Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
File:                     pRA1bcClIYlc5h-FSV4G2vehKzs.mft (raw, json)
Hash identifier:          1BWwZt/K+uqe1QYlRdivyzFzaS38GLeYMsbyTV8uGTo=
Subject key identifier:   F8:37:14:B9:4A:8D:CC:BB:45:F7:F1:AB:7D:21:67:4C:30:25:3B:16
Authority key identifier: A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B
Certificate issuer:       /CN=a510356dc0a521895ce61f85495e06daf7a12b3b
Certificate serial:       01962FAB76326E5060CAAB747F844F26A319
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 15:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:28 +0000
Files and hashes:         1: PyDzr8WmYcRo05FGb5UzcWZdKls.roa (hash: IYIt11a1r2unTfjZQuVOMhykI3XsxsOfurke5JUMHZc=)
                          2: pRA1bcClIYlc5h-FSV4G2vehKzs.crl (hash: uwo34pjomrrMFFjBC7IlwBnrp4+Kdd9LaNmCjj0U73E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:76:32:6e:50:60:ca:ab:74:7f:84:4f:26:a3:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a510356dc0a521895ce61f85495e06daf7a12b3b
        Validity
            Not Before: Apr 13 15:01:28 2025 GMT
            Not After : Apr 14 15:01:28 2025 GMT
        Subject: CN=f83714b94a8dccbb45f7f1ab7d21674c30253b16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:eb:56:37:43:58:31:67:17:01:23:d8:d0:36:
                    ef:77:b7:7f:aa:b2:4f:92:1b:85:8f:33:42:63:35:
                    4b:6b:46:b6:3f:63:aa:34:e6:f5:ba:12:5a:1e:4d:
                    a6:72:08:52:d0:cd:0e:9f:84:a4:cb:94:06:ba:32:
                    0f:88:80:d4:59:10:6e:ab:c3:ab:31:7c:e5:8c:38:
                    65:3b:06:4d:db:b4:a1:dc:c7:d2:2f:9c:f2:14:b4:
                    7b:51:01:9c:6a:3f:da:33:4c:1c:58:e9:e0:b0:39:
                    f0:11:35:51:d8:49:ef:49:84:51:ad:ca:95:fc:77:
                    bb:44:3c:52:33:02:74:26:03:aa:30:91:83:ee:81:
                    6a:66:f9:31:e7:8e:1c:cc:85:58:99:39:bc:3e:b0:
                    07:2e:a3:af:a1:0a:a9:cd:8c:a8:7c:17:ea:ab:44:
                    14:0d:49:f9:15:e1:1d:89:98:ee:38:4d:36:78:7c:
                    17:0a:6f:1b:96:a6:21:64:84:09:da:07:19:0c:11:
                    ba:2e:c3:cb:50:bb:66:87:91:ad:9d:9d:e9:44:c2:
                    7e:73:fb:44:c9:38:32:12:78:e7:dc:82:43:98:8e:
                    8b:69:3d:a2:9a:87:ad:41:a0:90:f5:a4:2a:9c:48:
                    84:05:3f:f2:4b:e3:72:d7:64:92:37:53:df:5b:f3:
                    66:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:37:14:B9:4A:8D:CC:BB:45:F7:F1:AB:7D:21:67:4C:30:25:3B:16
            X509v3 Authority Key Identifier:
                keyid:A5:10:35:6D:C0:A5:21:89:5C:E6:1F:85:49:5E:06:DA:F7:A1:2B:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pRA1bcClIYlc5h-FSV4G2vehKzs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/3c7c7c-4326-4184-8356-01182f840789/1/pRA1bcClIYlc5h-FSV4G2vehKzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:51:11:b9:9f:a6:f6:8d:f2:d0:9d:cb:b6:93:01:f4:29:79:
         ae:c7:1e:15:06:ea:92:03:96:f1:b3:74:51:e5:ff:c3:88:de:
         8e:e6:4a:60:48:23:44:85:3c:32:98:ec:c7:ca:dc:53:c5:55:
         66:37:8f:d5:f9:4c:69:54:e5:40:01:58:dc:35:80:06:c3:39:
         67:8d:33:78:df:c8:bd:4c:f3:3c:fa:cc:78:9e:19:c1:62:62:
         21:94:d4:91:c6:c1:38:be:4f:8b:f7:05:e8:73:75:9c:fc:02:
         39:9a:5e:f5:3e:02:09:76:14:40:8b:ed:0e:ac:ce:bb:f6:af:
         09:ec:fd:d0:d7:f1:43:e8:2c:6b:9c:ce:49:6f:42:93:ac:12:
         1f:5f:d0:33:7f:ad:70:6f:4c:fa:f6:ec:19:28:6a:8e:e4:02:
         42:6b:8b:40:48:3c:7e:42:87:b7:8e:3e:42:80:16:85:af:b0:
         31:97:3a:27:2e:6e:db:fa:75:8c:fb:2d:2c:4e:88:00:6f:89:
         ed:df:48:0d:22:be:90:a1:a2:47:fa:3c:23:02:4e:1f:3c:79:
         88:67:fd:65:67:14:13:b3:80:5a:b3:af:88:a5:e7:ae:ed:c8:
         c1:e6:3d:58:35:2a:61:82:e3:b2:ed:ca:9f:a8:0e:0c:ec:67:
         af:e9:8c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----