Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
File:                     PN4kcMhWOUlIej54dDxUTJnsimQ.mft (raw, json)
Hash identifier:          MngNvzcjF8Ui8zsKDOjBmXkgLxLgy8Fdis2L5pp4Irg=
Subject key identifier:   25:AA:5A:F1:E3:B0:26:03:FB:8F:0F:A6:1D:18:C2:CF:7F:6D:71:67
Authority key identifier: 3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
Certificate issuer:       /CN=3cde2470c8563949487a3e78743c544c99ec8a64
Certificate serial:       01962FAB17E129854AB5D5A73E0BCF4FABB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft
Manifest number:          076D
Signing time:             Sun 13 Apr 2025 15:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:04 +0000
Files and hashes:         1: MR6yCa9ahiYB6kt7eFUEnhRZgj0.roa (hash: Q5fLGdiN5URjuSRi8W7fkSayIUiVGY1nf+0ovyfMZAw=)
                          2: PN4kcMhWOUlIej54dDxUTJnsimQ.crl (hash: QmjYrOdXDygWMHC3Ogeg8EnY/3t/C4mmzGoMwR1+rZU=)
                          3: sFFOUDvWTzfSymlwSYpDyp4rZVo.roa (hash: hd1EPhU6XZRPUxka9ECqkCcKF9k2GizgSrw0eDBr9g4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:17:e1:29:85:4a:b5:d5:a7:3e:0b:cf:4f:ab:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cde2470c8563949487a3e78743c544c99ec8a64
        Validity
            Not Before: Apr 13 15:01:04 2025 GMT
            Not After : Apr 14 15:01:04 2025 GMT
        Subject: CN=25aa5af1e3b02603fb8f0fa61d18c2cf7f6d7167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:03:db:3c:f1:74:bf:0d:91:1a:6c:64:6f:88:
                    ad:19:59:ed:8d:cf:c3:e0:30:f2:8a:03:6a:74:37:
                    02:ca:bb:c1:e8:e3:ba:1b:05:57:0d:a8:e1:c3:a1:
                    f9:5c:cf:94:78:3e:2a:1f:59:be:96:be:d2:2d:37:
                    89:c0:84:74:3e:8b:f5:5f:b5:82:2a:55:64:ef:4d:
                    4c:53:2f:2f:83:02:dd:86:0e:78:1b:c6:f7:8d:1f:
                    51:42:04:63:81:e1:e5:d5:23:64:a5:50:b8:94:01:
                    d0:7d:ac:e9:c9:1a:d7:4f:fd:de:19:9a:c5:28:4f:
                    d5:06:6b:30:02:94:ea:c7:ef:42:5f:ec:98:88:f5:
                    7c:b1:8e:17:4b:c4:d9:f0:61:e6:ff:56:35:18:42:
                    9f:6b:02:b0:c1:1d:bc:da:e1:f5:2c:79:be:d4:e5:
                    02:e8:cf:db:dc:68:5d:a7:37:93:b0:b5:4c:5c:a1:
                    c3:53:0e:84:81:bf:db:45:b3:19:2f:5c:67:f1:16:
                    4c:81:eb:b9:01:2f:76:fc:10:20:80:21:2b:71:5c:
                    92:8e:38:07:73:8a:91:8d:51:44:5b:57:4d:f9:6a:
                    0f:aa:6d:f6:65:5f:f6:30:27:19:a3:7f:8f:d7:68:
                    3b:d6:aa:89:49:1b:4a:1a:b7:e2:97:1d:7d:ce:f0:
                    76:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:AA:5A:F1:E3:B0:26:03:FB:8F:0F:A6:1D:18:C2:CF:7F:6D:71:67
            X509v3 Authority Key Identifier:
                keyid:3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:eb:9a:e0:28:38:8c:7a:87:99:35:71:a0:1c:1f:05:9a:bf:
         41:a3:ca:ec:af:8d:b5:84:b2:75:e6:78:21:c0:dc:6a:70:15:
         db:76:5a:51:38:1b:0e:d1:a6:4e:fd:03:5b:5b:b3:8f:1c:58:
         ab:c5:ff:a5:75:c2:1b:30:3f:c3:dd:3f:af:a0:2e:fb:5e:b3:
         25:24:12:fd:8c:1f:db:50:19:8b:c4:c1:a1:d2:dc:a1:41:6f:
         42:d0:81:28:e2:e0:bd:cc:d9:97:6c:05:b1:05:22:7a:bc:30:
         c1:8d:7f:1f:13:ac:4b:89:08:64:67:d0:35:60:20:d2:bc:d3:
         6a:a0:88:f1:2a:e3:7e:d8:ee:35:0a:38:80:92:27:75:0f:12:
         e2:95:02:81:0a:b3:42:bb:35:c0:12:14:f2:50:3c:59:79:20:
         8e:ca:34:95:4e:57:78:cd:a2:29:bd:6c:61:03:a9:ae:8c:23:
         b5:36:08:ba:f7:5a:08:b4:36:7c:a6:63:26:32:91:c2:2e:f5:
         17:33:13:27:d6:33:34:e0:c9:10:0b:49:1b:c7:5c:b2:66:5c:
         d6:84:60:7f:80:22:6b:bd:58:56:9f:86:ad:b2:0c:1e:d9:9f:
         1c:48:ac:e7:1f:8f:a6:30:3d:c4:4f:f4:5b:ab:7e:ba:da:9d:
         78:98:f2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----