Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
File:                     pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft (raw, json)
Hash identifier:          HDo3p6yv1Ak6xDLHTOhBI+eh+EtO23jkzoT4+YMX6eE=
Subject key identifier:   7A:D7:F8:2B:BA:7B:87:3F:7C:15:A0:E3:84:08:37:36:8E:9D:E3:DA
Authority key identifier: A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D
Certificate issuer:       /CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d
Certificate serial:       01962E2B134FA65BB3700E6AC799045B607A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft
Manifest number:          0539
Signing time:             Sun 13 Apr 2025 08:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:36 +0000
Files and hashes:         1: 0LPzaTRGADRQ7NYT2u33MSGVUAc.roa (hash: z6+o9T+5otMMS/QAipfJXTyY4jZN2xR3W6lhfsxnRH0=)
                          2: pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl (hash: 8AdD9m03eKNBC/3UaCMiQE6n/rIFrAPlNzb4l4oxVDk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:13:4f:a6:5b:b3:70:0e:6a:c7:99:04:5b:60:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a60ad4b15e5c1cfec0afb1f818a76a08f186386d
        Validity
            Not Before: Apr 13 08:01:36 2025 GMT
            Not After : Apr 14 08:01:36 2025 GMT
        Subject: CN=7ad7f82bba7b873f7c15a0e3840837368e9de3da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d7:b5:b6:4b:10:ee:fb:a5:e8:f6:ce:a6:80:
                    6d:46:36:55:85:a3:1f:5b:67:bf:59:b0:03:15:db:
                    3a:de:8f:01:11:4e:3b:5b:29:4c:70:9b:58:85:53:
                    6e:00:18:9b:a9:d8:82:bc:74:7f:ed:cd:ca:fe:3e:
                    c5:b0:82:0e:12:96:50:81:da:4d:fc:89:7d:eb:88:
                    44:0a:18:aa:19:fd:21:aa:64:13:2c:fc:e4:4f:b9:
                    b6:2a:77:f8:31:5e:fe:6b:c8:4d:61:b5:55:c5:22:
                    94:0e:b9:ca:83:15:b9:15:87:5a:04:9f:9b:25:9f:
                    c6:86:21:6b:88:74:b4:f6:19:10:9c:79:25:eb:f8:
                    ce:57:52:ba:52:b2:fd:aa:69:cd:55:19:0f:3c:a7:
                    52:a7:85:9f:29:06:eb:95:4c:08:79:28:b5:53:b8:
                    37:5b:5c:07:91:56:88:1d:11:89:1c:a3:32:67:bc:
                    a9:9f:6c:63:63:6b:ee:c4:ac:ad:96:ad:49:33:7b:
                    5f:9b:31:3e:a4:7e:c9:5d:60:c9:3e:9a:85:65:0f:
                    1b:0c:0a:02:76:99:50:38:bf:ec:69:e5:9f:1d:20:
                    eb:50:e6:4c:db:5d:80:77:4d:d5:d5:5c:30:d5:23:
                    d3:85:a6:95:3a:b5:7e:04:ee:e7:64:b7:09:7a:4f:
                    40:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D7:F8:2B:BA:7B:87:3F:7C:15:A0:E3:84:08:37:36:8E:9D:E3:DA
            X509v3 Authority Key Identifier:
                keyid:A6:0A:D4:B1:5E:5C:1C:FE:C0:AF:B1:F8:18:A7:6A:08:F1:86:38:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ccbd44-63b3-4105-b39d-1a5559fdd4df/1/pgrUsV5cHP7Ar7H4GKdqCPGGOG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:59:ba:58:88:16:9d:16:81:4a:d9:f1:af:c3:61:23:96:08:
         9f:f3:f0:39:9e:d3:ba:33:b8:9c:de:cb:97:1b:03:df:6e:03:
         3d:e7:d1:14:df:c6:13:19:89:d5:3d:1c:19:7e:f3:30:42:2e:
         aa:ef:cf:71:5b:73:0b:3d:bd:6d:01:4e:2f:bf:2b:dd:57:8d:
         f7:93:b0:cf:df:0f:6f:9a:d8:09:08:91:0c:bf:2b:94:bb:e9:
         5a:01:c4:49:bb:43:0a:af:92:6a:54:96:fd:3c:6b:cb:0b:05:
         1e:fa:33:75:68:ed:4f:0d:ca:a2:32:c0:15:5c:fe:d1:b4:48:
         11:4b:e9:bf:c1:c1:06:67:f3:56:90:56:3c:38:98:a6:ca:c0:
         88:75:ef:8b:e1:52:98:1e:31:74:ad:f0:b5:8d:f3:48:95:c6:
         72:25:e1:b6:e5:d0:eb:50:a0:6f:71:86:cd:ce:c5:ee:a1:9a:
         f4:27:9b:75:99:6a:23:e9:ee:8b:c9:8e:1e:72:29:59:1e:9c:
         76:87:c4:65:f0:ca:a1:ea:58:e6:eb:da:88:40:5c:05:2b:a5:
         05:d6:79:57:1d:5a:7e:0a:de:1d:b6:e8:90:91:50:dc:8a:79:
         a5:32:e5:96:a5:38:95:e9:03:95:45:7f:b6:ca:dc:a6:af:3e:
         87:21:63:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----