Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
File:                     pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft (raw, json)
Hash identifier:          IUJHR7Fv8+jpWgnI/oBCEOcuVwPpGWXiuONOkohB2Os=
Subject key identifier:   3B:A3:36:B7:5E:55:43:9B:38:2C:1F:1D:42:A6:DB:95:DB:51:E2:30
Authority key identifier: A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9
Certificate issuer:       /CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
Certificate serial:       01962F74A1C4611C3B99A874C8EF093D8BB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 14:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:34 +0000
Files and hashes:         1: o-nYlXPYTvbWycHnP4jG4hys78s.roa (hash: +9u5uc7wAwLvJQwWxklCfmQHya0NysgfSBmasNGP6Yk=)
                          2: pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl (hash: eZ9pOd1QdeFFIIBIWKcus4p7+YMYcruppZC4nZ16+vw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a1:c4:61:1c:3b:99:a8:74:c8:ef:09:3d:8b:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4abaf1d37f0a141a814ca02fc01e3d9621c73d9
        Validity
            Not Before: Apr 13 14:01:34 2025 GMT
            Not After : Apr 14 14:01:34 2025 GMT
        Subject: CN=3ba336b75e55439b382c1f1d42a6db95db51e230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:72:5f:24:6a:66:30:4c:19:72:6c:49:a1:69:
                    e7:97:65:9e:39:66:81:28:cb:53:4a:45:57:b2:2c:
                    d5:51:31:0c:36:64:18:5e:3a:83:76:b2:fa:6b:fb:
                    3b:5d:38:e6:5a:11:4f:ec:5c:f3:46:0b:45:92:89:
                    69:9e:b6:c7:50:05:3a:c6:2a:32:03:bc:5f:d2:25:
                    1b:55:4b:b4:ce:fe:e3:44:07:92:0c:7e:2f:40:9b:
                    46:bb:34:54:bb:9d:e8:de:a0:e2:45:e7:b2:ad:40:
                    0a:7d:19:01:d4:8e:8e:7e:ce:5b:bb:c3:86:8c:ab:
                    10:73:63:f5:53:6e:ae:50:1f:3d:09:ea:83:c2:19:
                    d1:f6:97:38:66:54:75:ab:ad:e3:dd:13:11:c0:f3:
                    92:c3:2e:ee:cd:ae:70:3c:f2:68:41:a5:57:c3:38:
                    d1:bd:da:29:17:fc:39:64:01:84:fd:bb:49:97:dc:
                    02:31:8e:06:e7:cd:41:80:dd:2a:15:30:cb:18:99:
                    5d:cc:49:ea:aa:c9:94:88:5e:bc:1a:65:3d:5a:7d:
                    6d:69:f7:bf:ae:c2:88:d5:32:ae:41:77:f1:85:b6:
                    77:10:fb:bb:23:c0:a1:a0:4e:c6:f1:81:35:34:73:
                    bc:ce:43:f8:a7:4d:c6:57:45:95:e0:50:b4:07:07:
                    df:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A3:36:B7:5E:55:43:9B:38:2C:1F:1D:42:A6:DB:95:DB:51:E2:30
            X509v3 Authority Key Identifier:
                keyid:A4:AB:AF:1D:37:F0:A1:41:A8:14:CA:02:FC:01:E3:D9:62:1C:73:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKuvHTfwoUGoFMoC_AHj2WIcc9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/155bdc-b574-47f9-b348-93cf64f88990/1/pKuvHTfwoUGoFMoC_AHj2WIcc9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:7f:84:c0:28:a7:fb:3e:f5:8b:4b:83:9b:f2:2b:56:2d:ad:
         7e:de:50:86:94:8e:f1:ec:99:9a:47:d5:bb:56:7c:bf:64:2e:
         0d:b2:dc:e3:fb:22:65:5e:2f:e7:8a:79:a0:ea:8c:2e:40:68:
         1a:9b:f2:46:19:48:e9:1e:f0:c1:e8:64:4d:3f:97:0b:79:3b:
         a0:f0:75:7e:6e:63:03:28:d1:4b:71:eb:d1:0e:90:af:48:dd:
         f8:56:26:5a:da:8f:83:b0:f1:01:08:f3:ab:bf:db:36:38:91:
         be:2e:bf:2f:04:eb:0e:3e:18:4a:fd:00:6d:7d:9b:5c:c5:63:
         bb:ba:b6:2d:5b:5b:1d:b7:83:37:8d:53:b1:b2:eb:b3:51:8b:
         ab:cf:8a:b1:7a:e6:20:db:0e:54:f1:66:ba:13:f6:69:9b:4b:
         f9:ad:63:33:71:e4:95:cf:b7:00:26:a7:e1:36:63:55:aa:2b:
         ed:1d:9a:0e:c7:43:9c:88:29:7a:74:22:e0:34:22:ac:42:43:
         59:c4:b0:84:df:0f:ba:26:29:39:92:88:0d:1f:11:7e:b2:24:
         dc:15:39:6e:c2:05:54:8d:1e:ad:8e:ea:bb:6b:dd:9e:ab:d7:
         d0:8d:39:9b:59:8a:1a:77:bc:d5:26:f2:cb:60:70:62:1e:b3:
         53:11:5e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----