Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
File:                     PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft (raw, json)
Hash identifier:          cVLlQr1VrU19AiZVzNbd3wlZwOSdvp9/j7fzlZmJlUY=
Subject key identifier:   8C:85:7D:71:1A:E8:82:16:8B:BC:73:72:31:C2:88:12:F2:5B:13:5A
Authority key identifier: 3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E
Certificate issuer:       /CN=3de2681dda00702a7597a71257e14f7a725e890e
Certificate serial:       01962ECF505295CB7A70D834569F2A04ECF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
Manifest number:          09A0
Signing time:             Sun 13 Apr 2025 11:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:00 +0000
Files and hashes:         1: 4Mdmn6MaRoFLUycUXlZaFSGboEs.roa (hash: C9ut+tYKUryPFgIx2+ThOOLJz+YjKuj147RuRXfxtis=)
                          2: H7RDadMRjVcvma8PhFugcKUdoT0.roa (hash: 6sD2c8/NrghCekThtfpslB8AAW0einNgCY8Rjyouu9I=)
                          3: Oioxvop9FV5K4rtOSvh02jeAj-g.roa (hash: 1Oax9rdfDuKch357rIzJmOSBUOYvQbkuoDRF8in9c8A=)
                          4: PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl (hash: G+ucAq4rEg59PcXY1oRqXMcaIpRl1+KGlrosg+93VOw=)
                          5: _jMez6UKzbPOPelQcGjdJ8x6E6w.roa (hash: ZU7ujP/uBnbOS9GuRHg5V1uQ0qPQ1zH6qf1VkFt1340=)
                          6: ceFPC_Zj6p3cuB8qXQeMqvZfZa4.roa (hash: 01KlZ4a2kJZ4Ly4Y7K5EQ5UlAiINB2ZUF09ye0hG3lc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:50:52:95:cb:7a:70:d8:34:56:9f:2a:04:ec:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de2681dda00702a7597a71257e14f7a725e890e
        Validity
            Not Before: Apr 13 11:01:00 2025 GMT
            Not After : Apr 14 11:01:00 2025 GMT
        Subject: CN=8c857d711ae882168bbc737231c28812f25b135a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ce:6b:c2:14:d5:54:96:33:3a:3a:6d:b4:56:
                    29:7f:46:9f:e0:2b:6a:3b:ed:cd:cc:99:55:b9:ee:
                    b1:d3:d3:55:20:ac:8f:22:75:d0:ad:ea:ba:9d:bd:
                    0e:40:4d:6d:0c:cb:57:19:e0:9c:8a:74:73:69:57:
                    77:db:d8:1f:25:79:16:ff:89:85:ea:7c:9f:0a:ca:
                    31:b9:2c:c0:7f:7e:19:84:2c:73:d4:70:d3:57:8f:
                    d7:39:37:fd:9c:02:dc:3a:98:2b:d7:d7:9b:58:c4:
                    39:51:c6:68:3f:94:53:32:f7:2e:13:ca:1b:6e:ac:
                    51:c9:78:c6:f7:2d:b3:fe:1d:fc:83:47:69:45:87:
                    e1:22:2a:02:07:d4:34:03:b5:4a:98:b0:f8:bd:7e:
                    e9:f8:15:52:6e:91:04:55:83:b9:ea:fb:52:35:78:
                    e7:63:99:a4:fd:05:6c:d3:a8:0a:3d:fe:e9:2f:f1:
                    27:e1:1e:37:c5:5a:ad:45:70:ec:e1:e6:dc:7f:d5:
                    00:90:89:57:51:ac:ea:29:10:35:76:dc:68:a6:b4:
                    79:e4:cb:1b:2e:a2:87:a1:29:cd:b9:94:22:67:47:
                    ee:b1:47:35:fe:af:e1:b0:02:31:a2:df:4b:82:24:
                    b3:c5:74:9c:3d:a3:1f:ec:71:04:ec:a0:b4:0a:9b:
                    ea:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:85:7D:71:1A:E8:82:16:8B:BC:73:72:31:C2:88:12:F2:5B:13:5A
            X509v3 Authority Key Identifier:
                keyid:3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:07:9c:4d:7c:97:f5:fc:a8:ad:99:6d:91:de:a8:53:0b:4e:
         d9:f6:5f:3f:ed:64:7b:68:4a:8e:c7:fa:81:42:db:aa:0a:23:
         c3:c5:f5:bf:dc:f8:c3:72:2b:23:15:51:8e:58:e3:d1:84:ba:
         39:51:75:6a:f1:73:55:f3:a9:84:a9:98:09:89:86:77:26:c3:
         d4:4f:60:dc:f3:5a:47:08:9b:1a:2a:5f:6f:33:c1:a8:43:b4:
         81:17:9b:13:1e:aa:7e:fc:41:cd:e4:fc:25:f7:64:ac:b0:d8:
         97:f4:30:5d:39:1a:c8:9c:ba:e8:0e:cc:72:3d:30:47:7c:3b:
         90:6b:60:af:c4:cf:86:3e:d9:ea:91:67:52:dc:c3:bb:7a:6c:
         1e:63:ce:b7:55:eb:c4:fe:e2:37:31:f1:61:01:c6:0c:cf:98:
         ab:40:34:3d:ff:b9:79:7c:83:70:3b:c2:a3:3e:b1:33:ba:41:
         7d:94:c5:f6:a8:4a:b5:20:4e:d6:92:88:86:3a:ce:ac:6c:b2:
         f6:cf:13:5a:9c:9f:24:cc:46:7f:b5:c6:a3:59:b3:aa:75:f3:
         4c:dd:65:23:99:ce:94:40:80:7a:19:73:f6:97:b5:bf:fa:c2:
         ce:60:78:e7:11:19:fa:38:6a:eb:61:14:05:78:c6:cf:a9:6a:
         71:31:f7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----