Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.mft
File:                     PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.mft (raw, json)
Hash identifier:          5GIUGcFyFMdajZKtbFlxgfPKeBYwAgYQa9i0BgHJWiw=
Subject key identifier:   D0:19:6A:5A:55:4E:32:D9:C9:E4:2B:21:9A:2F:53:29:23:2E:36:67
Authority key identifier: 3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
Certificate issuer:       /CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Certificate serial:       01962E61A75409C332AB64C181C6FA3A93F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.mft
Manifest number:          0AF8
Signing time:             Sun 13 Apr 2025 09:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:13 +0000
Files and hashes:         1: 2lwI54QF_XqrgUwaQ0Ao7KhahI4.roa (hash: WVAqqT9n+azhlwqdMweU/K18Zjr86DqXuRzwgp6K0fI=)
                          2: 4ONHBfTz7AzlEJsH2ITKdElL8Ws.roa (hash: dqSjybNhU4Y8o5dhcCJX907TMVNbsr7Ywf7eqwbWZD8=)
                          3: BwhHBq8_nG_K7m_W3G4RHhTida0.roa (hash: NMnRXfbQ1lBRTE5ileh9Mp+IR5izyXDHjaaBnvkh6pY=)
                          4: PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.crl (hash: 9Oye02PwQXbe9YDJNXKeM7TxzAmiO/fyx/C6zLbo8vY=)
                          5: RiiNoyZSO1JzA7m0_LayA08gFzY.roa (hash: zcGWo+UpPwSMxlv6jUFwi8ud5sRDKsEHFlMBysCY+IA=)
                          6: U5jElUfybntVVFc0Xi4mAKLnzHI.roa (hash: NrrDZz6zJmQO8TZPUDaJc/kzyH0lsoTEtvlaEiqCXX8=)
                          7: sD1R-VoESGB_6LIl4dgntbQKRkE.roa (hash: p8K6PYzpldEXmvB0zwceGziQ94cCnLjIpOhxU2zOu8U=)
                          8: xRGXa_rFHLs9DDlfm-f8Qce0Ffs.roa (hash: 5HvsRdZu5Ybkzzocd5AdnAdVjk12kcxzKBbQ/2vcJuc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a7:54:09:c3:32:ab:64:c1:81:c6:fa:3a:93:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
        Validity
            Not Before: Apr 13 09:01:13 2025 GMT
            Not After : Apr 14 09:01:13 2025 GMT
        Subject: CN=d0196a5a554e32d9c9e42b219a2f5329232e3667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:93:9c:8d:2e:5a:f0:81:7c:92:4c:2b:fc:12:
                    43:59:3f:84:36:f5:40:8a:16:76:4e:68:e5:6a:c3:
                    c7:0f:2d:8d:4c:31:4f:e9:01:14:64:92:a2:70:98:
                    8a:1e:42:2b:ea:55:ba:c3:97:d2:3b:38:35:2a:e9:
                    70:8d:45:e5:fc:fe:ce:af:d6:1e:2a:c9:f0:ed:ee:
                    5d:3f:97:15:81:35:ed:d9:3e:e9:ec:e8:9a:0c:59:
                    13:b7:7e:38:26:98:c5:34:d8:7b:49:f7:c2:c1:68:
                    c3:c6:d1:a2:03:d0:47:12:f3:f4:59:25:5d:1a:c4:
                    cb:81:18:89:71:3f:c9:c3:e9:8b:d1:31:fa:d1:88:
                    12:7f:f8:ea:93:67:94:98:e2:a3:ab:8b:a2:33:d4:
                    b4:e1:00:93:6b:80:e7:07:72:6c:e7:4e:51:16:6b:
                    ab:47:1e:17:b6:85:04:af:ee:6c:0b:5c:b5:a1:3f:
                    46:9e:3f:20:56:44:8f:1e:3f:56:94:44:f9:1c:54:
                    74:3d:66:71:e7:69:2d:3f:87:cd:e0:28:9f:65:74:
                    f8:e2:3a:ca:3f:6d:76:67:eb:ea:81:e7:44:bb:bc:
                    47:62:ef:cd:7c:da:7c:22:fd:80:6c:7d:d1:c0:26:
                    12:f9:3e:4f:1c:19:fa:d0:83:03:5d:f8:23:a9:5f:
                    d1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:19:6A:5A:55:4E:32:D9:C9:E4:2B:21:9A:2F:53:29:23:2E:36:67
            X509v3 Authority Key Identifier:
                keyid:3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:d0:68:16:ee:1a:0b:08:a2:78:88:6b:f6:34:46:ea:3d:58:
         66:94:26:30:6e:b1:cb:73:63:23:aa:af:5f:ae:10:54:3f:76:
         fb:58:31:2b:4b:65:4c:d0:19:5d:a6:d5:b0:77:14:44:59:47:
         d8:d5:6d:40:00:70:34:fd:9f:b7:74:43:12:82:d7:2e:f2:b9:
         6a:10:20:04:20:ec:d6:d7:da:dd:5e:8b:bb:96:5f:b5:3b:3e:
         84:d2:8a:00:b6:90:08:62:6a:8e:4e:ff:44:b5:e8:3b:a8:ef:
         3f:df:74:50:cd:48:7c:65:e3:04:f8:ea:38:29:e6:6b:5a:4f:
         b9:27:de:69:d9:01:c1:a9:43:01:79:a1:cf:3d:b3:a9:b1:0b:
         83:1b:ba:96:f5:30:25:b0:a2:0a:5c:83:0e:c0:60:54:eb:40:
         78:16:7a:56:3e:f3:7a:33:b9:44:96:7a:78:38:5b:4e:c5:30:
         1c:b1:68:a8:96:3d:7e:3f:d3:fd:6e:72:51:bf:23:b4:06:b8:
         76:2c:75:6c:41:d5:e0:37:e1:95:e9:9d:82:d2:7f:85:5f:91:
         c9:00:28:f4:42:7d:ac:11:9e:50:04:19:c4:16:f0:ab:c0:91:
         1b:5e:e2:f9:1a:26:03:20:ad:30:e8:94:fa:d4:31:ec:5c:7d:
         08:ea:e4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----