Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
File:                     P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft (raw, json)
Hash identifier:          YFM8Zw+a0Kqqi/+cc4f7G2TjMd6vYOhmn7BaupZHc3c=
Subject key identifier:   A9:3E:D9:59:F9:4F:9C:D4:19:5E:8D:1E:9C:DB:EF:D1:A4:B0:0F:3F
Authority key identifier: 3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B
Certificate issuer:       /CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b
Certificate serial:       01962E9977BB70D85BC9026F7153A80E9F55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:02:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:11 +0000
Files and hashes:         1: P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl (hash: MKYqMKrT3kJCn6vzlJubTY/pejxPnNMDZT8HtsIytT8=)
                          2: jRO1e3hTXAd70fc6Qsmrq_xKPoU.roa (hash: AAZqmZaGTY2ISP2pOvnDomZPlwhbW/iD6slS5k2a/FQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:77:bb:70:d8:5b:c9:02:6f:71:53:a8:0e:9f:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f47f75757413ccc172d3d1b826fae5ae9385a1b
        Validity
            Not Before: Apr 13 10:02:11 2025 GMT
            Not After : Apr 14 10:02:11 2025 GMT
        Subject: CN=a93ed959f94f9cd4195e8d1e9cdbefd1a4b00f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:14:cd:24:a9:28:4e:a3:0d:23:24:2e:de:ad:
                    d2:b1:30:5a:66:c7:33:de:18:44:3c:24:ff:7b:0b:
                    c9:51:cd:5d:62:18:7a:2f:fa:7f:a4:d4:8e:00:f9:
                    44:7b:b3:63:ae:81:21:f8:77:b0:e1:ec:31:fb:ba:
                    ed:89:c0:7c:61:4b:2c:d0:d5:76:91:f0:e9:3a:bd:
                    03:21:ad:73:eb:72:01:a1:a0:93:51:c1:4f:2f:2f:
                    8a:a7:b5:12:d2:9a:87:f8:8b:9b:26:7f:a5:d4:ff:
                    54:ac:8a:de:a0:ad:cf:a9:d3:2f:be:4c:8c:3d:9e:
                    72:24:fb:44:09:79:af:ad:f6:ae:da:0c:95:e1:48:
                    92:7c:91:ac:57:df:0b:1e:a1:61:7a:79:72:5b:f3:
                    60:d2:64:db:c7:05:1b:5c:05:8b:19:ed:3c:39:1b:
                    88:81:95:f4:ea:84:d3:5b:de:91:eb:17:3b:2d:8d:
                    3a:49:7e:9a:6a:ec:4f:11:23:6c:37:5c:21:7d:40:
                    d3:76:43:32:1b:89:57:ae:ce:d8:41:30:90:f7:d9:
                    99:87:14:3b:5d:a5:20:af:3e:e4:89:99:6f:0a:47:
                    1d:5c:44:c1:d9:ea:6f:ca:c3:87:19:9c:18:e4:69:
                    ce:ca:51:98:56:57:8d:de:9b:ce:8e:d1:ca:71:de:
                    ca:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3E:D9:59:F9:4F:9C:D4:19:5E:8D:1E:9C:DB:EF:D1:A4:B0:0F:3F
            X509v3 Authority Key Identifier:
                keyid:3F:47:F7:57:57:41:3C:CC:17:2D:3D:1B:82:6F:AE:5A:E9:38:5A:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0f3V1dBPMwXLT0bgm-uWuk4Whs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9f88d8-8a6d-4c5c-b194-e155acc6b84e/1/P0f3V1dBPMwXLT0bgm-uWuk4Whs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:0b:3b:77:e7:d0:f2:34:b1:11:4f:d2:9b:90:f0:a2:ea:cf:
         bf:67:94:89:42:52:47:ff:de:35:ce:47:4f:0a:ab:16:1e:38:
         4f:2f:77:49:03:de:5f:f5:3f:46:65:3f:0a:51:57:16:b9:96:
         9e:1d:44:44:e7:79:80:5f:5b:e2:64:36:52:d5:31:5e:06:fb:
         52:c2:78:e2:3d:ba:5a:16:64:0d:d1:7e:64:70:62:c3:56:de:
         79:b9:41:b5:49:0a:b8:db:24:bf:7c:06:98:50:4c:82:70:42:
         3e:af:77:b0:0e:df:b1:61:33:9a:a4:69:88:8c:64:69:0c:30:
         ec:7b:a2:f8:61:a7:78:4a:5d:ad:c3:6a:74:48:06:6c:9f:7a:
         85:3d:b3:90:f2:68:7b:55:1c:41:1d:52:09:f8:c5:8d:71:db:
         05:2a:2c:fd:c0:0d:a0:66:3c:74:4d:e3:6d:30:21:9c:a8:af:
         c0:9c:06:81:2d:8e:9a:b0:88:2e:05:83:05:8e:eb:c8:5f:07:
         8c:21:0e:41:3d:93:4b:22:64:93:6f:fa:9f:cf:6c:ba:7c:9c:
         a6:6e:79:d5:2e:64:ab:65:b0:62:e8:38:99:3f:29:49:9f:58:
         aa:df:67:7e:da:d3:9c:0e:a8:02:cb:18:30:06:86:46:72:19:
         d9:d3:e5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----