Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
File:                     PijW8T41ndC7RTSiRlWXTFfSsP4.mft (raw, json)
Hash identifier:          CauERoALk4CfsuSud5K906juMgEjLzmyFRfMzP3OTyU=
Subject key identifier:   A7:AD:36:B7:A0:5C:34:BB:A7:27:43:CF:B8:0F:37:18:A3:A4:BC:B7
Authority key identifier: 3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
Certificate issuer:       /CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Certificate serial:       01962F74B53FA71860AB8EABE28E87603A68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
Manifest number:          0777
Signing time:             Sun 13 Apr 2025 14:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:39 +0000
Files and hashes:         1: PijW8T41ndC7RTSiRlWXTFfSsP4.crl (hash: XNS/9dTkVjmgfBclX04gHdSJ3RGHNOogj9YWKJe9lMs=)
                          2: quGmI9u7kZ_srTH3LAyxtNKvCAo.roa (hash: RhLYYew4zXRTIVHsFT/3lhPwJj/c1cXNf2IyJ1qOi6w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b5:3f:a7:18:60:ab:8e:ab:e2:8e:87:60:3a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
        Validity
            Not Before: Apr 13 14:01:39 2025 GMT
            Not After : Apr 14 14:01:39 2025 GMT
        Subject: CN=a7ad36b7a05c34bba72743cfb80f3718a3a4bcb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8c:75:0d:02:96:26:73:cc:7b:98:be:52:86:
                    17:cd:ef:5f:a5:b7:45:2b:95:f5:58:58:7b:fe:02:
                    0b:21:92:55:c2:37:f9:2d:b1:35:34:16:b2:7e:59:
                    88:16:17:5b:77:06:e5:ba:11:2e:1b:72:5d:9c:72:
                    aa:e7:1f:0c:c6:65:55:4c:2e:98:a6:98:32:7b:66:
                    c3:55:bb:1f:89:59:f0:c0:d8:76:ee:d6:6d:4d:ed:
                    81:d5:96:21:82:85:f7:88:fe:c6:99:82:11:79:0f:
                    a9:c3:be:ed:0b:7e:79:86:02:3b:ed:ba:78:ae:22:
                    93:0c:11:83:fb:cb:84:51:dc:ec:62:a3:d9:f5:f4:
                    fd:2f:5d:d3:9e:da:4a:29:76:85:51:12:71:cc:1b:
                    3e:ba:4d:98:db:7b:b3:96:54:f8:b8:2b:4a:cf:22:
                    bb:23:fa:2d:ca:b2:d2:9d:fc:6a:86:33:6e:3a:a6:
                    30:c6:93:5e:08:cd:d4:a5:dd:86:03:01:22:1b:fc:
                    b8:55:b8:38:3d:0f:f3:af:c7:1d:9d:f1:93:69:34:
                    0e:28:dd:62:c5:eb:c9:4d:7b:5b:8b:44:08:ee:b8:
                    71:91:fe:21:6e:8d:47:ba:61:d5:01:2b:d3:cb:6c:
                    e4:3b:25:19:f3:22:23:f7:8d:16:8a:41:2e:f0:16:
                    f3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:AD:36:B7:A0:5C:34:BB:A7:27:43:CF:B8:0F:37:18:A3:A4:BC:B7
            X509v3 Authority Key Identifier:
                keyid:3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:89:2c:80:71:38:1f:c0:50:e0:eb:b5:cd:61:96:b5:29:e0:
         ab:c6:ee:d2:13:43:6d:3e:98:e9:d5:4b:f8:44:3b:49:d4:29:
         b8:69:76:cc:5c:85:50:c5:00:c4:96:0b:e3:c9:49:de:a9:72:
         49:b0:7f:2b:8d:0a:d0:a6:79:fc:a0:06:01:98:fe:08:87:5d:
         df:e1:5b:09:78:41:20:e0:38:eb:5d:8f:a7:29:02:8b:78:60:
         56:e4:72:73:7a:41:bd:2c:24:ce:73:ba:b6:9d:db:16:c7:1f:
         e3:b6:4d:40:83:fd:d8:15:9e:29:3d:12:ac:d0:11:bc:ff:1b:
         1b:1f:32:13:16:94:09:29:51:7a:5b:42:ab:08:94:cf:bb:58:
         92:85:38:bc:bb:a9:98:5f:50:87:e5:6b:79:fa:05:3f:d5:69:
         36:db:9b:ad:60:34:71:df:5c:44:45:10:dd:b0:14:5b:65:fe:
         7f:eb:c1:d9:22:6c:83:8d:dd:ad:33:80:9c:79:f4:8e:63:6b:
         c5:1f:e2:51:24:8f:37:7b:d9:2e:45:35:6e:71:5a:74:f8:90:
         d2:ad:96:a3:91:d0:a4:a8:82:6f:78:6f:48:ef:d7:ac:cd:70:
         c3:e5:8f:51:af:a7:d1:11:e8:53:b5:f5:72:17:e8:f4:59:96:
         e9:25:e1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----