Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft
File:                     pjvMbSX3R2-7PsM_bbw-nurZIhI.mft (raw, json)
Hash identifier:          Le3M+s/JhEq0PQB2JGBL/nah3xiYdjNMNC09i5nQRMg=
Subject key identifier:   84:9C:7E:A0:1F:EC:7B:CF:6D:9F:D0:0A:8B:8A:C0:8D:F7:6D:BC:C4
Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
Certificate issuer:       /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Certificate serial:       01962FAB6F64137B050B96179B8B3AF72602
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft
Manifest number:          0846
Signing time:             Sun 13 Apr 2025 15:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:26 +0000
Files and hashes:         1: 0zBZJP0kyDhay_FLZ4i5g9nbbPQ.roa (hash: RJngLSc8W5p+aB/9xeZPrMLETZYTrNhbKpYClU/cMKE=)
                          2: 5NFcVQOlS2SfRA9_dseHho-9-mc.roa (hash: swfI8aXvx2sxn3YOzxRnlDU7qvwOILHJAwX26Y3ztqI=)
                          3: 719PZLmeHqbujtRsKmvo5771XIo.roa (hash: bsKRuhzJIveVWiHQvKvv+dLt6oNf3d66tNY6ht9/C3A=)
                          4: 8WUQrdzKsEZUNzZ9k3E9ajfkd5s.roa (hash: Ixz0hSpVqJJ/oAfsncTGxOv3fHWBSaH9gBGjqTv8vpQ=)
                          5: FHXWFrj4nreKJjXTfDKCc6Y16Is.roa (hash: PfuW04ELrwKUUeQD8qGy+/BFhBo8C5J05OWPOUMFx5w=)
                          6: Ho4pDAaaconFe5cZ7ygze1a44Xo.roa (hash: 1pC6hpICFpbgfqlZn7adq2AVfLKO5t0AC5KWofkjFSE=)
                          7: Kd5CFoG07kPDgqUGQpHj24zQka8.roa (hash: +2s4BraFjLJP4x9hMH6DgHfMWVkWCLxuz2cF8ghToGs=)
                          8: NYJYw1BTKJV56akoY5ZQRJna-MA.roa (hash: brwHoHz9mi1vg8NUkbqZqqePDdu1Ej44xmauCwQ9Qac=)
                          9: _-FUjYz5pLdhL7MicJJ-uRt5LKI.roa (hash: FdRIrcXaoKNyd2lS+olFcjF6MT37TxwlG2cpQ0ijFig=)
                          10: pjvMbSX3R2-7PsM_bbw-nurZIhI.crl (hash: FWnVQex/NbZR5gZLEoRc5FBEAObj7yguJKwQWuUlSIc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:6f:64:13:7b:05:0b:96:17:9b:8b:3a:f7:26:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
        Validity
            Not Before: Apr 13 15:01:26 2025 GMT
            Not After : Apr 14 15:01:26 2025 GMT
        Subject: CN=849c7ea01fec7bcf6d9fd00a8b8ac08df76dbcc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3a:2e:fe:65:b0:29:83:17:18:6a:f3:05:74:
                    08:bc:f6:da:64:1a:89:37:27:95:35:0b:6b:8b:72:
                    9f:fb:fe:10:83:97:af:0e:0a:b7:f4:6d:df:06:0d:
                    1a:05:35:ff:3c:3e:43:99:15:af:21:e0:f5:bc:7c:
                    f1:ce:94:9e:2b:9f:75:3d:a8:23:b8:73:6a:82:3f:
                    21:6c:62:a0:dc:8b:da:2f:7f:75:92:ce:21:4e:7f:
                    ca:8e:f4:e9:0e:67:89:66:ed:14:b8:2d:1b:08:e2:
                    af:53:79:bf:4d:00:fc:e7:65:c8:89:17:e3:35:92:
                    49:d2:c3:02:28:9e:48:88:6f:21:16:f3:e2:1e:19:
                    79:87:9d:f7:59:14:6a:0d:d4:1d:c6:ae:d9:b4:09:
                    ba:b0:19:91:77:e3:ad:5a:f5:5d:a9:88:23:0a:8c:
                    a1:e1:f2:b0:69:b7:43:75:c3:c3:8f:b3:7b:ad:3d:
                    e8:94:19:7a:62:1b:7e:e2:f7:9d:c3:88:2b:73:eb:
                    45:bd:59:ff:eb:8d:21:f1:55:8e:7e:5b:66:96:b6:
                    cb:dc:c9:e6:2f:0d:22:d1:c1:ca:d4:d3:02:c1:f4:
                    63:5a:5c:11:39:40:59:d4:47:c2:85:36:d7:8b:92:
                    c0:88:81:15:aa:d0:10:f8:19:c5:99:b6:a4:39:b0:
                    eb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9C:7E:A0:1F:EC:7B:CF:6D:9F:D0:0A:8B:8A:C0:8D:F7:6D:BC:C4
            X509v3 Authority Key Identifier:
                keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f9:30:ed:8e:33:d8:de:fe:a7:71:7e:f7:5d:da:de:5e:1b:
         9d:30:21:3a:a8:14:70:65:b5:3a:f5:01:c7:fe:b8:52:b9:80:
         56:8e:83:50:1d:38:5c:54:a4:90:40:f6:e3:83:2a:b8:ea:c0:
         15:7b:ee:d8:a8:1f:50:e2:35:f4:7e:07:92:d6:97:78:9c:39:
         8a:6a:06:d7:6b:1b:16:f3:23:74:48:33:db:a3:ea:15:46:29:
         71:d5:d4:5d:1c:79:c4:3f:a2:80:45:1f:86:24:f1:3d:a7:2c:
         04:83:53:fa:9a:e0:7a:f5:ac:df:c5:3f:c7:c6:6f:f9:3c:46:
         0c:d6:44:e5:b9:5b:3f:74:85:d8:68:94:80:66:62:b5:92:1d:
         48:ee:63:46:ea:dc:b8:2f:e0:10:50:47:75:7c:a0:df:19:3b:
         6f:ef:d9:55:56:0c:fe:f3:e6:f6:50:7b:d7:01:50:80:c6:d5:
         94:df:03:27:46:ae:46:45:8b:de:0b:ef:2c:8b:f2:47:aa:c4:
         73:13:0a:58:67:3e:57:f3:25:30:82:c3:e1:03:e6:2c:90:94:
         40:fd:4e:b4:d5:41:9b:bf:09:2b:a9:22:2a:af:54:ff:f3:ee:
         f4:0e:ba:86:93:79:5a:38:50:fd:d8:62:32:d5:53:11:3a:60:
         00:32:6a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----