Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
File:                     PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft (raw, json)
Hash identifier:          wBZ0B1Ino1YkOn8DqvLPK9ufpXHZW7sKGYF5u+KC8aY=
Subject key identifier:   15:48:06:EF:F8:30:2A:12:69:98:3E:65:F8:F5:7D:4B:B7:03:93:59
Authority key identifier: 3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C
Certificate issuer:       /CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
Certificate serial:       01962FAB286A376A9D5FDB036125BC293320
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft
Manifest number:          0C30
Signing time:             Sun 13 Apr 2025 15:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:07 +0000
Files and hashes:         1: PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl (hash: MIcoVAGXbD8n+izbjZtuVbMz4IcgqGxZckBO9xY7brA=)
                          2: Zudt2t67uMUQbMO8N99rmxJB1wQ.roa (hash: SIlAW/DlBSg5+XbRtnFyzPAIYziyY+yFv6/k5lPUFJA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:28:6a:37:6a:9d:5f:db:03:61:25:bc:29:33:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cfaa40f6263e00d1291698576a617a5b5d68a9c
        Validity
            Not Before: Apr 13 15:01:07 2025 GMT
            Not After : Apr 14 15:01:07 2025 GMT
        Subject: CN=154806eff8302a1269983e65f8f57d4bb7039359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:25:c4:1c:7c:d7:f6:1a:71:69:da:9d:99:1d:
                    86:fb:bb:38:db:e4:b1:7b:1b:ca:2e:67:2e:09:53:
                    b6:69:56:49:9c:87:71:eb:57:e9:f8:1b:41:2a:1b:
                    2f:49:69:68:24:70:ff:db:e9:ef:82:95:12:36:43:
                    5d:c7:1d:7c:31:4b:6a:50:c2:f9:17:88:70:c8:86:
                    13:18:1f:07:be:fc:1d:70:21:d1:c3:7a:35:f0:64:
                    f0:81:58:de:53:35:aa:1e:1f:ac:ed:92:d4:8f:a9:
                    6d:7b:d8:e9:b0:c8:08:8c:f4:ed:8a:ea:d8:a9:d4:
                    3e:78:fb:14:50:9a:31:01:f7:9e:38:47:8e:a0:5a:
                    87:ab:1a:9e:ce:1d:a3:08:b2:f6:d3:39:12:ae:6c:
                    25:de:5e:ce:88:17:38:79:f3:b5:9f:b0:96:53:3f:
                    d1:9c:da:16:d7:d2:08:5c:44:48:2b:0d:c5:e2:69:
                    9b:cd:ba:99:56:28:47:9b:30:17:44:57:3d:d3:bb:
                    2c:a0:4e:81:27:85:8b:db:4e:ef:d3:63:dd:f0:41:
                    7f:91:da:74:eb:ca:66:6a:cb:42:a9:07:d9:05:29:
                    bd:bd:68:b2:03:d1:ca:c8:d9:90:ca:57:da:9b:1c:
                    d6:a9:2d:23:a4:51:94:09:9d:34:3b:0e:8d:9a:1a:
                    87:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:48:06:EF:F8:30:2A:12:69:98:3E:65:F8:F5:7D:4B:B7:03:93:59
            X509v3 Authority Key Identifier:
                keyid:3C:FA:A4:0F:62:63:E0:0D:12:91:69:85:76:A6:17:A5:B5:D6:8A:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPqkD2Jj4A0SkWmFdqYXpbXWipw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/845aee-daac-4641-9f31-9e7f0f941049/1/PPqkD2Jj4A0SkWmFdqYXpbXWipw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c9:11:3a:a7:44:1d:db:d6:cb:1f:d1:e4:b4:83:69:a2:42:
         a9:70:19:09:3c:a5:ea:aa:09:40:2c:dc:41:58:8a:87:2e:de:
         29:fe:ae:f7:f4:2f:75:70:40:7e:b0:b6:46:9b:95:a8:ed:2d:
         4c:d5:3e:8a:cd:80:8c:1b:3a:a7:60:48:78:99:00:61:9e:7e:
         e0:b2:f5:25:73:ff:e4:71:05:76:b1:37:1d:4e:87:dc:13:f9:
         52:bb:63:44:0c:0d:4d:26:72:23:2a:ac:cb:ff:33:60:dd:af:
         14:68:2d:1f:de:47:17:79:27:70:7d:de:ba:a9:ba:0e:6d:51:
         62:e7:1f:41:ba:1b:2c:05:c8:cb:ba:e7:03:08:00:ab:a1:1a:
         24:35:8b:e2:15:0e:4d:05:a0:10:e9:5b:37:53:68:84:da:51:
         dc:d4:95:6f:17:b6:fd:89:a3:60:99:12:a9:e8:cf:3a:65:fc:
         05:0c:de:8b:35:fb:eb:4c:63:af:c5:66:30:09:2f:9b:a9:91:
         ff:a1:90:60:c3:ce:a5:52:3f:1a:0e:5f:6d:e2:a1:65:84:ea:
         f3:a1:b2:53:8e:b7:52:56:31:31:28:19:83:71:24:cd:16:92:
         ec:67:90:47:d3:1a:79:58:f3:83:08:01:bd:bf:73:d4:33:a1:
         81:1f:13:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----