Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
File:                     PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft (raw, json)
Hash identifier:          mx3OOga35RLgPx/bhLugVEHeXr2KzgJ8bcuxdzU+AJk=
Subject key identifier:   17:EC:F4:A6:61:3A:BE:CD:51:77:27:5B:ED:82:6B:C4:EC:93:39:E2
Authority key identifier: 3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7
Certificate issuer:       /CN=3e19048348d7ecb9f1191080555bf4458a1a54e7
Certificate serial:       01962E2AE69C018A09DFE2E1EA17BFEB52A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:25 +0000
Files and hashes:         1: OEpDgvPaXUzQjnGh8DicbzVRQqo.roa (hash: Tur6sEnsgmRlnAb38JyLyFtsAnKmMwtkefk62vCJp6k=)
                          2: PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl (hash: WTnQpFQJC+mhOvEn5Q3cJQSALBGV9QPADwaPOhUbjFg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e6:9c:01:8a:09:df:e2:e1:ea:17:bf:eb:52:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e19048348d7ecb9f1191080555bf4458a1a54e7
        Validity
            Not Before: Apr 13 08:01:25 2025 GMT
            Not After : Apr 14 08:01:25 2025 GMT
        Subject: CN=17ecf4a6613abecd5177275bed826bc4ec9339e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:29:eb:2b:e6:51:de:14:9f:24:7e:f6:2d:df:
                    af:ab:30:b0:95:db:1f:53:4b:a7:ba:17:01:c6:2f:
                    cb:51:99:78:b4:dd:35:ea:8d:5a:1b:75:f1:ff:11:
                    0b:4f:c9:e9:b6:b9:65:70:78:65:02:32:76:10:c3:
                    24:7a:00:b8:4a:de:7a:fb:10:49:cf:7d:03:f3:bd:
                    71:43:37:41:55:7b:58:15:69:5f:02:bd:98:66:04:
                    d3:eb:c9:83:93:a3:0c:83:31:0d:a2:32:8d:64:6a:
                    2f:2e:f1:e3:1c:b0:f9:ed:1e:7a:6d:ab:25:c1:7d:
                    47:dd:0c:e6:38:08:9f:09:1b:de:42:1f:b1:92:87:
                    59:1d:86:38:82:4c:f4:be:cb:0e:af:1a:25:8c:7d:
                    07:d4:f1:8a:3f:14:89:df:17:7b:a1:a2:31:53:56:
                    b4:49:4b:07:fb:32:ae:13:f9:b9:87:b5:3b:25:2a:
                    b6:33:4f:c3:d8:04:25:b7:3f:a5:66:04:6b:9b:b1:
                    05:2b:f0:6e:6d:a3:11:95:68:3f:c3:74:5a:22:80:
                    9f:82:59:96:cc:35:9e:fd:13:a2:e4:08:fd:88:15:
                    1e:4d:c3:ef:0a:19:d0:d4:11:12:14:bc:27:e1:71:
                    eb:5b:81:9b:34:92:1e:3a:8d:63:c7:bd:13:4c:8b:
                    e0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:EC:F4:A6:61:3A:BE:CD:51:77:27:5B:ED:82:6B:C4:EC:93:39:E2
            X509v3 Authority Key Identifier:
                keyid:3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:16:f2:bd:65:58:fd:76:98:e4:94:fe:50:a6:df:32:1d:6c:
         2a:67:5a:1e:b2:d2:0f:bb:79:7c:ee:6d:27:81:26:3e:e8:3f:
         83:4c:fd:b2:4a:07:32:78:77:43:57:c4:2b:c2:d6:4d:85:7f:
         a0:e8:b4:f5:61:c9:0d:7a:9d:a8:a2:75:92:af:4b:ea:a5:ee:
         6e:28:8d:ae:8c:98:96:08:f7:26:f0:1a:f6:c9:bc:14:73:cd:
         c8:ff:a5:a1:58:c0:16:44:6d:f5:c9:6c:bd:8c:5d:d7:a8:74:
         a1:c0:6d:22:59:77:e2:5c:11:42:00:45:7b:66:95:d0:c9:d7:
         e8:c2:20:d8:57:c9:46:4d:0a:52:de:79:32:97:ed:ee:71:56:
         28:71:ce:7f:12:63:66:7e:36:eb:eb:4f:4f:14:50:23:4b:76:
         c3:f3:2f:d2:aa:68:f4:d0:5e:71:67:c4:c8:f4:b2:9a:da:69:
         70:ae:95:f0:7c:52:0d:24:4a:83:4e:6d:78:ea:c4:d7:a8:98:
         e4:74:57:25:64:36:59:c2:75:cb:17:a0:a5:cf:45:1f:5c:2c:
         28:ed:7f:79:68:1a:7f:f3:60:99:93:bd:4c:a6:ed:a9:cb:cd:
         a3:80:dc:da:7b:6f:12:0a:d6:04:40:19:86:cc:92:bd:35:84:
         c1:88:78:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----