Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
File:                     PaIT8CpnCwU3DFXszOkP4a1wxJs.mft (raw, json)
Hash identifier:          muHvwNnmWynGcvh2c7h93TNemlXoW3L+PoNbvxxI+9Y=
Subject key identifier:   30:85:22:3F:CB:BF:5D:39:9C:F8:C9:11:58:02:DC:F5:1B:B1:B8:B1
Authority key identifier: 3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
Certificate issuer:       /CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Certificate serial:       01962F3D7771BF1DE0BCDBD6A6E1283C668C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 13:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:19 +0000
Files and hashes:         1: PaIT8CpnCwU3DFXszOkP4a1wxJs.crl (hash: MnAufkP5w4Or0J2GaIsoXZPpF3WGQ3emOUukaqR0WHQ=)
                          2: YwjVQrwYeFZPTMiqnnut8eO8rkw.roa (hash: o942C1AhbUgPtgCYdOmXc46V0WMZFJ062pG0YGycwpc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:77:71:bf:1d:e0:bc:db:d6:a6:e1:28:3c:66:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3da213f02a670b05370c55eccce90fe1ad70c49b
        Validity
            Not Before: Apr 13 13:01:19 2025 GMT
            Not After : Apr 14 13:01:19 2025 GMT
        Subject: CN=3085223fcbbf5d399cf8c9115802dcf51bb1b8b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cb:28:98:e8:19:26:5d:dd:7e:5e:8d:fe:6a:
                    36:f1:29:db:19:f1:7a:bb:9a:8a:30:6f:be:73:4c:
                    3f:5e:c8:68:de:1e:a2:12:ab:91:94:5e:0a:60:5b:
                    1e:36:16:ba:ae:79:16:fa:37:6c:0d:32:d0:a8:ba:
                    f6:45:44:4a:e0:fe:bf:29:51:e5:bb:61:29:19:8d:
                    78:d7:6f:76:32:70:15:62:1c:ef:70:81:2b:f8:f6:
                    83:00:58:00:ac:d0:91:7e:0e:49:58:d8:52:cd:f1:
                    d7:2c:50:3c:2b:f3:30:93:f9:23:86:24:23:9e:cc:
                    76:97:f5:37:ec:f4:76:40:ea:6c:2c:57:01:6b:6a:
                    b5:57:59:d3:f4:2b:d8:70:f6:4e:91:6b:ee:cc:82:
                    86:7e:11:54:f7:07:57:e7:88:f2:11:09:95:b5:ac:
                    3e:d0:ef:85:75:aa:47:11:b1:d0:aa:a4:d6:7b:63:
                    f7:bd:a9:04:9d:f7:ef:42:bd:2f:97:e3:1e:71:15:
                    3d:ef:cc:52:b5:4d:17:ad:2a:73:ac:25:76:7c:9a:
                    82:49:78:d4:d3:7b:d0:25:cd:8c:98:b8:54:fa:9b:
                    ac:e5:d9:b4:f9:9b:86:88:88:d5:4d:16:da:0b:47:
                    a9:15:3b:e1:4a:06:88:be:7b:32:4b:db:62:51:73:
                    7c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:85:22:3F:CB:BF:5D:39:9C:F8:C9:11:58:02:DC:F5:1B:B1:B8:B1
            X509v3 Authority Key Identifier:
                keyid:3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:36:d4:14:8b:4f:6e:fa:88:56:dc:11:c3:f1:5f:cf:67:84:
         21:20:a1:e1:16:2d:fa:e0:f9:90:22:96:e8:06:ef:0f:32:7c:
         5a:37:0d:40:cf:08:6d:d9:b4:38:2a:be:2d:ea:16:aa:45:30:
         4b:0f:2d:45:2b:a1:e7:50:13:28:48:ec:cd:5d:b2:40:04:7b:
         02:8e:7c:67:ee:0c:1f:bc:84:fa:f6:4c:0a:71:8e:87:0b:eb:
         11:dd:2b:34:70:66:4e:db:33:fa:32:81:14:77:fc:4a:cd:9d:
         d1:25:1a:60:86:03:2e:fd:13:b4:3b:83:82:c4:03:7d:7d:e7:
         dc:7d:28:df:bb:1e:e3:c9:09:9b:8f:00:61:28:28:e0:e1:62:
         39:ec:55:59:78:37:5e:21:dd:23:dc:3f:ae:b7:1c:a7:d0:f1:
         1b:01:04:b9:e5:31:33:16:53:d4:41:e0:bb:6d:88:6b:f6:ad:
         6b:bb:d9:aa:61:28:ec:9d:ef:c3:af:74:77:34:5c:e7:30:4e:
         6c:67:d9:b7:46:fe:21:25:bd:ac:36:84:ed:66:4b:43:d0:22:
         73:26:b4:1e:a7:a5:6b:e0:c6:77:b5:8a:88:b3:a2:91:02:d8:
         a5:f9:d4:32:12:2a:c4:aa:39:e1:24:eb:db:66:47:35:ab:da:
         08:27:d8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----