Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
File:                     P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft (raw, json)
Hash identifier:          g0Wbe6u4CGaMPkOLMOVSRIeLCQWWlWkTj23KbVkt2pM=
Subject key identifier:   43:33:B3:D9:D3:ED:36:07:87:30:2D:30:8D:9F:DD:DD:5A:C7:57:35
Authority key identifier: 3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47
Certificate issuer:       /CN=3fda630213cd423880f9fef16d78fb436e08f247
Certificate serial:       01962DF415047ACA6819D76312F5AC4B9A49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft
Manifest number:          0BCA
Signing time:             Sun 13 Apr 2025 07:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:32 +0000
Files and hashes:         1: P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl (hash: DHiZhi/oqh0xFrGCzxyb/IaTVTcvH1v+3cQMZBKbuio=)
                          2: gDeneKJTQtX9OIr5MlGy6dCHOYA.roa (hash: 3GvtE0X7YdCyMroXXNh2AEtxzHBHmy4owPJWbBMbbzo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:15:04:7a:ca:68:19:d7:63:12:f5:ac:4b:9a:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fda630213cd423880f9fef16d78fb436e08f247
        Validity
            Not Before: Apr 13 07:01:32 2025 GMT
            Not After : Apr 14 07:01:32 2025 GMT
        Subject: CN=4333b3d9d3ed360787302d308d9fdddd5ac75735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:fc:0c:4b:70:ae:61:00:85:09:12:5a:20:e3:
                    8d:3d:e8:6a:58:71:bc:68:41:78:45:73:5b:4a:d4:
                    ed:d9:aa:e1:d5:9b:8a:40:5e:d2:c9:03:55:f0:13:
                    89:90:0e:b4:bd:e0:8e:c3:c8:3d:ec:04:d4:73:45:
                    5b:af:44:2a:ea:24:ac:5d:34:4e:bf:52:a3:58:ed:
                    4c:b2:cc:35:4c:e8:56:03:ee:e1:60:e9:4e:de:e5:
                    bf:12:23:b0:07:57:a7:f6:68:22:21:f6:04:c0:c6:
                    e7:68:58:09:8a:69:d1:4f:e9:44:08:8d:ec:fa:5e:
                    81:13:eb:d5:5a:4b:f7:0b:0d:2a:1b:d1:fc:0f:be:
                    32:b5:3d:a1:2c:63:4c:04:2b:1d:a4:41:56:c4:be:
                    b8:bb:6d:8a:45:29:bb:19:3d:98:87:f9:12:f2:9f:
                    2f:7d:ee:c7:f0:47:75:f3:41:50:cd:b6:06:8b:6d:
                    70:e6:85:21:4d:d0:9b:51:6a:a7:5b:a5:75:0d:5f:
                    29:94:ed:3d:67:e8:e1:38:62:db:a3:44:ee:c5:89:
                    2f:5d:48:79:71:da:1b:1c:0f:15:cd:a5:a9:10:9b:
                    36:81:a2:63:09:62:d8:84:ee:4b:5e:f8:d5:db:44:
                    68:cc:ea:28:49:66:5b:1a:08:43:ae:e6:4b:7c:24:
                    32:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:33:B3:D9:D3:ED:36:07:87:30:2D:30:8D:9F:DD:DD:5A:C7:57:35
            X509v3 Authority Key Identifier:
                keyid:3F:DA:63:02:13:CD:42:38:80:F9:FE:F1:6D:78:FB:43:6E:08:F2:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9pjAhPNQjiA-f7xbXj7Q24I8kc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54c691-9fbb-438a-a55f-38237fe4e414/1/P9pjAhPNQjiA-f7xbXj7Q24I8kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:55:35:f7:bf:47:e9:fa:cd:06:c2:75:a1:50:4a:62:7b:3a:
         2e:c5:24:64:06:f3:e5:0c:e8:0b:1d:10:2f:23:55:9f:0c:6f:
         eb:e4:6d:2b:8d:a9:f9:f6:e6:19:14:0d:b2:3a:5b:f8:5c:df:
         d2:25:15:84:79:6b:0b:2d:c6:8d:69:a5:01:4f:6f:d1:4f:80:
         b2:1e:1f:6a:3c:bc:3d:c1:26:c9:fb:fe:5c:a8:a1:8d:1a:fd:
         b1:6a:e3:c4:f6:14:ad:d9:31:c2:a3:11:9e:13:84:92:f9:f5:
         a2:57:67:e5:b5:50:3c:f7:f3:63:24:1f:b0:01:fe:47:37:c4:
         48:cf:ed:e6:b0:7a:39:74:01:b4:93:c0:c7:12:43:11:2c:20:
         22:f3:38:40:34:fc:88:96:9a:59:d8:c0:83:e5:cc:e7:5f:4e:
         5d:37:47:2d:5b:01:ef:9c:84:6f:88:9f:ee:65:6a:f0:1d:d5:
         6c:33:2a:66:d6:62:3e:a2:d9:75:f5:09:e9:cf:52:93:42:64:
         0b:61:51:d3:7d:3f:7f:9e:42:13:3a:81:f5:b1:df:ce:67:a5:
         0a:8d:e8:ef:dc:97:97:fe:c4:16:d9:f5:ee:95:01:9c:c3:42:
         6e:51:0b:91:56:a6:13:c9:fc:8e:3b:9f:e9:23:ef:38:49:ab:
         21:01:04:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----