Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
File:                     PidCSWQA2BC-W0CW_e3sMKIx-as.mft (raw, json)
Hash identifier:          /lROht3UtqL6ODnxbdU4uR5Mmag1++9vyGHm1vlt8+Y=
Subject key identifier:   21:55:67:C5:ED:DB:3A:15:7A:80:AA:10:3F:88:32:24:CB:F8:63:EF
Authority key identifier: 3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB
Certificate issuer:       /CN=3e2742496400d810be5b4096fdedec30a231f9ab
Certificate serial:       01962F066F13F56898D3140A1B823D4E40BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft
Manifest number:          08CD
Signing time:             Sun 13 Apr 2025 12:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:12 +0000
Files and hashes:         1: 5pXO0rccDvdcNpNF4kBVulDgfCw.roa (hash: N4A+PObGjvFgO5mi8UIuKYZJSnV7LB7QBUfSUqvfnRE=)
                          2: PidCSWQA2BC-W0CW_e3sMKIx-as.crl (hash: RKRxQXCTYSqhTwxa2gb8Py0/f47tcwN1H/4eHrkS59k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:6f:13:f5:68:98:d3:14:0a:1b:82:3d:4e:40:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e2742496400d810be5b4096fdedec30a231f9ab
        Validity
            Not Before: Apr 13 12:01:12 2025 GMT
            Not After : Apr 14 12:01:12 2025 GMT
        Subject: CN=215567c5eddb3a157a80aa103f883224cbf863ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4c:60:2f:ae:41:28:b1:50:bd:c6:f7:3d:67:
                    01:47:14:26:ae:fc:37:4f:7d:df:13:fa:5b:26:6d:
                    84:a9:6f:71:be:dd:93:6c:78:f9:21:fd:7f:f9:7a:
                    12:55:cf:ed:45:28:1b:72:7a:0f:5e:5c:27:3c:93:
                    f1:00:32:ca:ff:9b:7c:97:33:95:ed:b3:db:1f:8f:
                    37:6f:d3:c1:04:7f:1d:9a:1e:ef:b7:61:80:b5:e9:
                    5a:3d:b8:ca:ee:07:51:44:67:5b:6f:31:0b:39:21:
                    d6:f7:2b:5b:c6:15:0f:0f:2d:0c:41:f2:f1:f2:96:
                    40:6e:98:aa:d5:1d:b3:76:c8:1d:31:88:82:2c:bb:
                    67:7e:1a:d2:39:f4:f1:af:1c:d8:84:c3:ad:e0:16:
                    1c:40:71:a5:90:bd:84:61:c2:ee:b9:c2:a7:e3:4f:
                    c3:db:6f:6a:fd:a8:40:71:cf:1f:33:8b:55:e8:f1:
                    ac:c5:33:35:51:68:f8:67:fb:8d:a7:45:3d:b9:9e:
                    de:1c:22:66:3e:a4:e5:84:51:00:93:16:57:5e:5b:
                    75:36:99:0e:fa:68:b3:16:5f:1d:62:d7:7d:72:31:
                    64:80:f4:cc:40:ca:ad:90:ad:9f:07:28:c3:26:07:
                    08:40:23:2b:cb:87:05:c2:03:8b:cd:48:15:38:57:
                    4e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:55:67:C5:ED:DB:3A:15:7A:80:AA:10:3F:88:32:24:CB:F8:63:EF
            X509v3 Authority Key Identifier:
                keyid:3E:27:42:49:64:00:D8:10:BE:5B:40:96:FD:ED:EC:30:A2:31:F9:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PidCSWQA2BC-W0CW_e3sMKIx-as.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/922f6d-7a74-4fa8-9495-184dff292a30/1/PidCSWQA2BC-W0CW_e3sMKIx-as.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:4b:ee:38:db:18:65:db:07:95:77:93:11:26:cf:92:fe:6d:
         21:27:57:59:82:85:dd:64:f6:13:0e:6c:89:26:3e:60:86:20:
         4a:33:f8:86:68:e6:1e:81:21:ca:7c:b8:b4:49:bd:c9:8f:21:
         39:1a:c5:a7:ec:ae:ab:5d:78:a9:b6:9b:68:29:79:80:cb:45:
         97:f7:85:aa:8f:9e:9a:83:96:6b:80:00:bf:15:ee:81:49:9d:
         48:78:9d:51:83:4c:3e:58:12:e3:31:82:3d:cf:d9:05:6d:98:
         ac:50:89:78:32:69:01:10:2c:56:a1:03:95:54:1b:a2:4c:0c:
         c9:a0:a1:ee:b2:d4:22:7c:00:ea:4e:82:ac:11:a2:cd:4e:6c:
         53:20:c0:92:0e:4f:b7:c1:16:dd:41:05:2f:4b:ee:99:dd:b7:
         08:a5:3d:2f:74:6f:3a:66:e3:1b:07:0a:8f:10:3e:88:c1:4c:
         ec:fd:51:47:8d:06:aa:cb:12:af:55:9d:8f:af:22:c4:cc:b6:
         26:7a:90:82:07:23:db:16:01:d5:80:f4:30:0c:db:76:6c:67:
         b5:b0:fc:e3:21:00:77:59:ed:22:29:8b:ab:73:62:a8:fe:64:
         09:ef:f0:db:3c:8b:a4:3f:21:ec:45:be:50:eb:a6:33:26:11:
         ae:8b:b5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----