Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
File:                     PrRw_U1nQhL_yCqZNvP-JUvszmY.mft (raw, json)
Hash identifier:          DcyPIlfQi18KO32KKxFSGjfbteDxC8xSUZWV33efJH0=
Subject key identifier:   A9:0D:3F:5A:9F:F7:6E:4D:21:D3:8C:46:90:D8:EF:D7:D7:CF:27:F4
Authority key identifier: 3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
Certificate issuer:       /CN=3eb470fd4d674212ffc82a9936f3fe254becce66
Certificate serial:       01962E2AF2D0BF57F7F08C84C48741C9B990
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:28 +0000
Files and hashes:         1: PrRw_U1nQhL_yCqZNvP-JUvszmY.crl (hash: wfYGTaq/RbDkMV5w0xTQZGqRNisXm/qT59c4IrXzACE=)
                          2: aATeS7_Zg3KdAOaKx-n1ZvynPH4.roa (hash: BiTKK6ZatcQ+uoSfiABBAw2jPEjkMuOpjqegStTZ06Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f2:d0:bf:57:f7:f0:8c:84:c4:87:41:c9:b9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eb470fd4d674212ffc82a9936f3fe254becce66
        Validity
            Not Before: Apr 13 08:01:28 2025 GMT
            Not After : Apr 14 08:01:28 2025 GMT
        Subject: CN=a90d3f5a9ff76e4d21d38c4690d8efd7d7cf27f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:78:36:7a:3c:c5:51:44:08:b4:c3:a8:6e:4e:
                    8b:e6:0f:2c:99:61:c1:56:87:23:21:21:89:ef:bf:
                    da:d4:53:17:a0:42:d9:3a:95:dc:9e:a4:c2:c2:76:
                    78:b5:24:cc:78:4b:24:fe:78:d7:e5:bd:3f:c3:a7:
                    bf:a0:89:9c:42:36:60:4a:fa:e4:9b:01:b7:0d:fc:
                    0c:94:15:51:82:75:64:80:66:6e:5c:9b:8b:eb:04:
                    87:ee:76:29:0f:30:f2:e0:ac:e6:19:47:c1:b2:8e:
                    4d:a0:88:52:57:f4:0f:53:70:8e:9a:17:5d:92:8d:
                    d4:34:3b:83:5c:41:f0:f8:eb:72:d0:e9:23:a3:af:
                    21:77:17:f7:37:b7:d8:e4:4c:c5:2a:55:4b:24:fc:
                    d7:4c:24:b5:db:72:f5:56:99:b4:94:d4:7e:7d:8a:
                    1e:a6:64:33:2c:82:6f:62:b0:4e:c5:63:b0:fb:17:
                    d7:7d:82:65:0f:93:e9:ea:ea:14:3d:d1:5a:10:85:
                    68:48:cc:6b:f5:0c:95:df:f3:1d:24:94:55:db:c3:
                    2f:8b:79:5f:72:ce:08:61:97:c4:87:0c:9b:9c:55:
                    1b:ab:31:76:8e:70:c0:fa:fb:8b:f0:0e:ab:01:83:
                    16:88:77:4d:f8:72:ac:db:f1:1b:c2:89:e4:43:33:
                    f8:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:0D:3F:5A:9F:F7:6E:4D:21:D3:8C:46:90:D8:EF:D7:D7:CF:27:F4
            X509v3 Authority Key Identifier:
                keyid:3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ce:e2:9d:0d:79:7c:a6:78:6b:b4:65:eb:b8:7a:10:e4:55:
         dd:92:4c:8d:2f:59:ef:38:cf:05:62:9e:8a:43:a5:6c:d6:93:
         64:67:02:b1:02:57:38:a8:94:14:ef:5c:a0:0c:ae:2d:2e:62:
         71:5b:8a:d7:2e:e3:23:72:37:01:f4:ef:4d:cc:24:80:02:96:
         70:e7:41:d0:e4:f8:eb:4c:a2:57:69:b1:d8:f9:f5:ac:09:b7:
         28:bd:c3:33:33:81:23:3c:1a:84:25:b4:48:0e:19:15:d7:17:
         6a:c5:29:25:be:fa:9d:4e:50:2e:3e:e4:ee:45:90:ef:fa:b4:
         0c:57:43:47:75:bf:f6:ed:ec:14:d6:ae:4b:c6:4e:76:37:ca:
         bd:4c:1d:b2:bb:01:37:e5:fb:d9:ae:51:1e:7e:cd:f0:95:59:
         12:39:ed:df:d5:8c:77:23:9b:04:6d:ee:6a:56:9d:d1:00:4e:
         2a:53:fd:2f:7e:2f:bf:33:5a:c2:71:b5:f8:0f:93:cb:6c:11:
         15:d3:8f:a0:af:63:bd:fe:74:bf:74:31:49:0b:0b:2d:4b:ed:
         b5:8d:f0:b1:c0:35:c4:33:57:17:44:61:f1:dd:a2:db:d9:28:
         ec:92:4f:3f:56:ea:6b:e1:73:6c:40:9d:03:bb:22:11:2c:e2:
         08:cd:10:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----