Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
File:                     PHdeG5-wrJPVY7qOlwiE2le24Zc.mft (raw, json)
Hash identifier:          6rCzOFoQv8CeA8l/A2FEkCYx6UKV1bgc1So+Wqk5YkU=
Subject key identifier:   4F:44:EF:74:E0:7F:9A:A1:FD:3C:B0:E1:77:A4:99:3F:21:53:F6:73
Authority key identifier: 3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97
Certificate issuer:       /CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
Certificate serial:       01962F74A7358236F6855A6751869E6231E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft
Manifest number:          0962
Signing time:             Sun 13 Apr 2025 14:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:36 +0000
Files and hashes:         1: 8UJJGtq_kUeMGpA_LxLMvT6KUOA.roa (hash: scssOWu2Z8G04tK1VSokYhRpEIxnZd24NU6YQjvW3tc=)
                          2: PHdeG5-wrJPVY7qOlwiE2le24Zc.crl (hash: DZAuR6HoU3YkX/lvQoksnee2tTi90Pl6x1G6T+iFl54=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a7:35:82:36:f6:85:5a:67:51:86:9e:62:31:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c775e1b9fb0ac93d563ba8e970884da57b6e197
        Validity
            Not Before: Apr 13 14:01:36 2025 GMT
            Not After : Apr 14 14:01:36 2025 GMT
        Subject: CN=4f44ef74e07f9aa1fd3cb0e177a4993f2153f673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:62:d5:f4:65:61:84:47:ce:39:a6:6a:37:d2:
                    b8:41:72:b4:a0:27:f9:1a:42:c1:49:6c:51:c6:e1:
                    68:7c:e1:68:3e:b2:f1:3a:a0:38:cd:7a:77:67:11:
                    81:dc:39:91:91:61:b3:0f:d0:0f:c1:d4:5f:5c:df:
                    c8:5a:e0:3e:59:14:bb:3c:46:e1:74:ea:a9:d8:ae:
                    f4:46:a3:69:f3:b4:48:28:69:08:7b:05:e3:32:05:
                    8b:75:93:4f:b3:44:a2:a5:48:80:15:e6:bd:46:28:
                    72:8b:38:31:68:55:1e:c2:ba:e2:24:35:26:d5:83:
                    26:ad:1f:45:80:c5:72:dc:9f:8c:6f:a2:e2:15:9a:
                    98:02:75:0d:ac:31:1e:2b:f4:f6:61:a4:c3:b9:0f:
                    d7:c7:ca:13:9b:a3:1f:68:bd:14:7f:df:c6:8f:88:
                    d0:a7:23:68:9d:10:97:52:43:8a:ab:00:40:52:fe:
                    d2:1f:4b:4f:e4:26:aa:8f:a1:c9:73:d0:7a:24:74:
                    e4:13:7f:cd:59:5e:cc:d2:06:a4:5f:22:a1:75:7d:
                    0f:75:9c:dc:a5:15:70:1a:11:83:78:db:9d:ef:62:
                    fe:5c:4a:b3:2e:06:fe:4d:8f:19:ce:9c:bb:80:f4:
                    a4:85:bb:db:0d:5f:10:77:35:64:bd:a8:ff:7b:34:
                    b0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:44:EF:74:E0:7F:9A:A1:FD:3C:B0:E1:77:A4:99:3F:21:53:F6:73
            X509v3 Authority Key Identifier:
                keyid:3C:77:5E:1B:9F:B0:AC:93:D5:63:BA:8E:97:08:84:DA:57:B6:E1:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PHdeG5-wrJPVY7qOlwiE2le24Zc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/31dbb7-bcfd-4a61-a641-4e5686be6b82/1/PHdeG5-wrJPVY7qOlwiE2le24Zc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:24:25:be:3c:93:ad:a0:2e:ab:aa:a8:cf:2f:17:e6:81:98:
         9c:93:2d:7e:59:d0:5e:98:10:d0:d8:4b:8d:5c:0f:1f:8d:19:
         c3:90:5c:91:68:53:34:4b:f5:84:1f:4e:57:13:d8:37:26:3d:
         9a:ef:d2:98:1a:be:79:df:6a:76:2e:9d:10:52:f9:07:8a:1e:
         72:78:d5:6a:eb:3e:1b:1a:2c:85:10:a6:c6:8b:ba:3c:27:65:
         3f:2b:a9:d7:52:ae:1a:42:cb:af:8c:ac:98:0c:45:09:5a:5e:
         6b:3c:40:1e:23:2c:3b:8a:84:46:19:0f:26:06:f9:27:f3:9a:
         2b:f2:fe:84:fb:47:32:3f:ba:c5:32:50:b3:74:37:e1:2a:dd:
         b5:d6:28:32:97:8c:b1:14:b6:3a:0a:b4:ec:f1:6e:14:41:bc:
         64:6d:5b:e0:74:c0:d1:00:16:5f:e0:fa:70:5e:82:0c:c9:c6:
         c4:4c:53:7e:80:24:e7:51:be:9d:36:26:eb:16:97:1a:a6:76:
         30:a6:33:77:2b:89:47:45:56:b7:5b:40:ef:9a:58:5a:63:a1:
         dd:2c:99:64:1d:2f:1f:58:cf:2d:61:1e:29:a7:eb:35:da:3e:
         45:4c:56:d5:8e:2a:c0:63:06:f1:68:0b:ab:ea:27:71:03:a9:
         f2:b0:a3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----