Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
File:                     PxyTi7IGo4ltBkwIUvqYhf8s69k.mft (raw, json)
Hash identifier:          VtQbXGpdeZMs5WEvrpybhIIt0S+mY2VK/neE+oy2ihA=
Subject key identifier:   A9:87:A3:13:CB:6D:16:F1:3E:88:24:60:C6:45:B5:40:95:AB:95:95
Authority key identifier: 3F:1C:93:8B:B2:06:A3:89:6D:06:4C:08:52:FA:98:85:FF:2C:EB:D9
Certificate issuer:       /CN=3f1c938bb206a3896d064c0852fa9885ff2cebd9
Certificate serial:       01962E61AC97FCF661D92AB899A07A6DE67C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft
Manifest number:          0219
Signing time:             Sun 13 Apr 2025 09:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:15 +0000
Files and hashes:         1: PxyTi7IGo4ltBkwIUvqYhf8s69k.crl (hash: PUNHNYi1j3Og7pC1HJdU7RqjTzqsm8QdRIzC57UhP2c=)
                          2: Qtry2kaoKZp9d0kAKEVlWC9a8yA.roa (hash: 4P/5LEPA+7GLBNpRQSC8l1dlaoBUTtizVxJtdSJCc5Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ac:97:fc:f6:61:d9:2a:b8:99:a0:7a:6d:e6:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f1c938bb206a3896d064c0852fa9885ff2cebd9
        Validity
            Not Before: Apr 13 09:01:15 2025 GMT
            Not After : Apr 14 09:01:15 2025 GMT
        Subject: CN=a987a313cb6d16f13e882460c645b54095ab9595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:44:b7:64:68:9b:d2:47:70:3d:65:8b:ff:5a:
                    17:41:2e:5b:bb:b7:f2:79:50:5f:16:eb:ea:a4:1b:
                    2d:cb:ee:17:9b:a6:cd:df:be:a6:4e:b7:26:95:5c:
                    67:e9:95:da:ad:a1:ce:d6:e2:5d:1b:18:2c:cb:00:
                    7b:b9:7a:d1:b0:7d:f0:44:e6:70:02:77:53:ae:ea:
                    c7:42:71:b3:7a:c0:7e:7d:9c:d1:ed:0f:d6:05:75:
                    75:17:35:a8:ea:7b:26:b7:77:95:4f:84:61:86:0a:
                    3e:b4:36:95:14:af:30:db:ce:4c:97:75:37:3b:34:
                    4c:5b:14:7b:9a:ed:70:cc:ff:58:0f:35:e7:7c:70:
                    9e:39:59:5a:2d:13:28:5a:8b:49:11:0e:4e:4b:9d:
                    e4:ab:bd:a3:50:83:46:e0:48:a4:ab:82:e9:02:c7:
                    58:e6:66:43:d6:96:ff:5c:fe:29:38:da:02:be:10:
                    33:85:56:58:2d:c9:86:11:be:18:54:69:a6:a0:7a:
                    68:22:71:af:03:ed:b4:44:77:78:be:de:83:c8:c5:
                    b0:39:ab:04:47:bd:a8:ff:2b:3b:0e:06:ad:4f:14:
                    70:35:36:c8:5f:ec:22:7a:3b:78:22:60:fa:9a:00:
                    88:cf:3c:47:09:99:0f:bd:68:78:a1:b8:36:76:12:
                    c1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:87:A3:13:CB:6D:16:F1:3E:88:24:60:C6:45:B5:40:95:AB:95:95
            X509v3 Authority Key Identifier:
                keyid:3F:1C:93:8B:B2:06:A3:89:6D:06:4C:08:52:FA:98:85:FF:2C:EB:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:13:45:4a:8d:2e:95:8b:6f:c4:cf:a8:ee:31:b8:c5:e1:3d:
         f8:b6:b2:4d:fe:34:88:1d:9e:5d:b9:1e:6d:c8:72:ee:59:f9:
         97:7c:51:8b:b1:35:e3:12:16:11:83:d6:87:dd:9b:75:9f:91:
         d5:22:8e:fc:a5:53:b1:96:b6:c2:dc:54:8a:d4:79:aa:d6:ae:
         62:2a:2e:6f:12:6b:7f:ff:e2:61:d9:ea:d1:1d:38:96:eb:a7:
         88:7f:0c:d7:b7:03:25:e4:06:fc:4f:77:c6:dd:0a:24:b8:eb:
         68:e0:d1:11:82:56:50:f9:5d:90:3e:63:36:ba:20:cf:61:87:
         07:84:48:d0:f4:d4:45:24:ea:6f:e6:49:fb:32:ae:2c:f9:40:
         1a:cc:fa:b2:70:73:ad:2b:1d:89:37:3f:44:c6:bb:38:8c:b9:
         f9:04:91:56:02:8a:1c:b0:1a:e5:89:dd:92:81:95:83:b2:eb:
         71:2e:f8:14:af:84:f4:0e:b5:89:22:cf:85:7d:78:f4:b9:09:
         05:5c:1b:34:35:b6:ed:02:8d:07:6b:30:08:7c:b9:37:cc:42:
         6c:e6:eb:9e:bd:e2:4e:89:ef:90:77:49:2b:96:09:e7:e7:41:
         e0:d1:ab:79:42:2f:90:6e:ee:4e:28:3b:84:87:f6:11:b8:c3:
         86:e8:6b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----