Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft
File:                     PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft (raw, json)
Hash identifier:          VjzIcMZ7+C7esYoe3rVt1ibCoBS1I17KujBBHQ5cZdk=
Subject key identifier:   96:BB:51:81:7F:65:19:08:7F:34:F9:93:52:47:0E:43:3C:DD:63:51
Authority key identifier: 3E:C8:C2:0E:65:DC:D3:3F:F8:A5:E3:C3:0A:64:59:25:C5:C9:F9:5F
Certificate issuer:       /CN=3ec8c20e65dcd33ff8a5e3c30a645925c5c9f95f
Certificate serial:       01962E61F4249609A6434B655186A667D305
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:33 +0000
Files and hashes:         1: 2MDxMm-aOr9Av8UXOYCdSDY5SVw.roa (hash: e92Ni3UZiEOlX4qjyE83BJ38B3EV4PZWBH8ze8DKvoY=)
                          2: PsjCDmXc0z_4pePDCmRZJcXJ-V8.crl (hash: MEfGkyskdbgXVdEfjcOEmLpNPlENWpdUwKxjaD/iYXQ=)
                          3: uzKXKwwaxv9ZwxlwOddK0wuAjk0.roa (hash: LTwXOrA7s8AT8kiK31u64jYBKrFuiT/zV7vy/MG1J4A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f4:24:96:09:a6:43:4b:65:51:86:a6:67:d3:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ec8c20e65dcd33ff8a5e3c30a645925c5c9f95f
        Validity
            Not Before: Apr 13 09:01:33 2025 GMT
            Not After : Apr 14 09:01:33 2025 GMT
        Subject: CN=96bb51817f6519087f34f99352470e433cdd6351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:8b:e5:08:ae:cd:8c:03:7c:7c:4b:74:7c:a7:
                    d8:78:d2:a1:14:0e:f1:3c:cb:76:4d:52:60:5c:07:
                    f1:f2:27:a1:68:e0:a0:58:13:1d:6d:f5:e9:1f:b1:
                    61:80:6c:7c:af:09:79:18:a9:e7:ea:36:da:4a:1f:
                    96:93:03:5e:a5:28:cf:11:9d:8c:2a:94:dd:23:05:
                    87:15:0d:c6:db:64:1d:ec:70:a7:b0:25:de:a6:d3:
                    be:50:4b:38:56:48:cf:33:92:c2:79:ab:fa:29:31:
                    50:20:16:c4:1c:9d:ec:21:5c:39:22:dd:72:82:51:
                    f6:ad:e2:c0:ef:5c:7e:38:8f:a1:0e:58:2f:d9:4e:
                    a7:63:65:fc:90:30:f7:ee:fe:c5:14:07:fd:4f:6e:
                    34:c4:6a:fc:e8:5d:72:64:64:7b:eb:ce:e2:89:dc:
                    62:58:d8:3a:76:16:79:97:3c:94:d8:9f:e9:8c:60:
                    83:5c:98:80:b1:67:e2:d7:16:91:36:47:24:2a:9d:
                    98:0d:71:11:d0:7f:6d:99:21:ec:15:3a:62:e0:71:
                    0f:f4:57:7e:94:55:6a:f6:80:e0:3c:4e:3f:2a:18:
                    76:f8:ee:b7:c6:b5:ed:b1:62:4a:83:3f:10:e0:26:
                    47:00:f0:e4:47:2c:4e:de:43:d8:1c:06:6b:88:97:
                    cb:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:BB:51:81:7F:65:19:08:7F:34:F9:93:52:47:0E:43:3C:DD:63:51
            X509v3 Authority Key Identifier:
                keyid:3E:C8:C2:0E:65:DC:D3:3F:F8:A5:E3:C3:0A:64:59:25:C5:C9:F9:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsjCDmXc0z_4pePDCmRZJcXJ-V8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/93f6ee-05ea-4f31-9af6-dfc5cc64a81e/1/PsjCDmXc0z_4pePDCmRZJcXJ-V8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:b3:a0:4a:67:11:07:de:ab:a0:a9:a6:72:98:71:82:4a:b2:
         5a:d4:df:ad:36:b7:e7:21:52:e9:01:81:68:b2:48:4e:94:b6:
         bb:88:ab:3b:f8:85:41:d0:36:aa:93:3c:78:08:7c:e1:2c:88:
         0a:58:c0:42:0d:f2:ff:1b:ba:6d:53:8d:82:40:c0:55:b4:f2:
         5e:65:e9:6d:b2:9f:5a:8d:35:e1:a6:d5:8d:cd:18:8b:c7:39:
         b0:d1:85:53:17:59:d6:7c:0b:27:fc:05:be:d2:0f:d5:7b:28:
         98:b9:8f:6a:aa:ba:2a:26:01:e0:4d:e4:a3:0a:c2:6c:22:0e:
         0d:ec:61:23:fb:87:16:f8:61:09:5b:94:d9:18:d5:4f:f3:7a:
         df:20:cf:cb:fc:a0:7b:93:8b:90:c9:84:46:44:72:84:55:e1:
         84:d4:6f:c6:58:d4:c7:99:74:fb:76:fd:b5:c1:00:16:19:75:
         a7:f3:8b:ad:e5:c2:07:13:4f:19:18:29:07:de:4d:59:c1:c8:
         d2:cf:ff:19:c5:53:18:89:05:48:31:c6:5f:95:08:fa:a3:a1:
         35:ad:e8:c0:7a:40:96:53:aa:02:9b:a1:10:9c:cf:9c:da:7a:
         04:0e:a9:26:2c:f6:91:26:0f:c5:f8:0c:33:5c:8d:87:39:d1:
         85:b6:79:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----