Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft
File:                     Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft (raw, json)
Hash identifier:          KqDhmLguexrFh6hKjmSQsL7Ipg8Ixm9XUxYbINWjmY8=
Subject key identifier:   22:82:A4:8B:64:8E:3E:96:67:B9:45:E0:04:3A:8B:2A:01:37:2A:AB
Authority key identifier: 3E:46:FA:1D:77:9C:19:6C:EB:28:02:91:06:B4:EF:7D:17:55:3D:2B
Certificate issuer:       /CN=3e46fa1d779c196ceb28029106b4ef7d17553d2b
Certificate serial:       01962E99ABAF111F0F08D3DD408680C12715
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pkb6HXecGWzrKAKRBrTvfRdVPSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft
Manifest number:          1111
Signing time:             Sun 13 Apr 2025 10:02:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:24 +0000
Files and hashes:         1: Pkb6HXecGWzrKAKRBrTvfRdVPSs.crl (hash: ggdB9Txq4mwyPW58CPzMLkGZKWKuGxo8wPGePN+xOyc=)
                          2: TvTxBLGF9a81RGikK2pVw5Qclrk.roa (hash: Swsi8hcudUdP4trO5kArswNQiDBcmbNtUjmXbEXUd0A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:ab:af:11:1f:0f:08:d3:dd:40:86:80:c1:27:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e46fa1d779c196ceb28029106b4ef7d17553d2b
        Validity
            Not Before: Apr 13 10:02:24 2025 GMT
            Not After : Apr 14 10:02:24 2025 GMT
        Subject: CN=2282a48b648e3e9667b945e0043a8b2a01372aab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:07:86:85:21:58:0d:48:ee:76:79:bf:db:3b:
                    12:83:c5:6c:96:b1:2b:bf:4d:b4:cc:7a:aa:7b:0d:
                    28:ab:99:3c:99:0a:cd:77:a1:1b:9f:76:cc:11:88:
                    2d:3f:c8:70:1c:3b:c7:54:70:e5:77:7f:0a:ff:26:
                    73:28:17:e1:4a:52:36:46:48:47:70:cb:56:59:de:
                    fe:42:f7:fa:76:eb:7a:ae:c9:7f:0d:47:27:8d:dc:
                    72:ae:f2:3f:35:88:8c:33:4a:34:68:4f:fd:54:e0:
                    b2:46:ef:ca:da:dc:85:28:f7:33:b1:ea:23:92:8c:
                    8f:e0:8f:c6:bb:f7:3f:a0:d6:7f:3a:55:72:3d:8c:
                    f3:df:e7:04:e9:4b:f7:25:fc:ca:b8:93:91:d1:e4:
                    19:82:b3:a5:9f:5a:2b:1d:ca:39:5f:cc:e4:d5:34:
                    1c:1f:cc:b0:be:02:30:2d:09:4e:36:63:15:aa:5b:
                    2f:c3:e4:70:1b:07:88:a7:31:3d:9a:7f:65:87:90:
                    04:e2:1e:0f:e4:e4:6c:9b:f8:7b:57:cc:8b:36:13:
                    8c:3a:c0:f5:f2:af:66:1a:39:6d:77:6a:17:6a:7f:
                    ba:48:54:b7:d9:e9:87:0f:96:96:45:31:10:5f:61:
                    67:ad:95:28:39:c0:80:f1:84:70:a3:a1:af:1f:5a:
                    b2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:82:A4:8B:64:8E:3E:96:67:B9:45:E0:04:3A:8B:2A:01:37:2A:AB
            X509v3 Authority Key Identifier:
                keyid:3E:46:FA:1D:77:9C:19:6C:EB:28:02:91:06:B4:EF:7D:17:55:3D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pkb6HXecGWzrKAKRBrTvfRdVPSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/03cb31-62f2-48c7-9b7f-0cd1d28965d1/1/Pkb6HXecGWzrKAKRBrTvfRdVPSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:dd:df:97:34:ec:d8:6d:20:46:e5:be:75:76:f5:91:ba:3b:
         1d:78:1a:8d:b9:4e:0c:77:cf:cc:11:c5:5a:27:e7:d1:85:f0:
         6b:be:ab:e8:5a:8e:0d:c6:7f:a6:50:7e:c7:4a:0c:e4:b1:de:
         52:3c:13:06:56:89:8b:c0:69:1c:1d:89:96:79:6d:f3:af:6f:
         48:93:22:4a:47:98:73:4c:b6:55:28:3c:e9:f0:d2:c2:30:91:
         a1:01:b8:a2:c1:95:3f:e3:38:6d:b4:8b:3d:37:18:97:ce:b5:
         3f:bd:2a:c6:f5:be:bb:d7:de:4e:db:87:4a:de:df:0a:3d:06:
         b7:b9:70:35:6f:07:36:1a:f1:cf:12:90:be:4a:35:1e:a2:64:
         88:7f:d3:ae:f9:3f:67:f0:0e:9b:da:34:05:2f:1e:fd:c6:70:
         b3:fa:8c:97:cd:a8:c8:b7:1d:bc:ce:69:f3:bd:7e:2c:aa:5e:
         a1:a8:49:b8:36:b9:24:af:04:9d:23:e2:9a:1b:56:20:e2:ea:
         4c:3d:6f:54:19:53:cb:8e:df:b8:74:25:10:3d:ce:14:d9:66:
         da:84:cb:20:58:d3:64:89:70:7b:b7:68:0b:bb:eb:91:cb:59:
         94:a4:6f:d2:0d:63:22:68:af:d9:45:9e:f4:71:0a:86:00:e5:
         54:50:86:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----