Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft
File:                     pPhiddwhxh2gzs0Sfpd0zKoysLs.mft (raw, json)
Hash identifier:          95ZWTXfZK6iV1lnH9H/C8ejexrjbRS12lK04jmP3VjQ=
Subject key identifier:   28:97:AD:07:2E:D2:D9:92:36:9F:1E:83:06:B4:82:88:A0:F3:69:FD
Authority key identifier: A4:F8:62:75:DC:21:C6:1D:A0:CE:CD:12:7E:97:74:CC:AA:32:B0:BB
Certificate issuer:       /CN=a4f86275dc21c61da0cecd127e9774ccaa32b0bb
Certificate serial:       01962ECFBA2C69FFB8B2F714EA67AFF77C85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPhiddwhxh2gzs0Sfpd0zKoysLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:27 +0000
Files and hashes:         1: a0SjSsK93R47m4eRP1Kso9k59CQ.roa (hash: 4DqaXQky67MktM88+QkXZEvBSJRKln9MtvLpFVmXjJ0=)
                          2: pPhiddwhxh2gzs0Sfpd0zKoysLs.crl (hash: 19yGUbWtom5q/vp2vawRE4d1xK/u4JrnZmLNIKIwKQM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ba:2c:69:ff:b8:b2:f7:14:ea:67:af:f7:7c:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f86275dc21c61da0cecd127e9774ccaa32b0bb
        Validity
            Not Before: Apr 13 11:01:27 2025 GMT
            Not After : Apr 14 11:01:27 2025 GMT
        Subject: CN=2897ad072ed2d992369f1e8306b48288a0f369fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:93:f5:9e:fd:67:06:44:de:1b:ac:68:66:75:
                    f7:ff:c7:bc:47:d0:c2:31:72:92:cd:9d:fe:e3:ba:
                    5d:67:68:c3:7c:ee:dd:5b:7c:8c:2a:09:e3:cd:3c:
                    15:83:ee:10:97:49:35:28:a1:59:be:3b:24:d7:4e:
                    52:5b:fb:a9:fb:77:ec:9d:fb:ee:3d:84:79:d2:26:
                    ab:db:82:e7:81:0e:42:4e:9d:7c:9c:06:62:17:20:
                    91:e7:35:d4:d5:b0:1d:af:ae:5a:a4:5d:7d:0b:70:
                    b2:24:64:89:f9:d1:56:02:bf:9b:af:51:64:e3:82:
                    91:f7:31:4f:71:6a:f0:54:51:86:9b:16:89:a9:a1:
                    27:5a:28:b8:3e:6a:c7:5a:df:f6:7e:2f:63:91:56:
                    38:da:8d:9f:3c:3d:0d:86:47:1d:9f:39:a5:a4:b3:
                    ac:1d:01:90:15:50:86:eb:2b:2b:ce:85:c3:42:61:
                    f7:f4:67:d1:79:d6:06:29:8d:20:f5:12:83:70:4b:
                    07:a4:e4:c3:19:c8:78:aa:47:61:d8:f6:17:b4:90:
                    2e:c1:24:4b:86:ae:d9:49:a0:56:80:56:38:6d:d4:
                    d4:8f:24:de:f6:c2:1e:e4:b6:d2:bc:f1:14:9c:0c:
                    16:81:50:dd:d8:f2:74:9c:57:28:06:ff:ce:d4:67:
                    cf:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:97:AD:07:2E:D2:D9:92:36:9F:1E:83:06:B4:82:88:A0:F3:69:FD
            X509v3 Authority Key Identifier:
                keyid:A4:F8:62:75:DC:21:C6:1D:A0:CE:CD:12:7E:97:74:CC:AA:32:B0:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhiddwhxh2gzs0Sfpd0zKoysLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a8bf2-6cb3-49ae-9e32-8829ee661c64/1/pPhiddwhxh2gzs0Sfpd0zKoysLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:75:24:97:66:3d:1f:54:2f:de:c3:bc:ae:94:18:c8:32:b2:
         29:4a:b4:f0:90:d2:6c:9c:7b:72:49:de:a8:97:69:0c:f8:a2:
         d2:fb:02:44:9b:33:f2:19:01:00:8a:53:15:0b:37:ed:e1:62:
         83:88:f2:4e:ad:44:16:ef:50:e7:57:1d:89:a2:0f:c5:c2:e4:
         22:6b:02:2e:e6:f1:e5:4c:67:64:a3:36:a0:c8:77:90:f2:97:
         f4:d8:f3:aa:33:d4:59:63:9a:a0:e0:f0:54:f2:e6:c1:48:6e:
         0d:72:bf:25:cb:e7:d8:4a:2a:20:1c:fb:0d:e1:6a:6d:4b:28:
         e5:29:a3:d1:28:44:32:15:26:87:8b:c6:2c:9e:bc:89:0a:8e:
         2c:da:6b:15:96:1d:e7:aa:29:76:ef:ad:09:fd:fb:15:8a:0a:
         3a:01:d7:5c:03:d3:31:86:01:a8:51:f6:81:03:07:00:59:bb:
         7a:e2:0d:52:5f:30:a7:74:bc:a9:78:56:b1:cf:2a:13:6d:9c:
         8b:2e:9d:69:56:32:af:26:cd:6c:67:db:45:c5:ed:64:b0:49:
         48:28:85:f8:6e:5d:a5:35:14:06:61:d5:57:a1:fc:a5:f1:ad:
         42:59:97:dc:00:c6:7a:7b:0a:43:28:d5:03:cf:da:30:4c:e0:
         67:b4:3b:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----