Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
File:                     PnXUne0gVmynRcKPgM_ZqS9LfUc.mft (raw, json)
Hash identifier:          zXb1AMJsPb/x4qWctPxhkgV4LdVlvpfV3bpwcgjiCig=
Subject key identifier:   4B:58:15:2E:59:09:84:0E:4F:8F:C7:2F:05:DC:EB:97:D7:E4:0E:AC
Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
Certificate issuer:       /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Certificate serial:       01962DF40B27C59656A70E4E93BEE70C5A68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:30 +0000
Files and hashes:         1: PnXUne0gVmynRcKPgM_ZqS9LfUc.crl (hash: ZvCKTjOm+3m7aP/8/FVJQqSzZJNftvp9/40vqh51YJE=)
                          2: pXJDsaj0ZUCw_GiSDcUZAr3Eqys.roa (hash: jxE0YH1Sz5qp4TF2g6NLi4CtXpHMgBECSGalZs0qi4A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:0b:27:c5:96:56:a7:0e:4e:93:be:e7:0c:5a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
        Validity
            Not Before: Apr 13 07:01:30 2025 GMT
            Not After : Apr 14 07:01:30 2025 GMT
        Subject: CN=4b58152e5909840e4f8fc72f05dceb97d7e40eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0c:1a:b7:6a:e4:12:81:aa:0e:72:f1:6c:3c:
                    55:eb:72:89:7a:30:18:9c:96:4b:7a:8b:4d:fc:d5:
                    bc:14:5f:3e:21:ff:eb:55:41:d4:39:af:a3:ac:6d:
                    36:8c:37:aa:f6:65:59:ce:26:0e:f4:ef:18:59:de:
                    8a:1f:bb:6f:10:43:7b:fa:11:f5:4a:0b:b5:8f:9a:
                    1a:f3:97:fc:0d:c8:9a:41:3d:74:17:c4:c2:9f:07:
                    e2:4b:d5:8d:f9:b1:a3:25:47:4d:64:64:42:e9:51:
                    11:be:bb:d6:78:b0:dc:70:0e:ba:dd:39:cc:fc:d1:
                    bb:d0:6b:2b:8e:81:36:ab:ab:57:9b:dd:a8:76:d7:
                    02:aa:43:df:45:b6:13:b6:81:91:46:28:58:fe:de:
                    a0:c4:d7:d8:32:8c:2c:80:df:fa:09:fd:02:24:8e:
                    5a:76:5a:e4:53:ae:38:cb:c2:f0:3f:52:c3:e8:39:
                    02:7a:d9:00:78:7b:9d:fe:f3:b8:45:06:c7:5b:d9:
                    ee:e2:be:e0:33:7a:38:07:c0:24:2c:66:39:3f:36:
                    93:9b:ab:6c:14:4e:f2:af:dd:1c:18:34:a9:54:24:
                    77:b8:87:d8:da:b4:6b:97:f7:92:2b:36:74:95:1a:
                    27:0d:d7:8e:96:30:f8:9f:b6:87:d3:0d:42:4f:0e:
                    a5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:58:15:2E:59:09:84:0E:4F:8F:C7:2F:05:DC:EB:97:D7:E4:0E:AC
            X509v3 Authority Key Identifier:
                keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:66:1e:b1:43:71:59:93:ea:8f:0d:2d:d8:ac:0c:76:1a:00:
         58:b9:98:b0:6d:02:11:dd:ae:14:90:70:73:26:dc:d9:0b:85:
         ae:d6:e1:d9:0a:cb:6e:cc:94:ce:ba:ec:77:88:6b:a0:b3:40:
         38:e7:50:30:0b:d9:c1:68:aa:5e:6e:7d:02:78:fa:4a:82:59:
         05:b5:67:a7:eb:97:e7:9f:82:c6:9f:c7:de:cd:47:a1:1d:f1:
         f0:0c:7a:56:22:ce:9f:14:11:10:b2:a4:7b:9d:ea:ed:de:69:
         dd:51:53:de:ba:d1:ca:93:b1:8b:c0:0e:ee:aa:d6:64:0c:95:
         8a:0a:6a:b4:17:14:61:86:cd:74:66:c4:b8:d7:5e:02:fe:28:
         6e:a6:28:07:ab:b7:cc:30:59:b9:ad:ac:e3:03:95:a2:cc:87:
         a4:79:22:23:b2:03:52:95:d8:86:e0:ab:53:88:95:5e:ec:38:
         59:cc:8f:bd:fe:b9:36:39:33:c4:01:3a:7e:16:99:50:2d:ad:
         79:85:2c:db:6c:14:6d:72:60:bd:08:22:84:57:fa:19:95:9b:
         eb:cd:61:06:84:e0:b3:0c:98:0e:0c:f3:48:7d:9e:15:79:97:
         7f:d4:47:bd:3e:f2:3c:0f:64:59:84:e9:88:79:dc:53:83:7e:
         1f:f9:76:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----