Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
File:                     P1YjHn71MYG2MCYPVzmpOZgLzg8.mft (raw, json)
Hash identifier:          jB73a65Wj+qvjksnZokwcV+syOVynwqZBiHNcV2aJNA=
Subject key identifier:   F1:E2:2A:F9:5E:00:D4:FF:46:7C:84:06:0C:36:B8:10:9D:30:E4:ED
Authority key identifier: 3F:56:23:1E:7E:F5:31:81:B6:30:26:0F:57:39:A9:39:98:0B:CE:0F
Certificate issuer:       /CN=3f56231e7ef53181b630260f5739a939980bce0f
Certificate serial:       01962E996ECA4F9BBE90B8295FC8AA6F5D86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft
Manifest number:          0532
Signing time:             Sun 13 Apr 2025 10:02:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:09 +0000
Files and hashes:         1: HjgAjQeDaXZKdKIg65rJrSZ01bk.roa (hash: SKWIIQpiA+MIRyPfkYnv+UHlvY+ONfNHoHSQy81/bbk=)
                          2: N7wTPY9fMxEW9bxsO96kZUV-srk.roa (hash: uJjDkbG36UQdfaC7DvT1mlqCZKSOCWSqMQESz+y4GRo=)
                          3: P1YjHn71MYG2MCYPVzmpOZgLzg8.crl (hash: 8uirCBs7tebicWWMejDYcqabdI7vByhZXoqnSVeEwwc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6e:ca:4f:9b:be:90:b8:29:5f:c8:aa:6f:5d:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f56231e7ef53181b630260f5739a939980bce0f
        Validity
            Not Before: Apr 13 10:02:09 2025 GMT
            Not After : Apr 14 10:02:09 2025 GMT
        Subject: CN=f1e22af95e00d4ff467c84060c36b8109d30e4ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a0:fd:d0:67:6d:3f:9f:93:3f:f5:46:3b:60:
                    35:8d:00:6e:98:14:4c:fd:7b:44:65:5c:ea:70:d9:
                    65:7c:02:49:df:c6:12:68:b4:57:95:80:06:a9:cb:
                    fb:54:15:05:1f:58:cb:b5:7f:6e:4b:92:f3:a2:eb:
                    64:d8:63:a4:d9:20:cd:ae:3e:1a:b9:ef:67:b5:8c:
                    17:26:5e:e5:33:bd:d5:ba:10:e7:40:2a:90:bd:4f:
                    b2:24:4c:5a:4d:eb:ee:7e:8b:65:6f:c5:f4:1c:29:
                    96:6b:2f:6e:6f:ad:cd:18:91:ce:3a:1d:bb:0b:09:
                    40:76:bf:18:0c:2c:3e:51:5f:9c:37:a7:c1:2f:92:
                    69:f9:00:e1:d8:6b:30:25:72:2f:79:6b:92:42:1b:
                    b2:7f:e0:54:01:87:15:10:e7:ad:e9:30:c4:a6:6b:
                    a6:b5:d2:6f:6f:f8:aa:97:2b:8b:49:18:da:36:e7:
                    d8:d9:15:97:ae:b3:d4:7a:81:cc:85:f2:3b:fe:84:
                    d9:e1:63:38:22:31:60:1a:f4:e3:0d:0c:39:74:c7:
                    41:e9:a6:93:b0:d3:3a:99:b6:cd:f4:f3:dd:38:d9:
                    68:24:85:a5:a4:f8:67:7f:b3:c0:e3:db:4c:ea:1f:
                    54:e3:79:8c:00:64:f5:f9:e4:b4:45:d4:72:55:84:
                    ed:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E2:2A:F9:5E:00:D4:FF:46:7C:84:06:0C:36:B8:10:9D:30:E4:ED
            X509v3 Authority Key Identifier:
                keyid:3F:56:23:1E:7E:F5:31:81:B6:30:26:0F:57:39:A9:39:98:0B:CE:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1YjHn71MYG2MCYPVzmpOZgLzg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5c2e36-a9db-4522-a63e-455ddc7d9e38/1/P1YjHn71MYG2MCYPVzmpOZgLzg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:71:4b:fd:2d:7a:3e:ed:f0:68:19:74:a5:5e:c6:fc:d6:70:
         58:0b:9d:ba:2e:06:fc:7e:8d:1a:48:78:a0:07:bf:b6:36:dd:
         6d:2d:c2:2c:68:f6:44:3e:e4:e6:5b:8f:fc:fc:79:b2:28:6c:
         d8:41:fa:e3:ed:2b:9a:29:2a:c7:d6:0e:24:85:39:7c:5f:8e:
         50:37:88:f8:3a:70:9c:eb:89:db:13:a0:2f:89:c0:84:56:03:
         b9:a5:5b:ec:18:4e:5c:87:e7:81:8d:0e:30:ff:d0:88:80:70:
         f9:03:d4:15:97:94:d8:a5:72:1d:91:24:5f:05:fc:fa:75:55:
         84:62:1f:42:eb:fb:d2:7b:cc:ea:cf:27:e3:9d:d2:2e:60:e2:
         f3:2a:fc:68:fa:80:bd:3a:20:39:83:c5:96:1b:9f:41:e1:fc:
         49:24:31:98:da:5d:78:2b:2b:8d:5a:93:40:83:40:c9:fd:69:
         b5:21:e8:f7:2f:13:59:b2:2b:61:0e:3d:39:9c:f6:c8:55:72:
         d8:f7:a0:a9:eb:b9:cc:db:e8:7c:54:32:d1:28:50:f2:b5:fd:
         d9:8a:91:b5:b4:69:10:10:a2:ec:53:f1:87:ba:ab:19:dd:19:
         66:62:ca:3a:2b:15:16:4f:8f:e1:80:bb:9b:78:5c:4a:ba:5f:
         e8:ef:c8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----