6e:86:2e:
         37:cd:ee:41:00:23:c1:81:a4:ef:3a:8a:ee:46:93:d6:98:78:
         8f:45:66:6a:05:23:16:75:0d:bf:0b:b5:9c:e7:e7:58:0e:f5:
         13:63:4c:33:3f:3f:b0:6c:64:02:19:0e:5f:0d:ec:94:d2:d4:
         40:44:6a:de:d9:08:8e:67:31:e9:9e:65:56:36:13:02:0a:3a:
         3d:5a:87:f3:20:d0:85:2b:4f:3a:a0:35:f8:78:9e:70:b2:76:
         ae:8b:27:75:aa:7a:30:e7:92:4c:9b:49:e4:c7:b9:07:19:fa:
         f0:8c:15:e8:65:e2:bd:c8:f2:2e:8b:6e:2e:43:1e:37:21:d6:
         98:6a:a6:d3:94:84:9d:3b:b4:69:eb:a2:73:8c:23:c3:01:36:
         66:41:29:11:39:bd:f8:11:a1:75:3a:9d:ec:c0:a2:a9:34:ee:
         4c:6d:62:99:70:4a:15:57:be:36:63:db:4f:67:b4:5f:b7:d0:
         1b:f3:63:d5:7b:ef:dc:a4:14:b5:a5:ce:26:46:5b:db:eb:1c:
         2b:12:26:16:cd:e3:a1:8e:ba:77:17:23:f2:83:aa:5c:ca:f2:
         36:9d:4a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----