Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
File:                     PL3ORcSILIo6JXEQxrHw1JsYKpw.mft (raw, json)
Hash identifier:          F4d1HwbwzecDMKb2LAomG/B29hM4yG1aJ8garbzASEg=
Subject key identifier:   F2:3D:8F:F7:B0:F7:EF:EA:7C:9F:34:4C:A7:E5:54:BF:79:B1:39:0A
Authority key identifier: 3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C
Certificate issuer:       /CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
Certificate serial:       01962FAB30A36DCFB8F3111929DF14D283C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft
Manifest number:          0457
Signing time:             Sun 13 Apr 2025 15:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:10 +0000
Files and hashes:         1: PL3ORcSILIo6JXEQxrHw1JsYKpw.crl (hash: CJHivxbAt5skotUOBi/mH3AC+tlZ6W3zaud9lW5TUwY=)
                          2: PweX4vwdfn9m5okxz1-m9fnVzPg.roa (hash: inDGjN940P413XtKXQDTJWRDwaRCjen3viJxigT7ZkA=)
                          3: muWKR4VFvlVtJHmJ8L0LWCwNrD0.roa (hash: jKjX1d7d/0G+03C98NXHCEAoyfWh+WswSpMoPmRptVY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:30:a3:6d:cf:b8:f3:11:19:29:df:14:d2:83:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cbdce45c4882c8a3a257110c6b1f0d49b182a9c
        Validity
            Not Before: Apr 13 15:01:10 2025 GMT
            Not After : Apr 14 15:01:10 2025 GMT
        Subject: CN=f23d8ff7b0f7efea7c9f344ca7e554bf79b1390a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ee:c2:e0:24:51:53:ea:1c:57:b2:1e:8c:20:
                    8c:84:45:12:6f:81:f9:7a:3a:d4:f0:b9:ed:6c:e2:
                    47:b7:24:23:28:9c:72:46:c4:3c:92:97:25:ba:da:
                    80:4f:17:e9:8c:db:42:37:14:e7:82:72:f9:01:7a:
                    db:35:d9:35:ce:67:e6:24:02:88:58:76:a0:b6:ed:
                    54:ea:96:55:8b:dd:ca:eb:07:a4:ca:a5:3c:75:53:
                    fc:05:66:c4:a0:67:93:3a:61:0e:ef:16:eb:bd:06:
                    a9:54:07:8c:e9:d9:e8:fb:f8:35:f9:5e:20:cc:a2:
                    8b:eb:7c:ba:04:f1:80:25:67:d6:20:39:3f:d6:7f:
                    76:30:7f:72:eb:79:2c:6d:20:e0:08:f3:da:f1:7d:
                    a2:97:fe:24:b5:db:8a:a2:a7:ec:ad:57:55:06:f7:
                    0e:2c:c6:91:d1:4d:5a:57:52:31:2e:f5:98:50:0d:
                    37:f2:90:67:92:59:2a:38:a0:3e:09:3f:29:b5:33:
                    d5:cf:14:8f:56:b2:5a:04:76:56:c3:4c:5f:21:e9:
                    1c:81:8b:e0:07:d4:41:fe:b4:73:54:3b:36:5b:91:
                    41:b0:eb:e2:a8:ae:a8:f8:87:0d:d3:f3:86:ac:7e:
                    3b:93:5e:31:7b:43:ad:47:1a:4d:bc:0b:03:7d:d2:
                    65:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:3D:8F:F7:B0:F7:EF:EA:7C:9F:34:4C:A7:E5:54:BF:79:B1:39:0A
            X509v3 Authority Key Identifier:
                keyid:3C:BD:CE:45:C4:88:2C:8A:3A:25:71:10:C6:B1:F0:D4:9B:18:2A:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PL3ORcSILIo6JXEQxrHw1JsYKpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/1c9469-16fe-4e7b-8823-5db439b4ccee/1/PL3ORcSILIo6JXEQxrHw1JsYKpw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:61:3d:f9:35:7e:5f:70:4f:97:de:da:f6:19:c7:ad:6c:52:
         ab:42:d0:ea:ff:97:34:01:75:87:f9:2f:85:9d:70:2e:04:19:
         a9:1c:7e:3e:b9:87:e0:25:5e:76:1b:72:85:f2:31:79:d9:74:
         42:67:a5:7b:b2:2e:ce:a7:9c:66:7a:5b:ae:f5:a5:b6:18:0f:
         e2:7b:8d:74:e6:27:2b:80:84:0f:d4:d8:71:3f:54:36:5d:e8:
         d8:6e:35:0e:f8:09:6d:91:c1:3a:ac:71:6b:d3:9a:a8:9e:dd:
         24:43:7f:77:fc:24:e2:0e:63:df:81:18:90:37:41:08:f9:63:
         95:0b:de:d9:d1:42:48:fd:ae:bb:71:b2:8e:18:51:b3:c3:e9:
         77:18:88:b9:bf:38:d1:9b:cc:d5:ba:a1:b2:93:19:cf:8d:54:
         0d:9b:ee:e3:06:14:b3:b5:e9:f6:1e:41:8c:8b:55:e0:a0:a9:
         67:59:f5:c7:d1:6f:04:90:54:38:ee:a3:cc:1b:44:9b:81:be:
         8a:c2:91:fb:8f:05:17:52:65:16:aa:0d:74:1e:cc:57:7e:09:
         89:f0:8a:7d:f3:6a:0d:0f:70:87:55:1a:b7:e3:d2:90:8a:c3:
         ad:30:9a:53:3c:86:c0:6d:fc:d8:69:4c:c7:9d:dd:1d:1a:57:
         06:9b:ac:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----