Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
File:                     pxJZNzLf_jheZ26QVodyMGza63I.mft (raw, json)
Hash identifier:          fcaMMa4gOETecQKcid1x0VoKbWuY74a/kAlDq78MGYc=
Subject key identifier:   3F:23:2F:DB:D6:BF:82:E7:2D:63:57:17:BF:3D:E1:0F:96:30:68:6D
Authority key identifier: A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72
Certificate issuer:       /CN=a712593732dffe385e676e90568772306cdaeb72
Certificate serial:       01962F74D3910AC1E4DD10783972E3F01EC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft
Manifest number:          113F
Signing time:             Sun 13 Apr 2025 14:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:47 +0000
Files and hashes:         1: oMRtMf47yIPyY9ZdrVPhNi3G3eo.roa (hash: 4EnKsD8A0kDOzresfp2Oy03JKmata0Bf/rsbX3H3xdM=)
                          2: pxJZNzLf_jheZ26QVodyMGza63I.crl (hash: FWiiiswv+IRCtUlEb9fCDzeKuUkhDDenVb/0X5Cv4VM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d3:91:0a:c1:e4:dd:10:78:39:72:e3:f0:1e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a712593732dffe385e676e90568772306cdaeb72
        Validity
            Not Before: Apr 13 14:01:47 2025 GMT
            Not After : Apr 14 14:01:47 2025 GMT
        Subject: CN=3f232fdbd6bf82e72d635717bf3de10f9630686d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:81:17:4d:64:cb:89:b1:8a:e0:66:b5:ca:47:
                    c6:b6:6e:dc:ca:c4:b9:b1:e4:cf:22:54:75:9c:90:
                    b5:f0:60:8b:3d:3e:59:4a:e5:b1:91:3c:64:c8:64:
                    be:2c:c9:49:1e:0c:f7:84:75:95:29:fa:09:27:7b:
                    3a:1e:67:e1:48:9b:6a:7a:8d:c9:bd:56:53:be:3f:
                    17:3f:84:15:77:6f:84:71:c4:b6:80:5e:34:06:86:
                    ab:f0:61:b2:31:eb:a5:d4:bc:1c:e2:a9:6f:34:fb:
                    49:f9:3f:68:02:78:84:cc:e6:c9:b8:01:7d:f3:cb:
                    1f:b3:7e:63:df:62:c1:4e:17:4f:c3:1c:b6:3f:aa:
                    15:2f:bf:7a:00:c6:ae:91:fd:9c:9f:90:ce:27:d9:
                    6b:4e:5c:4a:e2:c0:d6:7c:d1:8a:5a:39:4e:ff:e1:
                    fa:40:3c:61:cc:17:8c:66:73:44:b7:e2:93:5e:e9:
                    b2:5c:03:68:5e:33:58:a2:c5:94:82:4b:1d:74:22:
                    ca:c6:90:93:3c:49:91:fd:6c:d0:fd:3c:06:b6:39:
                    03:3f:0d:c4:52:00:6f:51:78:ad:85:79:f9:50:f9:
                    c6:59:cf:53:61:ec:35:89:eb:3c:a4:5f:e9:bf:27:
                    2c:0d:31:bb:6e:32:c9:96:a1:46:00:72:ef:50:e3:
                    b8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:23:2F:DB:D6:BF:82:E7:2D:63:57:17:BF:3D:E1:0F:96:30:68:6D
            X509v3 Authority Key Identifier:
                keyid:A7:12:59:37:32:DF:FE:38:5E:67:6E:90:56:87:72:30:6C:DA:EB:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxJZNzLf_jheZ26QVodyMGza63I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/2119ab-2f0a-451e-b3fa-98db4d5cdb33/1/pxJZNzLf_jheZ26QVodyMGza63I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:06:53:ec:64:a1:cf:4f:9e:90:4c:63:53:30:b2:92:24:de:
         27:18:e4:a2:da:75:46:4e:75:56:30:f0:15:bc:20:3e:71:72:
         0e:a3:87:4a:61:7f:31:56:ea:39:27:0c:b0:87:40:1f:81:30:
         6d:87:5c:95:69:e9:34:33:51:9a:e9:ba:48:7c:31:24:27:17:
         fa:1f:31:09:a2:04:8f:fa:2a:88:ce:2b:8f:b9:9e:ae:84:33:
         68:e7:0d:f9:4f:cc:18:1e:92:83:c0:ed:0f:09:68:ed:7d:e7:
         04:55:2e:5f:ac:9a:c0:47:d9:be:38:c3:0d:64:46:c9:1c:3c:
         07:86:6e:90:e4:13:f2:6d:23:14:95:05:10:8f:54:3a:7b:aa:
         3e:d3:0c:57:34:ae:0f:46:26:80:f8:7c:0f:d0:64:aa:da:d6:
         0b:fa:9f:68:ae:97:b0:01:f7:fc:b1:2e:04:36:e2:aa:89:26:
         60:f4:18:be:4c:96:45:ff:1c:52:f5:e5:0a:00:fe:9e:92:2b:
         f1:f8:c7:a6:04:59:83:61:6f:03:b2:43:2a:97:76:c4:2c:f8:
         4e:7c:e4:e1:c9:13:5b:49:a0:5c:49:87:24:bd:bc:6d:0a:ed:
         d2:85:ce:5a:81:1a:42:e8:00:c2:0b:94:aa:28:04:74:47:bd:
         17:df:20:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----