Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
File:                     Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft (raw, json)
Hash identifier:          wfBbT5YukPJbGhDq/Gw+5qU8OQqf3YomhWwqqs5OeOE=
Subject key identifier:   7B:EC:BF:47:03:B1:5A:6E:B2:EC:1F:F0:CB:E3:12:34:8E:C4:72:EF
Authority key identifier: 3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29
Certificate issuer:       /CN=3ead19096b0ee080fe43810500b718a947fed229
Certificate serial:       01962F067AAD7434387CC5E6493E8F69A10E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft
Manifest number:          0913
Signing time:             Sun 13 Apr 2025 12:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:15 +0000
Files and hashes:         1: Bk8zYlSKqLYVsGMH3YEvHnLSsEU.roa (hash: LyRPaqVEcdiw5E3uBmgAAh9/7xweVS475crHOVmwvK8=)
                          2: Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl (hash: ri0omWK5loaf8rE7oMAc6zhf1w2hkdn4O9bIQY1PQRw=)
                          3: gwj9P8ZuERM-SCTzjIoGfn0Rln0.roa (hash: 9JU5L0oKqu22gCI9ibec6Elcvk/4kJnQuHkzo4ps1r4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:7a:ad:74:34:38:7c:c5:e6:49:3e:8f:69:a1:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ead19096b0ee080fe43810500b718a947fed229
        Validity
            Not Before: Apr 13 12:01:15 2025 GMT
            Not After : Apr 14 12:01:15 2025 GMT
        Subject: CN=7becbf4703b15a6eb2ec1ff0cbe312348ec472ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5a:6f:2a:f3:a0:ef:aa:3b:ba:c7:a0:b7:aa:
                    6d:f3:63:17:2d:ba:d1:b7:23:c7:32:3b:9e:bd:68:
                    73:a2:b2:6b:37:81:ca:87:e1:94:34:1f:70:23:8c:
                    6c:df:6c:fa:df:16:24:6e:29:b7:75:aa:2a:b9:94:
                    c2:21:6f:77:dc:77:c4:0b:32:55:44:71:b1:e1:36:
                    7b:25:63:a2:fc:ed:92:5e:d4:7f:9e:54:93:54:60:
                    2a:44:8b:66:a2:70:ea:7c:91:90:b2:2c:ac:f9:b6:
                    b5:2b:92:90:43:d9:58:89:a5:8f:14:94:09:54:c9:
                    d3:f1:66:97:c9:a0:e8:e9:a5:08:eb:70:fa:8b:35:
                    8a:4f:49:5f:dc:9e:f5:be:d6:76:25:72:b9:a6:14:
                    1b:24:08:74:1c:37:ca:96:46:7b:ef:5d:98:83:9d:
                    1a:b5:b7:ab:c1:22:fb:1a:f5:24:ec:9a:8a:80:37:
                    9c:e6:d5:0d:05:17:03:c9:57:32:41:4b:85:88:08:
                    40:2a:85:76:4c:6d:61:f6:a8:67:85:80:25:c6:1d:
                    e3:db:2c:ff:18:9f:c8:ed:f2:6f:42:e7:31:92:c3:
                    94:65:b5:da:e1:e5:79:eb:77:bb:bf:4f:21:62:a2:
                    3f:ae:30:79:8a:ef:a1:1f:2d:75:6f:06:eb:11:c8:
                    b4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:EC:BF:47:03:B1:5A:6E:B2:EC:1F:F0:CB:E3:12:34:8E:C4:72:EF
            X509v3 Authority Key Identifier:
                keyid:3E:AD:19:09:6B:0E:E0:80:FE:43:81:05:00:B7:18:A9:47:FE:D2:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/63bb79-93b0-499f-978d-10fe44726908/1/Pq0ZCWsO4ID-Q4EFALcYqUf-0ik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:5e:f9:b4:cb:9e:cb:3a:70:b6:c8:d5:19:12:a8:2f:fd:24:
         1c:4a:37:05:08:15:84:d4:af:85:1a:40:42:1e:60:ff:b5:47:
         2c:f3:5c:56:3a:5b:03:24:74:8a:d2:a4:d0:e5:dc:75:45:0e:
         61:b2:f3:e1:cc:62:3f:05:3a:c5:3c:d8:4a:9b:f4:ee:4f:98:
         d9:85:90:7a:dd:75:85:57:d4:9c:f9:8e:3d:72:e1:a3:24:35:
         47:3d:fe:83:be:7d:55:b3:67:19:2c:62:63:cb:9b:0d:38:99:
         26:e0:8b:55:4e:ea:71:69:b6:72:b3:6a:33:13:2b:75:02:d7:
         f7:5c:33:83:0e:77:04:21:1d:91:e6:9d:1e:01:22:7d:5a:de:
         8d:3a:f5:8a:f1:9c:0a:7d:ce:f7:27:7e:3d:ec:f3:cd:a8:15:
         38:27:38:ff:7b:5c:82:2a:9e:11:62:99:6c:31:d7:95:c0:0b:
         ab:ba:00:84:93:cc:0d:f4:1d:75:57:03:55:3c:76:da:f9:5c:
         45:6a:b8:7b:3c:a4:bf:95:4d:ba:71:f8:7a:0d:41:44:f8:c5:
         10:aa:32:94:00:be:09:66:27:a0:b0:d1:47:9b:78:59:5d:3f:
         80:09:d3:8d:8a:53:b1:eb:99:a7:b0:da:f8:00:2f:e4:dc:d1:
         9b:8f:d4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----