Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
File:                     PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft (raw, json)
Hash identifier:          PWdGWFuwNVYfwZC7SXiM9ouZ4gcicVZWom8U9xumaJc=
Subject key identifier:   B8:73:5E:D0:42:03:49:9E:45:A1:E6:72:C0:D9:DA:33:25:AD:2E:36
Authority key identifier: 3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6
Certificate issuer:       /CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
Certificate serial:       01962E99281794FFB7D53DD0EE7B247D34BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:51 +0000
Files and hashes:         1: PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl (hash: m+GN/jPlOQO/4o+zvl2Gva67P/2RHyE2q6pvXjJ89nU=)
                          2: yxseiDrTDKkfKumKkJUQ-S699SM.roa (hash: jMn0qSGQuB1rlWwE3sPg8LRuW4ybf3WJJD6jW2FPlxo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:28:17:94:ff:b7:d5:3d:d0:ee:7b:24:7d:34:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4cf88177442a54f321b8fa80b6cf5df404cff6
        Validity
            Not Before: Apr 13 10:01:51 2025 GMT
            Not After : Apr 14 10:01:51 2025 GMT
        Subject: CN=b8735ed04203499e45a1e672c0d9da3325ad2e36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f7:ee:5a:2c:cf:8c:d0:18:93:8b:7a:0c:f4:
                    b9:2e:e5:5b:69:eb:cf:4f:73:30:fd:22:9c:cd:b5:
                    26:f7:cb:7b:bd:b3:05:cd:d4:a2:f7:6b:36:50:6a:
                    53:8c:97:6a:cf:1e:2c:d6:ce:dd:88:b7:f9:ce:06:
                    e0:8c:02:e5:5b:56:79:fb:2d:35:81:81:b0:af:c4:
                    75:8b:d5:12:5d:75:e4:51:df:f2:81:89:f0:1f:8d:
                    9f:6c:70:47:da:86:81:58:85:25:9f:9e:d8:d7:4e:
                    73:66:2e:0d:24:05:9b:76:fc:13:7f:7d:df:bd:5a:
                    56:b0:8b:6c:87:7f:87:6a:14:a8:df:ad:f8:a5:f2:
                    d1:53:30:3a:bb:04:1e:30:6f:b3:66:1d:ea:c9:68:
                    0c:5c:e7:78:17:e6:3e:9d:cc:54:37:be:f2:b4:1a:
                    0f:08:39:96:65:95:d4:4f:c9:ec:1f:58:ed:db:67:
                    b6:e9:b5:40:ea:e4:70:7c:6b:b8:1f:3f:2f:74:42:
                    6c:52:22:7c:55:99:8a:34:ff:b2:30:a1:62:86:12:
                    94:d5:54:ed:3d:f3:45:c5:a5:33:43:10:5d:a0:12:
                    f6:9d:f8:6b:ff:08:35:61:c7:b8:ef:29:26:0f:29:
                    b5:77:c1:06:20:c1:66:fb:81:44:c4:cf:ea:9b:a5:
                    d1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:73:5E:D0:42:03:49:9E:45:A1:E6:72:C0:D9:DA:33:25:AD:2E:36
            X509v3 Authority Key Identifier:
                keyid:3C:4C:F8:81:77:44:2A:54:F3:21:B8:FA:80:B6:CF:5D:F4:04:CF:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3a40c0-2475-4814-8559-700e3027f623/1/PEz4gXdEKlTzIbj6gLbPXfQEz_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:5a:91:eb:6a:43:41:3a:62:57:9e:c2:a6:cd:fa:83:2b:d5:
         62:7d:da:91:60:23:0f:29:9b:71:6d:44:7e:87:b9:3c:da:a3:
         71:30:31:e4:39:d9:16:22:ce:22:fb:0a:c8:97:7b:07:3a:0f:
         79:27:8a:94:10:e9:60:28:38:bd:dd:d4:c4:6a:cf:ee:e6:f6:
         3b:35:22:4c:30:ae:3a:e8:f8:8d:72:e0:a4:2b:14:b6:d5:21:
         42:d2:a1:d1:e7:ce:71:c7:19:33:1a:57:38:ff:04:d8:5a:48:
         27:56:54:a2:58:40:4c:92:fd:1c:c8:60:2b:6d:47:b3:a0:a3:
         cb:d3:d4:05:fb:bb:15:9a:1f:cc:a0:fb:14:9d:bb:c8:c5:24:
         7a:8c:5d:5f:e7:b9:83:50:de:52:59:93:ce:b7:d7:e8:25:4b:
         b8:6a:0d:6f:1d:51:99:9b:4b:82:fe:d8:c6:02:ba:01:ee:74:
         89:7b:d3:41:6a:29:d5:57:83:95:5f:f3:fb:74:54:b8:92:04:
         06:45:10:91:1b:14:59:9b:fb:1c:92:14:e1:ca:e9:61:be:70:
         2d:ba:23:60:e0:54:15:07:86:69:68:d8:2d:4c:aa:8f:65:6d:
         54:ba:f0:09:01:9d:db:89:c4:be:ba:d6:86:3b:25:51:f8:14:
         9f:aa:c4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----