Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.mft
File:                     psCc_RV4gUqM0dgdyGyJD9X6hmE.mft (raw, json)
Hash identifier:          CR9NSj2tmhzAOWSnG0vClxD9ov8JwRR2aqvkS5sizI8=
Subject key identifier:   DE:0D:70:9A:35:5D:E7:7F:93:1F:0E:83:15:50:31:A2:26:99:00:76
Authority key identifier: A6:C0:9C:FD:15:78:81:4A:8C:D1:D8:1D:C8:6C:89:0F:D5:FA:86:61
Certificate issuer:       /CN=a6c09cfd1578814a8cd1d81dc86c890fd5fa8661
Certificate serial:       01962E98C1A5C54E3AD9414CEF02A6C8EA2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/psCc_RV4gUqM0dgdyGyJD9X6hmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.mft
Manifest number:          07BA
Signing time:             Sun 13 Apr 2025 10:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:25 +0000
Files and hashes:         1: J51Teqgyy09b34rJcbgHerVOFGM.roa (hash: 19Bs3eSbGuxEB+iBQ+LwKa7Q22A3bTnu5AsBWmIZSJI=)
                          2: KztidovtFambRhPB8SLIQ-owEj0.roa (hash: ZiHrVtnB/KsSPCOwGxJB+E/s7C1HhkISdfaXBN1P1j0=)
                          3: psCc_RV4gUqM0dgdyGyJD9X6hmE.crl (hash: jNahGVjRYqc7yZexV9U7rY2Gt9EbN61T2vJ6iJLCRuQ=)
                          4: ujwp3pPR2D4C4IO8ortot5AhJsc.roa (hash: R/fpdE4SxTbnBF5zzZcf50YDXjlGaepj3n25cTayKNw=)
                          5: xygFAL-STuAoqvE59YVLwhBYgo0.roa (hash: KtX/KGqrHBsCj3UpDiERhcoHHsNFXropXHkJycWU6YM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c1:a5:c5:4e:3a:d9:41:4c:ef:02:a6:c8:ea:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6c09cfd1578814a8cd1d81dc86c890fd5fa8661
        Validity
            Not Before: Apr 13 10:01:25 2025 GMT
            Not After : Apr 14 10:01:25 2025 GMT
        Subject: CN=de0d709a355de77f931f0e83155031a226990076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:89:70:74:8e:a3:52:e2:9c:11:30:d6:42:ff:
                    8a:09:9d:1d:01:7e:8e:58:4f:05:8f:9e:25:8a:e0:
                    b3:6b:14:e5:a2:36:94:2f:25:af:27:e6:a5:d4:5f:
                    55:0c:9a:28:c6:25:1d:e2:22:af:75:91:73:8b:ed:
                    50:4b:e8:7e:c7:de:31:0e:2b:ad:92:2a:8d:e2:ed:
                    a7:50:e4:95:d9:a1:1a:f2:a5:13:bd:60:65:55:1e:
                    67:1c:34:c4:d5:4b:3e:32:b9:6c:83:56:af:ec:4b:
                    19:7a:1e:d2:25:79:cb:80:f8:d3:c8:82:37:21:8c:
                    a4:fc:cb:9b:e7:46:de:df:8f:6c:1c:18:4d:fe:65:
                    31:0e:fa:23:f5:16:a6:1a:12:7b:4c:3b:a2:25:5a:
                    af:8b:26:bc:a3:92:69:1c:ae:52:18:94:aa:b8:51:
                    b2:d9:62:52:94:e2:e0:9e:67:ef:b7:49:ad:38:05:
                    5a:e3:e0:1a:eb:68:df:fc:43:7b:62:38:92:b7:53:
                    41:24:f1:b6:ae:d0:d2:8b:6d:97:32:7a:b8:c2:e7:
                    d3:02:ef:8a:d0:17:1b:e5:5c:2c:d8:24:2b:b0:62:
                    0c:b2:87:fd:49:5e:02:90:16:e6:aa:ba:fe:dc:f3:
                    7a:da:c1:11:8b:aa:75:29:8f:15:c6:cd:49:a3:a3:
                    25:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0D:70:9A:35:5D:E7:7F:93:1F:0E:83:15:50:31:A2:26:99:00:76
            X509v3 Authority Key Identifier:
                keyid:A6:C0:9C:FD:15:78:81:4A:8C:D1:D8:1D:C8:6C:89:0F:D5:FA:86:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/psCc_RV4gUqM0dgdyGyJD9X6hmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/0762da-d66f-4dcb-9c7f-802bb51a1bed/1/psCc_RV4gUqM0dgdyGyJD9X6hmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:28:81:04:49:69:b4:96:4d:2a:4a:ce:4b:82:3f:e7:9c:02:
         66:79:3d:a4:a6:b3:53:17:5a:54:82:72:f6:1e:95:3a:0b:e9:
         e4:74:ec:04:39:67:af:01:ae:3a:66:a4:a6:cd:c0:2a:94:5f:
         55:38:02:52:cf:37:10:95:1b:3e:bb:5f:0e:de:0e:2a:6a:07:
         bd:c1:44:46:61:fe:41:55:db:a6:f8:b1:0f:dd:b0:3c:1b:18:
         b1:45:4c:aa:ed:c4:cb:f5:94:ee:31:1b:62:26:b3:87:38:f0:
         0d:a0:88:dc:b3:85:a7:d1:86:b2:9f:57:0c:68:58:7a:0e:d7:
         8f:f5:be:64:ec:24:21:24:4a:79:59:79:49:b2:36:d5:e6:40:
         26:8c:7a:16:05:50:a7:37:dc:fb:93:87:18:b5:a0:62:88:8e:
         0f:75:3f:03:93:a3:99:8c:49:19:af:f9:93:9f:82:bc:a0:4f:
         fe:a0:1f:7b:12:c8:7f:1a:b9:8e:e1:cb:19:01:b4:dc:0b:52:
         25:cb:df:0b:09:3b:1c:b8:2a:6b:49:db:8e:be:0b:ff:1d:e8:
         5f:97:3a:9d:99:6e:6b:7b:83:a0:0b:97:24:c8:da:95:26:69:
         31:96:d3:0d:a9:83:b9:11:87:1e:74:87:06:dc:6b:ae:dd:7f:
         5f:fe:c8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----