Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
File:                     P__L7IiMEEfyIdfPk5a_FBKrr5s.mft (raw, json)
Hash identifier:          clRNNqgEiMLcPPcvVby+7zAQWbnHVc5hTWwjChN5tGM=
Subject key identifier:   E2:6A:4D:3E:35:DC:5F:07:CA:48:80:C8:A7:7F:FD:5A:DA:E2:1F:F2
Authority key identifier: 3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B
Certificate issuer:       /CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
Certificate serial:       01962DF3E2A74096BE270C6D0D27D03ADB94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft
Manifest number:          0AD5
Signing time:             Sun 13 Apr 2025 07:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:20 +0000
Files and hashes:         1: G1ZoPreJjIkkyyNJWvhlfTtWo1U.roa (hash: ZGtSGL/7afo62ORK+9uxVq7WnlKM3t68x8dY3Lc6a40=)
                          2: P__L7IiMEEfyIdfPk5a_FBKrr5s.crl (hash: KzAN7uFMx2BTtmuIYTN/zzYeZ9ZwJM+msC/7FSHEDT4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e2:a7:40:96:be:27:0c:6d:0d:27:d0:3a:db:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fffcbec888c1047f221d7cf9396bf1412abaf9b
        Validity
            Not Before: Apr 13 07:01:20 2025 GMT
            Not After : Apr 14 07:01:20 2025 GMT
        Subject: CN=e26a4d3e35dc5f07ca4880c8a77ffd5adae21ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8b:06:c4:bf:23:95:6e:ee:5f:13:68:63:3c:
                    8e:d7:1e:87:7b:92:47:0c:cc:d8:5c:1f:dc:eb:2c:
                    87:79:6e:b6:d3:ad:ed:9e:26:ed:b5:3a:1d:4e:f2:
                    8f:f0:43:67:a4:66:79:c0:2f:dd:c1:33:7a:c1:df:
                    48:ca:86:74:b6:26:db:86:8e:47:e3:c0:76:f3:80:
                    81:40:cd:88:cd:e9:71:6f:5d:ed:48:33:d6:82:f1:
                    d3:17:c4:80:53:a8:4a:5b:b5:78:f5:a3:f3:df:96:
                    3f:ee:f9:44:43:79:f7:99:7b:39:99:c1:48:c1:c2:
                    f1:d8:26:6e:e2:ea:5e:a5:fb:78:f9:99:e2:31:72:
                    e2:47:22:85:e8:e1:21:de:3c:0a:f2:9a:3b:33:03:
                    40:2d:e7:4e:d0:2b:5a:6a:02:b0:1f:59:b4:a0:57:
                    11:c6:f7:cc:22:bc:0e:7e:11:b5:35:73:c7:76:2d:
                    e6:2b:be:ab:7f:09:dc:90:d1:fa:7e:99:79:ec:e3:
                    a5:33:fb:44:9c:a5:ce:0e:1b:09:2b:f0:79:14:39:
                    ae:20:6e:86:99:e3:8d:58:2f:14:4a:02:55:63:5f:
                    8b:74:17:e2:bd:77:1d:b6:59:f7:b4:d2:3e:98:fe:
                    94:e3:51:85:58:b8:8d:0b:9b:22:25:5f:cc:69:23:
                    68:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:6A:4D:3E:35:DC:5F:07:CA:48:80:C8:A7:7F:FD:5A:DA:E2:1F:F2
            X509v3 Authority Key Identifier:
                keyid:3F:FF:CB:EC:88:8C:10:47:F2:21:D7:CF:93:96:BF:14:12:AB:AF:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P__L7IiMEEfyIdfPk5a_FBKrr5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/bbb7b6-3ee5-46d9-b37b-61667c7691b2/1/P__L7IiMEEfyIdfPk5a_FBKrr5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:e4:41:88:75:f3:8e:19:68:6f:fb:7c:78:99:64:84:c2:ca:
         2f:17:06:f5:67:f2:19:f3:25:68:3d:94:5b:d3:f4:77:d3:d2:
         4b:eb:1b:de:71:53:e6:32:0b:c7:70:0b:d9:b8:90:fe:2d:41:
         db:e3:40:8a:91:4a:0e:a0:80:81:2e:e2:a3:be:6d:21:0f:50:
         b2:be:6e:a8:22:9c:5f:e8:6a:14:15:23:cf:a6:35:b4:de:78:
         89:83:38:fe:85:7f:66:04:0f:8c:b7:7f:82:c8:e0:18:5e:bf:
         32:59:e6:18:59:a0:92:0c:78:b8:d1:58:67:e0:fd:23:6c:13:
         a6:70:90:d6:fb:61:64:d8:f6:bd:2d:13:af:36:7d:54:81:8e:
         d8:c9:a9:a3:75:1d:a3:00:d2:be:91:76:36:34:19:bc:ef:a6:
         fc:a0:4f:7f:45:4f:86:9e:87:d6:7f:5f:4b:71:4d:f2:98:b0:
         35:fa:1e:ba:90:b9:9e:f8:e4:63:33:b0:f6:5e:ac:ea:f4:c5:
         cb:08:1b:7f:11:c2:66:d2:79:89:a4:e0:85:2d:de:b1:04:22:
         32:c2:b9:3d:c0:6b:58:59:b7:5c:1f:76:de:99:3a:e9:57:81:
         08:25:6a:34:75:54:e7:0a:0c:d3:e5:33:d0:d8:4e:88:bf:96:
         e7:4a:3f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----