Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft
File:                     P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft (raw, json)
Hash identifier:          ZyND4i5yJBoMhqRNwWtQzFvW/cQ9fzyrsnslEYB3ecQ=
Subject key identifier:   44:A2:FC:73:66:66:DE:EC:1A:A6:92:77:E8:7C:52:74:75:F6:F8:94
Authority key identifier: 3F:B7:8C:D1:A3:10:C9:9D:63:77:14:0E:52:8A:A3:E6:E0:DC:AB:9F
Certificate issuer:       /CN=3fb78cd1a310c99d6377140e528aa3e6e0dcab9f
Certificate serial:       01962F74DBA3BAAADF320B23AFD5C5699A7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft
Manifest number:          20
Signing time:             Sun 13 Apr 2025 14:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:49 +0000
Files and hashes:         1: P7eM0aMQyZ1jdxQOUoqj5uDcq58.crl (hash: XcdXQ8ZEmzptzrBLNN6DtaNXLTVWNeFIdq6zKUPRPHI=)
                          2: tO945n8IOH4m4HY-IByza0kUANU.roa (hash: 1Y70k1PM1fySvFZtbmtzuB2FgWQvwNTM4axab3kjR2A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:db:a3:ba:aa:df:32:0b:23:af:d5:c5:69:9a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fb78cd1a310c99d6377140e528aa3e6e0dcab9f
        Validity
            Not Before: Apr 13 14:01:49 2025 GMT
            Not After : Apr 14 14:01:49 2025 GMT
        Subject: CN=44a2fc736666deec1aa69277e87c527475f6f894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7e:93:7b:5f:de:da:f1:b8:04:c1:3a:2f:4b:
                    dd:d9:a8:7e:79:6c:03:67:b9:ef:c3:f0:14:7a:34:
                    65:84:7a:e3:37:35:ea:21:79:f2:37:05:03:ed:31:
                    ea:fd:44:ae:f8:f7:bd:c9:df:5e:ea:a6:52:04:13:
                    7e:b6:e8:c5:3d:f0:58:fd:14:a1:a2:da:3b:86:b6:
                    2e:40:00:99:f6:81:96:9e:bc:fd:05:6e:60:1c:ee:
                    ac:8f:07:ba:2a:39:b2:ed:1e:6e:f0:49:16:67:92:
                    1b:e0:e1:46:78:a4:36:2b:ef:b8:28:b7:b9:b4:f4:
                    ce:a0:d0:62:73:24:17:03:61:1a:5d:b6:13:72:f6:
                    63:65:9a:db:d3:fe:16:84:11:22:8b:3b:08:ad:a0:
                    2a:00:80:65:2c:1b:0d:29:71:94:c0:fc:5a:83:98:
                    aa:ac:e3:65:1a:02:2d:6c:dc:54:ef:c3:f3:70:93:
                    9b:f2:ec:5b:16:46:73:54:a7:ae:87:ce:90:9e:43:
                    38:8d:d4:34:0c:31:99:1e:ad:0a:3d:cc:a3:a7:7d:
                    b7:45:44:3e:42:1e:5c:ad:c7:e1:c3:1f:eb:72:cc:
                    fc:81:a9:4a:77:6c:5f:f8:94:6b:8a:c5:04:a9:c6:
                    22:7f:7d:9a:9d:16:40:34:f0:ed:08:13:1d:bc:0c:
                    e0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A2:FC:73:66:66:DE:EC:1A:A6:92:77:E8:7C:52:74:75:F6:F8:94
            X509v3 Authority Key Identifier:
                keyid:3F:B7:8C:D1:A3:10:C9:9D:63:77:14:0E:52:8A:A3:E6:E0:DC:AB:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P7eM0aMQyZ1jdxQOUoqj5uDcq58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/323c3f-aab3-4684-81c7-c5815118e52f/1/P7eM0aMQyZ1jdxQOUoqj5uDcq58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:ba:76:24:ab:48:f6:25:b0:2e:a6:d8:3a:a9:5c:65:e1:0b:
         46:bc:6a:42:a7:57:0a:ff:57:67:57:d7:36:fe:c2:07:c5:91:
         c8:13:e1:8b:4a:e3:3a:5a:77:27:ee:6d:85:b8:fd:13:2d:13:
         8a:4c:58:91:15:c6:5e:a5:ec:79:a5:61:94:91:95:5c:e9:73:
         d9:4f:15:0d:04:75:2e:bf:e4:7e:65:df:7d:65:63:c1:6e:b3:
         4c:83:c7:ff:9a:f9:43:63:79:fc:d6:f1:fb:e2:97:1d:ed:a7:
         e3:c8:18:42:1f:9f:17:76:96:fc:17:1f:54:7b:5a:31:6f:49:
         38:a9:be:61:3c:97:22:78:c0:f5:77:0b:9e:8f:a5:be:17:3c:
         69:84:7b:11:96:7f:cd:ca:d3:58:37:4d:36:36:e8:ad:91:06:
         35:3b:80:b6:c4:95:0d:77:37:fd:9b:62:1f:74:c2:2b:f0:4c:
         0a:0f:ed:4c:11:2b:2c:fb:c0:e7:83:75:82:76:e4:42:e1:85:
         5e:75:7f:3d:94:14:b8:fd:fb:c1:c5:b7:bc:1d:75:9f:23:0f:
         f8:de:77:5f:f6:db:16:32:ef:3f:77:b7:ed:cb:33:eb:04:a3:
         a9:b2:e8:87:a6:db:1e:43:d4:5b:59:ff:fd:20:21:7e:f9:64:
         b2:72:35:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----