Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
File:                     PseNgibLWq_xXGdSWvK4q8t7X5I.mft (raw, json)
Hash identifier:          G43jQ/0f5flK6+72F4bH4OGlvauuuuTJUzutB/XHmr4=
Subject key identifier:   69:81:9A:92:D4:D7:74:5C:79:33:45:09:6D:D4:CC:92:FC:F2:96:36
Authority key identifier: 3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92
Certificate issuer:       /CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
Certificate serial:       01962E9914F1AB7EB78B75446C72CE71CC7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:46 +0000
Files and hashes:         1: PseNgibLWq_xXGdSWvK4q8t7X5I.crl (hash: ja77lVHra9HSVgY6SndNh4YqsAvx8L+REBCaKwfB4Oo=)
                          2: RGavrFD9QlH9mvEK00LE9vM0Ylo.roa (hash: in3DOj7fuK/tRP2Np73D85wEHXvdsqUOTjKtL4z+mG4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:14:f1:ab:7e:b7:8b:75:44:6c:72:ce:71:cc:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ec78d8226cb5aaff15c67525af2b8abcb7b5f92
        Validity
            Not Before: Apr 13 10:01:46 2025 GMT
            Not After : Apr 14 10:01:46 2025 GMT
        Subject: CN=69819a92d4d7745c793345096dd4cc92fcf29636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f0:b6:d8:90:21:c6:18:5e:bb:23:7e:25:3e:
                    48:4d:ee:a6:e3:5b:a5:7a:b1:c8:a5:6a:50:e3:8e:
                    67:8a:30:bc:32:b0:e7:e6:71:b7:8b:11:59:4d:b1:
                    cf:cc:96:2f:0a:1e:da:1b:9c:ca:95:1a:8a:5a:49:
                    1b:df:87:68:d4:09:5a:8a:c2:96:bd:3d:a2:bd:02:
                    7c:68:51:36:1d:82:43:7b:f6:a2:46:40:52:5d:f9:
                    bb:2c:f9:28:32:56:0c:ad:a4:15:5c:3a:d9:e4:44:
                    9c:d4:b1:c0:f5:0f:5a:2e:bf:2a:f8:06:e1:19:cb:
                    94:17:98:47:ba:d8:e7:c7:03:63:2b:be:67:3e:ea:
                    e9:8c:cb:06:a7:5c:e1:4e:42:9d:84:84:94:bf:13:
                    81:85:7a:9d:fd:c9:8a:1c:ce:df:5e:87:cc:42:6b:
                    f3:71:e1:f5:a9:8e:21:e3:f0:66:3b:e2:00:f7:ec:
                    d1:f7:7c:77:88:70:de:db:b9:1f:ef:58:e8:fb:d8:
                    12:84:64:69:62:6d:8d:8a:1d:01:4f:fb:c6:74:01:
                    1f:e4:44:70:e6:36:b9:70:75:90:ed:50:3e:c8:2e:
                    77:0a:10:80:79:24:83:6a:5b:38:3f:72:5e:22:a4:
                    a7:5a:d3:ea:2a:38:26:de:bc:a0:8c:83:55:ab:15:
                    f0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:81:9A:92:D4:D7:74:5C:79:33:45:09:6D:D4:CC:92:FC:F2:96:36
            X509v3 Authority Key Identifier:
                keyid:3E:C7:8D:82:26:CB:5A:AF:F1:5C:67:52:5A:F2:B8:AB:CB:7B:5F:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PseNgibLWq_xXGdSWvK4q8t7X5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/db3741-434d-4b5a-890b-2058c70367aa/1/PseNgibLWq_xXGdSWvK4q8t7X5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:99:09:4a:2a:3e:bf:e9:e5:ae:e2:a0:72:66:44:71:78:1a:
         f4:93:79:59:40:0f:f7:84:4b:d2:84:28:dc:ec:70:de:4d:06:
         f0:75:33:7f:65:1d:b5:72:85:8b:73:24:2f:00:8c:19:19:42:
         3e:dc:a0:02:da:b5:1e:85:d7:a9:18:32:74:22:36:61:88:75:
         82:48:de:34:24:fa:d4:43:c5:11:b0:c0:8b:80:f7:f0:ab:e8:
         0f:39:c4:3b:d2:00:f3:a6:88:ea:f7:b8:83:ce:0f:ce:db:88:
         bb:38:f6:42:4a:19:b3:ea:ca:54:d5:6c:48:dd:92:e9:00:37:
         83:b2:5a:a0:46:c5:b6:c2:8c:f0:2f:b8:fb:56:cb:cb:2a:c8:
         9a:ce:18:96:f1:af:4a:73:39:5b:3a:82:be:18:ef:fe:66:93:
         4a:e4:83:b9:bc:e9:c1:bb:3f:cb:1e:79:03:c5:aa:5e:fd:43:
         8d:bb:13:24:fa:b0:95:13:46:36:1f:a5:83:19:b5:15:52:27:
         86:58:b4:b9:a0:e9:3c:89:43:6a:3a:db:ce:7e:eb:26:35:ad:
         c2:4e:0a:c0:b4:ef:82:b2:10:a9:d6:25:9a:c7:73:a0:b3:17:
         bf:6f:ae:cb:ef:1e:d3:19:e7:ba:3d:4c:c7:05:f5:2b:d6:f9:
         7e:40:ca:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----