Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
File:                     PiTH7Po30khxUvubu6tQvnneJhk.mft (raw, json)
Hash identifier:          W0rbF4U6a6McF8pgRDC/2/YLIE9Wh4UwHc0NhgzEkaY=
Subject key identifier:   38:23:64:0D:BD:2C:33:D1:85:B3:18:A1:BA:0C:6D:4E:55:07:B0:DD
Authority key identifier: 3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19
Certificate issuer:       /CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
Certificate serial:       01962F74A8731FDEDF8FFB49BFAF26121DBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft
Manifest number:          14FA
Signing time:             Sun 13 Apr 2025 14:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:36 +0000
Files and hashes:         1: 3y2t9Y4w34qiFBdy_Ek4JJUO21Q.roa (hash: /TZVDNQyK0D1wC867uTU8KAEMW8e+Zi9YcbvlB1rMAE=)
                          2: EmNqWHZHvcbARh8MqUG6nxXKDnk.roa (hash: qFrAZp7TQYaT2zIiJ3kN/K/RUigkO6TizDHq1yApShI=)
                          3: PiTH7Po30khxUvubu6tQvnneJhk.crl (hash: s5xvs5ZKks/qXruDkTIBVEUA5TLgKzYjJVaotN5qOiw=)
                          4: k0j78iVx37wwO7bDjCAVoyijDeU.roa (hash: x4YCjAIVRyxgn0vQG0zlSLFCcDO0MbVYoCzpTeJPa0I=)
                          5: oLh3yoxxKDPJ0rI4fFfhHDN8zHc.roa (hash: gc86IVswZ2auip9vASDEdi6AXEh5d/2Jw9bjMy6Pwd8=)
                          6: oqQMhQCTnCvqpL4FDtvR2ocumgk.roa (hash: 9N1juEbb6Fp6BQG9Mi2KAk0Vy7P2TkUjOEW3w+qZU1s=)
                          7: u7jBF_TQnJz9mTpZhXYq5nggn8c.roa (hash: wreTMB6pW+vrdjrRc+OCyHOCrMzU/JZ3/7CTFhlab7A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a8:73:1f:de:df:8f:fb:49:bf:af:26:12:1d:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e24c7ecfa37d2487152fb9bbbab50be79de2619
        Validity
            Not Before: Apr 13 14:01:36 2025 GMT
            Not After : Apr 14 14:01:36 2025 GMT
        Subject: CN=3823640dbd2c33d185b318a1ba0c6d4e5507b0dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:85:46:e2:ec:7a:ed:a7:e8:7a:b3:53:87:85:
                    6d:e4:b1:d8:91:50:9b:60:04:37:83:90:41:03:50:
                    43:0d:94:c1:e8:12:6d:79:59:2b:c2:31:59:d7:c0:
                    1e:fa:68:d8:c4:b1:01:8e:d8:58:66:db:6a:6b:4a:
                    25:11:c7:e6:19:be:8e:87:28:4f:ec:f9:61:ab:0e:
                    4b:0f:eb:45:67:5f:33:e6:ff:49:6a:83:e1:c4:ad:
                    db:0a:f7:c8:b6:58:34:7f:40:f0:4a:b6:5c:d6:74:
                    99:8e:71:52:ff:9d:0d:77:d3:60:ff:2a:71:16:05:
                    3f:3f:e8:bd:0d:5e:f0:de:c7:5a:67:be:b5:6a:26:
                    af:a5:ea:28:41:a5:67:20:da:ed:97:ef:e1:27:02:
                    d9:55:49:57:dc:6e:99:83:11:ac:65:91:e7:aa:ec:
                    36:06:bf:16:d9:e6:35:a3:34:a8:e8:c9:04:c5:ec:
                    c7:ad:43:29:97:1e:af:3d:73:ea:13:47:fa:b5:77:
                    9c:1e:17:79:5f:b6:14:63:7d:10:af:32:d4:da:bc:
                    f7:83:5f:71:fb:ab:35:a5:86:91:71:45:25:6c:2e:
                    49:82:45:61:3a:b8:18:76:3f:73:eb:99:e2:b0:d6:
                    c4:a9:03:68:f4:5a:58:82:b6:a3:a2:2f:76:02:e6:
                    eb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:23:64:0D:BD:2C:33:D1:85:B3:18:A1:BA:0C:6D:4E:55:07:B0:DD
            X509v3 Authority Key Identifier:
                keyid:3E:24:C7:EC:FA:37:D2:48:71:52:FB:9B:BB:AB:50:BE:79:DE:26:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PiTH7Po30khxUvubu6tQvnneJhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/39a5fc-d26e-4d53-91e3-493d774aa1ff/1/PiTH7Po30khxUvubu6tQvnneJhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ed:b2:c6:48:d9:71:c1:47:27:5d:52:8b:c0:a8:f4:71:72:
         21:d8:a6:76:d5:13:a8:f1:20:df:0f:be:57:f3:00:3a:e7:cc:
         ae:49:fa:c3:01:53:bf:32:bf:40:fa:1f:9a:2d:41:19:b2:66:
         e0:34:94:14:b9:fb:b6:7d:00:9b:55:42:fc:69:d0:cd:d7:11:
         40:f7:42:03:37:d8:e4:f0:d4:56:9d:9a:10:8d:50:c0:0b:1a:
         12:4a:47:13:ca:5d:79:b9:90:a2:40:81:46:40:2d:39:f4:c9:
         51:e7:be:8a:16:fd:8d:d8:95:b5:57:cc:c1:08:a0:5c:ff:9b:
         1f:b3:34:f1:ae:51:41:a2:45:af:c2:06:98:6e:4b:8f:4b:69:
         79:7d:ab:54:7f:74:84:2f:c4:b2:40:4f:16:31:a1:9a:b0:7c:
         b4:fb:ae:fd:0d:2e:6f:a1:a1:a2:52:12:59:b4:c7:0f:c2:7c:
         3c:dd:b3:4c:9f:61:bd:ba:82:b2:32:1a:7f:c5:b1:ea:d1:ce:
         a5:60:d8:f4:2b:39:3e:97:3d:c0:3f:91:da:0a:2a:ee:e9:50:
         20:b6:f1:dc:9a:04:93:53:3a:0b:c3:2c:14:93:e9:29:18:f0:
         7e:8d:5a:d8:79:75:19:8f:29:b3:46:f9:13:cd:a4:46:3b:f2:
         08:5c:30:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----