Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
File:                     PRRSju_C35P_tOdPobZQO3btls4.mft (raw, json)
Hash identifier:          /dnFTB6dpjm5QkAsPa0WaLzmyzU33QAC8P9OVUEAVpg=
Subject key identifier:   E3:E2:89:DF:69:AC:F8:1D:8E:21:89:A5:0B:C6:60:95:A2:1C:85:84
Authority key identifier: 3D:14:52:8E:EF:C2:DF:93:FF:B4:E7:4F:A1:B6:50:3B:76:ED:96:CE
Certificate issuer:       /CN=3d14528eefc2df93ffb4e74fa1b6503b76ed96ce
Certificate serial:       01962E2ACA1D33935B46F6789B891EA7B4C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:18 +0000
Files and hashes:         1: 1-6KFFu76PFsOuJn8gJBndgCFOdU.roa (hash: 6vvOH7Ca5iY7AgmvELf2eSvGZtIS2tf6NCvrsrbSjcE=)
                          2: PRRSju_C35P_tOdPobZQO3btls4.crl (hash: Mp8cN5NLN0zBt379miR3/6+ifiEma1vHcPpQfGx49zw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ca:1d:33:93:5b:46:f6:78:9b:89:1e:a7:b4:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d14528eefc2df93ffb4e74fa1b6503b76ed96ce
        Validity
            Not Before: Apr 13 08:01:18 2025 GMT
            Not After : Apr 14 08:01:18 2025 GMT
        Subject: CN=e3e289df69acf81d8e2189a50bc66095a21c8584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d8:a6:eb:5d:e1:aa:02:56:96:a8:25:6a:71:
                    e8:a0:92:86:9e:5e:30:0f:95:d5:be:21:a8:b4:58:
                    4f:9a:60:b2:1f:19:85:4d:85:12:e8:75:cc:25:59:
                    f1:09:f6:20:8c:a5:8b:ee:23:29:28:e7:0e:4a:51:
                    47:6d:73:d3:4e:81:50:d3:e3:b2:0d:72:ef:ea:2d:
                    8e:b1:fc:4f:82:2f:a4:61:1b:cb:b4:66:47:91:2d:
                    d1:09:c1:55:d0:98:3d:cf:07:c2:eb:1f:b5:99:bb:
                    3d:f4:bd:bf:88:73:f4:b8:1d:51:c6:4c:d6:6c:80:
                    a8:2a:d8:62:6a:74:e6:05:c0:a6:eb:bd:8a:38:54:
                    e1:c8:a8:15:51:13:71:fd:58:90:b2:bc:64:b4:5c:
                    10:df:9c:f9:73:81:29:0b:be:10:89:6a:d4:2b:a6:
                    cb:b1:84:29:fe:7b:87:47:c6:ea:d2:d1:eb:22:44:
                    ae:51:cb:5d:ee:8c:e5:a4:10:ed:12:8d:a1:06:99:
                    57:85:32:51:c6:f8:bc:d4:c1:52:ab:d8:d6:69:ff:
                    ba:07:6e:98:48:c7:98:77:97:78:92:f6:af:d5:1e:
                    db:89:a5:b9:d5:b7:9d:53:4b:57:ab:2e:b7:43:30:
                    d3:e6:81:3f:45:b4:b9:f2:67:45:8b:a9:89:68:c9:
                    38:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E2:89:DF:69:AC:F8:1D:8E:21:89:A5:0B:C6:60:95:A2:1C:85:84
            X509v3 Authority Key Identifier:
                keyid:3D:14:52:8E:EF:C2:DF:93:FF:B4:E7:4F:A1:B6:50:3B:76:ED:96:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRRSju_C35P_tOdPobZQO3btls4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/37514f-14e9-4dbe-b398-c87fab985af8/1/PRRSju_C35P_tOdPobZQO3btls4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:67:91:21:5e:55:9c:b3:39:bf:81:fe:14:e6:41:38:62:6d:
         af:a6:e2:11:1e:44:76:4e:f6:b9:98:f6:a9:b6:eb:a9:6f:92:
         30:c7:5b:5a:24:18:9d:3e:22:6f:86:2b:0b:5e:28:0d:28:68:
         34:32:b2:0c:3d:ca:fc:70:ce:79:6e:9b:c6:72:93:ae:2c:47:
         36:c4:79:0d:37:c7:9a:d9:d7:80:32:1e:dc:51:89:8b:3f:b5:
         5b:02:e7:33:3d:12:48:a9:ac:e0:98:59:a9:cc:00:cc:87:5d:
         2c:3a:b5:b6:42:ca:63:5e:2e:6c:a9:c3:04:85:6f:f0:52:ad:
         e4:38:d9:db:f5:ac:ba:06:cc:73:e6:4b:70:f7:64:12:1d:ea:
         b9:c1:70:81:0a:f2:9d:75:33:b7:0d:40:38:f3:a5:30:ae:fc:
         4f:97:b7:12:3b:37:8b:8f:14:2d:69:68:73:d7:49:e2:f5:d8:
         d0:04:51:a1:16:00:19:72:0a:a7:62:c0:7e:d6:92:31:da:7c:
         4b:26:cd:b2:d5:12:1e:4e:4d:96:3f:e4:1f:d6:47:a3:e3:60:
         b0:ca:1c:bc:bd:fa:9d:63:2b:d0:e1:4a:86:f2:cf:e1:60:32:
         42:ec:9e:d0:84:96:de:c4:09:5f:3a:ab:5a:2f:5d:f0:ba:8a:
         86:e3:ea:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----