Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
File:                     pJMvpJVkpXamFD5F-BVmjyANdjc.mft (raw, json)
Hash identifier:          HyQdzZRnlBNco7+a02LRAPryM5OW1U4/fwWNMWPbh4Q=
Subject key identifier:   53:33:66:CC:26:57:7B:F2:F1:2F:98:AA:63:40:F7:62:BA:AE:AB:27
Authority key identifier: A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37
Certificate issuer:       /CN=a4932fa49564a576a6143e45f815668f200d7637
Certificate serial:       01962E61FF9C41D13A7724B5053CC594AC21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft
Manifest number:          0596
Signing time:             Sun 13 Apr 2025 09:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:36 +0000
Files and hashes:         1: nbFO3tETAKU90cGGwpaCKUOKTLY.roa (hash: cquJx46DtG8x6pISzm/UdeY5xz+jlo5riwT4Pb8N/jw=)
                          2: pJMvpJVkpXamFD5F-BVmjyANdjc.crl (hash: eIYMhtgvWNfgkbdoIEl4FccH0+48erxo67AS773BslE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ff:9c:41:d1:3a:77:24:b5:05:3c:c5:94:ac:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4932fa49564a576a6143e45f815668f200d7637
        Validity
            Not Before: Apr 13 09:01:36 2025 GMT
            Not After : Apr 14 09:01:36 2025 GMT
        Subject: CN=533366cc26577bf2f12f98aa6340f762baaeab27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e3:a5:d5:0a:7b:5d:79:34:11:22:98:f4:d7:
                    2c:79:f4:c0:10:be:0f:62:22:30:0d:52:b8:c6:eb:
                    b7:26:c3:ed:7c:cd:d5:f0:fc:a1:0d:c0:ad:80:2d:
                    ba:f2:33:9e:04:a6:d4:24:da:e7:68:9e:38:6e:d0:
                    7b:18:49:68:67:3b:53:25:d7:e7:80:e4:4a:10:38:
                    d0:a2:8c:b2:e8:bb:0b:e8:76:89:77:d7:25:dd:f6:
                    df:6b:58:cb:ba:8e:f1:b8:74:da:02:7d:b3:cb:3e:
                    1f:88:b6:42:2e:0f:09:7b:e5:00:db:04:cf:62:7d:
                    88:44:87:93:f7:d2:21:4c:fc:d3:9a:45:6f:81:51:
                    7b:a2:bb:d7:e9:7f:c9:a2:d0:ed:56:c0:4a:13:4d:
                    60:cd:a6:50:22:30:1a:6c:58:c3:d2:47:f7:7d:88:
                    fb:0a:95:76:ad:76:c6:8a:72:a6:95:46:ce:8b:56:
                    7e:85:16:c6:a1:b0:44:93:c5:e3:31:fb:4b:5b:66:
                    64:d4:60:57:e2:cd:22:da:ac:fa:64:23:02:25:44:
                    00:7f:6f:10:78:89:79:ea:f0:b7:a2:5a:c4:2f:29:
                    3b:8a:ae:a4:92:de:e8:7a:b8:02:f5:57:ec:8c:6f:
                    70:59:34:10:a0:54:44:03:53:5e:13:62:44:89:cc:
                    85:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:33:66:CC:26:57:7B:F2:F1:2F:98:AA:63:40:F7:62:BA:AE:AB:27
            X509v3 Authority Key Identifier:
                keyid:A4:93:2F:A4:95:64:A5:76:A6:14:3E:45:F8:15:66:8F:20:0D:76:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJMvpJVkpXamFD5F-BVmjyANdjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04ab46-83f3-415b-883a-c7c326d7a364/1/pJMvpJVkpXamFD5F-BVmjyANdjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ba:3a:d2:26:86:12:eb:5b:d2:94:6d:bb:9b:58:c4:5a:52:
         f0:f4:86:23:f8:34:dc:39:68:f8:de:67:6a:09:f5:05:45:09:
         bd:2b:c7:e7:c2:fd:0a:b4:1c:87:51:60:8e:b3:e2:ec:0b:91:
         ed:73:5d:db:4b:74:5f:f4:10:40:16:b1:b1:2a:d5:79:2c:ad:
         a3:09:59:f2:32:1c:e4:34:27:d1:b0:d6:72:c2:e1:37:17:fd:
         67:f8:1d:e2:5f:e4:72:3d:55:dc:f6:c2:75:91:8f:17:ff:b4:
         d5:16:fe:da:5b:1a:c3:fb:83:66:ee:51:41:a8:1d:57:3b:64:
         3c:29:75:7f:1b:2f:fd:9b:ec:d1:78:8d:07:9e:40:6e:a8:88:
         19:d8:a2:c6:4a:0f:9c:41:a9:1e:5b:96:54:f4:b6:29:84:55:
         d1:00:aa:77:23:cd:fa:e5:7b:f2:5f:65:f8:cd:6f:f8:9f:c1:
         4a:84:d9:2f:60:e5:6c:4e:7b:d4:a6:a2:06:b5:36:4e:45:d9:
         23:d4:c5:43:66:50:fc:74:76:0c:a6:4d:b6:0b:0c:96:a1:91:
         69:fc:e5:00:0e:95:a6:d2:04:b8:c8:bf:59:0c:6c:ad:a6:c6:
         64:f5:1a:61:58:bc:44:ac:e3:ba:f2:e1:ad:d5:1c:44:aa:be:
         cc:15:d4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----