Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft
File:                     pxErNcd6Sxb761YSHJdNWdVmeEs.mft (raw, json)
Hash identifier:          0FY+iuGqQ8C8sIQkA4p3azCfY5H3iMTT4Bos8i5JhsQ=
Subject key identifier:   AA:62:18:EE:B2:3D:00:4C:C1:65:34:6C:03:E2:D0:39:5E:AB:77:93
Authority key identifier: A7:11:2B:35:C7:7A:4B:16:FB:EB:56:12:1C:97:4D:59:D5:66:78:4B
Certificate issuer:       /CN=a7112b35c77a4b16fbeb56121c974d59d566784b
Certificate serial:       01962DF3E51AEC9C4D05EAC53017A65C746D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 07:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:20 +0000
Files and hashes:         1: BwH9GKC4b7MR-_mPUkvo5kX6MbM.roa (hash: RyMXzPGYxLYPm9LtvHil8vaRU4zoAb2AHBWbWaC8/jg=)
                          2: pxErNcd6Sxb761YSHJdNWdVmeEs.crl (hash: kb/Z+VLz7sAEGtKiWM5kkXTeMvNpc/y3q5CzwZL+dQY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e5:1a:ec:9c:4d:05:ea:c5:30:17:a6:5c:74:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7112b35c77a4b16fbeb56121c974d59d566784b
        Validity
            Not Before: Apr 13 07:01:20 2025 GMT
            Not After : Apr 14 07:01:20 2025 GMT
        Subject: CN=aa6218eeb23d004cc165346c03e2d0395eab7793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1d:52:36:5d:44:53:ba:42:47:c8:9c:e1:2c:
                    be:a1:2d:66:6c:c9:0e:9b:e6:99:76:89:79:40:31:
                    a8:56:99:31:ed:44:e4:fc:c5:71:09:e4:c3:a8:33:
                    ad:45:3e:56:84:a3:7d:cb:44:3d:f1:a3:de:76:49:
                    f5:2f:ac:47:0e:8b:6f:0b:fe:6a:4d:ae:e9:39:6c:
                    88:dd:bc:a7:a7:78:f0:93:a9:98:d2:a0:8e:85:1b:
                    1f:26:19:36:d3:8f:15:ee:a6:fa:bd:c7:00:90:35:
                    31:f9:73:0e:62:71:dc:ce:b7:6b:4b:ba:64:9d:5c:
                    4e:8a:14:c7:6c:d4:05:42:84:3b:5e:ae:30:1b:b3:
                    79:b0:04:66:04:a6:7d:b9:14:6f:99:a5:b9:86:af:
                    d6:4e:ea:b8:07:50:4a:6c:24:94:1c:2a:dd:40:85:
                    69:04:58:6c:f1:44:e1:8a:d4:5b:6e:0e:45:f2:f7:
                    81:be:38:aa:97:81:6f:25:42:a2:e5:4e:5c:f4:ac:
                    82:6c:31:46:70:a1:d8:04:4a:71:e4:a6:72:4f:47:
                    3a:40:c3:5b:89:0b:4a:67:ff:2b:9e:cc:13:6c:23:
                    14:ad:9f:06:02:24:30:3f:86:61:9c:2a:33:e5:d5:
                    a2:71:2a:02:b8:99:c7:b1:70:55:d2:03:ec:da:1f:
                    7c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:62:18:EE:B2:3D:00:4C:C1:65:34:6C:03:E2:D0:39:5E:AB:77:93
            X509v3 Authority Key Identifier:
                keyid:A7:11:2B:35:C7:7A:4B:16:FB:EB:56:12:1C:97:4D:59:D5:66:78:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxErNcd6Sxb761YSHJdNWdVmeEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/71cbe5-4a29-4567-a1fa-7888428225b4/1/pxErNcd6Sxb761YSHJdNWdVmeEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:23:e4:3a:6b:e6:74:ac:ca:a3:13:13:64:a2:70:47:e5:3d:
         38:85:39:f0:93:70:77:e5:0c:17:1c:fb:8e:b6:11:f6:d1:61:
         a1:fd:fa:63:66:46:c3:e5:7f:05:ae:8b:6c:06:13:49:30:0b:
         70:b5:0a:d1:88:2e:f9:58:5f:e5:d8:b0:65:2e:9d:48:3a:e4:
         82:85:4f:7a:f6:f8:80:fe:7a:ce:c6:30:e6:0c:c8:ad:f1:ce:
         c7:ae:47:fd:25:df:c1:5f:ec:e7:23:11:ed:6a:77:1c:02:f8:
         9f:ba:7c:0f:12:4f:cd:59:66:5f:10:0d:92:d9:a1:5f:9e:0d:
         0c:3c:56:20:2b:7e:cb:cc:64:04:e2:78:ae:37:0a:0b:60:1e:
         cc:61:bd:91:5c:23:61:6b:b1:23:50:d9:62:77:4e:76:dc:15:
         74:4c:41:a2:d7:9c:2e:f9:93:9b:3c:db:74:19:63:40:ba:1c:
         a5:42:1d:46:e6:fa:3a:cb:d7:f3:e7:32:d0:21:f9:a3:18:3d:
         ff:41:2f:a3:58:de:49:75:ad:57:e8:4f:b5:74:a0:48:f7:1c:
         6c:35:71:c1:a4:1c:c4:0f:6c:6d:a9:31:13:dc:c7:d2:2d:c0:
         11:6f:48:df:dd:aa:ed:9e:54:e7:c2:83:90:5b:5c:98:d6:e0:
         69:fd:70:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----