Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft
File:                     PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft (raw, json)
Hash identifier:          X13Z/MwbLlgLuBTwLjqmY4f+RdUmfa5j/Fp0hgyJuO4=
Subject key identifier:   55:3D:F1:8D:A4:2A:C7:FF:5F:0E:59:1A:25:57:8B:D0:97:3C:F7:1C
Authority key identifier: 3D:89:7B:D8:C6:DF:1C:B7:14:10:FE:19:4B:ED:73:9A:2F:8A:67:73
Certificate issuer:       /CN=3d897bd8c6df1cb71410fe194bed739a2f8a6773
Certificate serial:       01962E2B1A58B9C3C2BAF13BA1CC4812ABE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft
Manifest number:          07B1
Signing time:             Sun 13 Apr 2025 08:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:38 +0000
Files and hashes:         1: JD1ZF1XWLuEfY_xZK_HiSB-W5Sc.roa (hash: tU/SgRvLeOcLILG1M49HHg6nzxCmwlwyRSULttNgB8k=)
                          2: PYl72MbfHLcUEP4ZS-1zmi-KZ3M.crl (hash: u04l/1ESnGKwpr2IKuol89dN0/yB8fkWKm2R65UpLLU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1a:58:b9:c3:c2:ba:f1:3b:a1:cc:48:12:ab:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d897bd8c6df1cb71410fe194bed739a2f8a6773
        Validity
            Not Before: Apr 13 08:01:38 2025 GMT
            Not After : Apr 14 08:01:38 2025 GMT
        Subject: CN=553df18da42ac7ff5f0e591a25578bd0973cf71c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d7:d6:bb:64:d1:ea:2b:4d:36:1f:00:cd:2b:
                    51:a3:33:5c:5c:8d:90:7c:2f:43:73:bd:2a:1d:ae:
                    03:33:b3:60:f3:f0:b0:75:c1:67:d0:02:5b:e3:9c:
                    93:78:ed:c2:4b:a7:06:ca:e9:f0:f4:ab:cb:fd:9e:
                    04:35:b5:41:78:6f:ae:29:c6:4f:a9:2a:c6:ac:27:
                    fc:00:54:f0:a8:10:0f:e7:bc:30:ec:c6:90:5b:ea:
                    3d:65:97:a1:92:d2:61:7f:db:65:29:61:fb:98:5f:
                    e7:59:27:3e:55:d2:5a:30:8d:ad:00:e2:52:11:82:
                    e1:fa:cf:90:a9:2a:4a:f5:4c:fe:f8:c5:af:8e:27:
                    08:43:cb:b1:81:a9:1d:0f:bf:29:d5:05:56:28:32:
                    e3:df:a4:88:e9:97:97:fd:34:72:54:ef:ca:62:03:
                    a3:58:b0:d0:25:92:48:2f:fc:f1:48:c4:2f:b9:8d:
                    d4:00:7e:ac:cd:16:a9:95:11:fc:0d:67:73:08:6b:
                    fc:6e:dd:ac:a0:17:23:df:b4:57:e6:26:1e:26:20:
                    69:f9:d3:6f:b0:33:30:23:67:6c:84:02:b0:8a:12:
                    e1:4e:1e:76:ae:95:a5:96:58:3e:53:3e:ee:33:21:
                    04:bb:42:74:f0:39:fc:c4:c5:56:c2:4c:90:7f:d2:
                    5f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:3D:F1:8D:A4:2A:C7:FF:5F:0E:59:1A:25:57:8B:D0:97:3C:F7:1C
            X509v3 Authority Key Identifier:
                keyid:3D:89:7B:D8:C6:DF:1C:B7:14:10:FE:19:4B:ED:73:9A:2F:8A:67:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5471f8-c938-40cc-b139-f9f92150cd39/1/PYl72MbfHLcUEP4ZS-1zmi-KZ3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:d1:24:17:1d:ea:9b:a2:8a:ba:a0:b5:11:de:2a:2e:27:ea:
         17:1a:59:73:e3:bf:34:a6:0d:e0:92:61:21:82:84:39:f5:64:
         00:99:7e:87:ef:cc:0e:1c:f9:71:ba:64:25:f9:2f:52:62:e5:
         57:e1:11:36:db:af:10:f5:ee:fc:51:ed:60:06:dd:10:ad:11:
         54:bd:9d:d3:b5:9e:05:fc:db:56:55:c8:6f:9a:e6:41:c3:4a:
         58:47:75:b2:8a:fb:0d:c6:7b:da:9f:58:c2:58:18:8a:88:d3:
         c2:cb:c5:92:e5:92:82:dc:f7:af:0e:67:0a:99:da:bf:13:1a:
         20:9e:cb:59:a2:c9:2e:0a:4f:3a:1d:e5:c9:4c:d3:d3:5b:fa:
         32:a9:2c:5e:bf:cb:f0:4f:c9:97:d7:10:cb:35:80:af:18:b3:
         fb:9b:e3:58:e6:97:1e:d3:85:5b:c6:52:52:7f:89:f6:e4:d4:
         ad:da:54:d8:90:08:5c:02:55:7b:00:97:fc:4f:62:7e:18:72:
         50:8b:e4:5d:bd:99:b9:db:8b:48:5d:f7:57:3e:80:53:ef:c6:
         87:af:34:24:1e:0e:95:cb:75:53:7f:d0:bd:a3:81:a6:1d:c8:
         cb:5c:9f:43:01:21:ea:80:09:06:2d:82:7a:c1:fb:87:f2:a5:
         0e:a0:2e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----