Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
File:                     PRzEAjSeGROS0ex0acG8gkNjRDk.mft (raw, json)
Hash identifier:          fxIaibDV96lpWndGHyOVNTHW6r3Xzji8kAJpMLSzpRk=
Subject key identifier:   67:84:7A:DC:10:33:ED:B9:10:3F:57:DA:08:D6:4B:80:92:FF:DD:03
Authority key identifier: 3D:1C:C4:02:34:9E:19:13:92:D1:EC:74:69:C1:BC:82:43:63:44:39
Certificate issuer:       /CN=3d1cc402349e191392d1ec7469c1bc8243634439
Certificate serial:       01962DF3B4B5DF566FFF0138FE03D81F5E34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft
Manifest number:          092C
Signing time:             Sun 13 Apr 2025 07:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:08 +0000
Files and hashes:         1: PRzEAjSeGROS0ex0acG8gkNjRDk.crl (hash: h1oJBcHPcz6Qr+tdARw6mNojme/k7kRb7h48LJHG2LY=)
                          2: flDyEgY09JcTncHiiRnZ44dc3Jg.roa (hash: U/d1Btmo0ndLftNS6W3aEjJNMxknGgzWNSoSOFVtfm8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b4:b5:df:56:6f:ff:01:38:fe:03:d8:1f:5e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d1cc402349e191392d1ec7469c1bc8243634439
        Validity
            Not Before: Apr 13 07:01:08 2025 GMT
            Not After : Apr 14 07:01:08 2025 GMT
        Subject: CN=67847adc1033edb9103f57da08d64b8092ffdd03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:07:cc:54:44:94:70:cc:ae:f3:de:8e:ca:77:
                    1c:89:19:6f:c7:d4:4e:4c:02:87:ea:36:d4:d8:87:
                    cf:46:d5:3e:21:83:88:6a:01:94:73:3a:55:e3:81:
                    15:0b:70:9a:31:c9:23:59:66:3a:d9:02:25:0f:30:
                    62:3a:4f:a9:6d:73:17:86:fc:c1:93:5a:ab:79:45:
                    bc:ad:c7:c5:b1:c1:1f:8d:b3:ac:30:0f:53:22:4e:
                    05:ae:80:5b:dc:8d:5c:3c:24:ef:62:42:1e:b8:f6:
                    3e:ca:3d:cf:f1:e5:79:35:a2:ba:84:f6:f7:fe:dc:
                    eb:5d:30:0d:15:25:6f:d6:da:e3:b8:a3:d2:e8:36:
                    41:e2:05:8b:4a:84:05:f2:b2:d7:84:06:13:22:11:
                    e7:45:41:44:66:93:d3:5a:c6:fd:2d:d8:fd:05:18:
                    ea:66:71:d1:2a:f1:93:6d:d1:0b:c3:30:df:63:a7:
                    36:b6:bb:40:81:50:6e:b9:7c:9a:77:44:95:50:5a:
                    6c:8e:5c:89:3d:2f:c7:4a:56:f0:5a:ad:83:e6:f9:
                    bd:eb:da:ec:1c:9e:09:c6:73:20:71:62:61:da:41:
                    28:02:a0:3e:d2:7a:2a:71:9a:9d:f7:d0:ac:92:04:
                    9b:27:a7:2c:72:1b:95:90:5f:7f:30:7f:84:1b:13:
                    e7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:84:7A:DC:10:33:ED:B9:10:3F:57:DA:08:D6:4B:80:92:FF:DD:03
            X509v3 Authority Key Identifier:
                keyid:3D:1C:C4:02:34:9E:19:13:92:D1:EC:74:69:C1:BC:82:43:63:44:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:cd:55:13:d8:2e:65:ab:a1:97:81:ac:59:56:11:69:01:a0:
         90:fc:26:e5:be:ce:fb:d9:8b:a0:78:31:bc:ee:67:72:d4:ec:
         cb:e0:98:fd:d6:2a:ce:29:05:16:9e:6c:fc:3d:28:cb:f0:44:
         63:af:43:0a:9b:67:d5:7a:0a:4e:21:d2:5c:1f:e3:69:28:4a:
         04:61:de:8c:b8:9b:6f:8b:e2:2c:e8:a6:9a:37:58:33:29:9b:
         40:ed:d2:cd:ef:9f:fa:9f:a1:68:2c:8c:30:b7:89:3f:1f:72:
         d0:eb:a4:08:6f:87:d4:27:81:87:f1:18:be:f0:ca:9f:19:80:
         24:7b:ea:7b:4f:55:e6:5e:47:34:ba:fb:c4:40:30:57:ea:73:
         c0:0a:8f:0d:e9:de:05:2b:13:34:a7:c9:df:90:34:ad:ae:b7:
         bd:b6:a3:eb:54:e7:02:5c:81:03:70:99:40:1d:cc:46:35:4c:
         73:36:74:86:1d:a8:80:2a:8f:7f:53:91:ee:6e:cb:82:32:63:
         87:19:2a:d4:ba:f7:57:51:aa:01:35:e2:b1:8e:52:86:fd:53:
         0c:91:8a:82:2c:34:c2:84:0c:c1:67:5b:f7:65:5e:09:0e:50:
         80:87:a7:7a:e3:7c:06:06:c8:98:d5:39:12:e6:17:df:6c:59:
         4c:ca:e0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----