Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
File:                     PUJ2NzsED6msd-VmxbbN81tTuTc.mft (raw, json)
Hash identifier:          OZ/YssCtBuavtvUv/Y+lThbqGPRo0jitmZvDycXn/eM=
Subject key identifier:   97:22:97:ED:88:AF:CF:44:D9:8C:F0:00:FF:BB:E9:A3:4D:8C:FA:DC
Authority key identifier: 3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37
Certificate issuer:       /CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937
Certificate serial:       01962F748900665D8C009A5DA566F20187AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft
Manifest number:          03CC
Signing time:             Sun 13 Apr 2025 14:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:28 +0000
Files and hashes:         1: JTpkIG2gAi87qZ4MaDyiSAhDmGs.roa (hash: pqYQEm9FQENA5hwqBQ6sbfRExLr5G9tm4QJ0ttI7KnA=)
                          2: PUJ2NzsED6msd-VmxbbN81tTuTc.crl (hash: QCaXEuhuyRZ9khSrsAYEj3i87QsnKIoL4Ib/kLvGjRo=)
                          3: p62oDeoT4vvUHo4yGegZ6_TWKY0.roa (hash: JITepKVcCtsEzEyKS9PibwaqvpfOsAJXxc4iERP2W4s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:89:00:66:5d:8c:00:9a:5d:a5:66:f2:01:87:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d4276373b040fa9ac77e566c5b6cdf35b53b937
        Validity
            Not Before: Apr 13 14:01:28 2025 GMT
            Not After : Apr 14 14:01:28 2025 GMT
        Subject: CN=972297ed88afcf44d98cf000ffbbe9a34d8cfadc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:d3:84:e1:5b:09:32:ed:ea:1c:60:14:19:d4:
                    17:42:ad:a9:48:6c:a2:18:c8:c1:78:a0:1f:25:5d:
                    1e:99:87:6e:13:aa:1a:8a:4c:65:35:10:c9:d4:eb:
                    03:ee:da:20:84:a6:d7:6b:ed:3a:29:df:5a:ba:3a:
                    f0:0a:b2:aa:ad:20:53:4b:f3:bc:db:5f:08:b4:e9:
                    51:0a:2d:fb:44:73:5c:71:9b:e5:30:d0:69:8b:4f:
                    f6:54:c8:46:4d:52:cf:3a:3b:12:6a:5b:25:8a:b1:
                    7d:84:36:5d:61:21:70:0e:69:2a:bc:b9:6d:d2:45:
                    11:93:82:c0:dd:ff:3d:5f:6c:72:10:e8:a0:58:5c:
                    8a:a6:87:d4:63:d5:7e:6c:d5:f7:ed:72:28:d1:4b:
                    31:23:7e:62:f4:1a:81:ed:45:8f:86:34:47:17:b0:
                    df:97:6a:fa:6e:28:76:7d:45:81:d2:9f:46:1e:65:
                    d6:5d:3a:dc:29:b3:83:28:e5:93:e5:78:00:c8:d3:
                    99:91:1a:e3:66:5e:da:6c:75:2f:6b:68:d3:54:09:
                    4d:b4:ce:45:d8:53:dc:a6:b6:f1:fc:55:4b:b6:cf:
                    38:04:dd:79:64:31:e8:9c:57:cd:0b:a4:0a:f2:48:
                    b2:c7:79:a4:ac:36:b2:08:1d:1f:88:5d:ce:a5:58:
                    b2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:22:97:ED:88:AF:CF:44:D9:8C:F0:00:FF:BB:E9:A3:4D:8C:FA:DC
            X509v3 Authority Key Identifier:
                keyid:3D:42:76:37:3B:04:0F:A9:AC:77:E5:66:C5:B6:CD:F3:5B:53:B9:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUJ2NzsED6msd-VmxbbN81tTuTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a19d51-07e5-4db5-9d0e-66d3198bf1a2/1/PUJ2NzsED6msd-VmxbbN81tTuTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:fb:66:c4:5d:6c:f8:cb:0f:1f:c0:d4:0d:1e:d3:6c:97:90:
         8d:58:c6:bc:71:df:ef:15:31:4c:fe:7b:4f:29:60:36:df:7e:
         d6:c5:63:5e:78:8e:ba:ba:ef:cb:34:3f:4e:c2:f6:98:f4:a6:
         e3:be:74:ff:03:5b:8e:3c:7b:89:a7:ea:f5:e4:b0:68:dd:33:
         17:fc:07:61:16:19:13:6e:9f:da:5e:14:00:02:f4:fd:2d:5d:
         eb:ce:63:a1:05:b3:43:77:ed:5e:bd:9a:5c:93:3e:cc:66:9d:
         7b:f7:1b:c4:9b:91:0d:0d:25:8d:42:98:bf:73:96:e0:d5:cd:
         e2:4c:6d:e0:e8:55:96:27:2c:60:96:bd:b6:11:92:f1:d1:26:
         71:33:da:e0:82:40:91:1a:3a:17:e4:2d:9f:cf:c0:bb:a5:d1:
         6f:c2:8e:0e:28:7d:26:ae:5a:53:30:3b:82:67:ad:58:29:fa:
         7d:3d:18:0f:73:4c:a5:ce:0a:05:22:e5:e1:da:5a:26:49:b5:
         4c:4e:c6:06:b5:7b:f4:31:2c:fe:0a:56:83:ea:f9:0b:5f:cf:
         59:fe:6c:16:2c:da:e8:02:fe:d1:75:fb:ae:cf:45:74:6c:f9:
         97:aa:6c:4b:9b:d1:4c:3a:1b:d1:c0:69:b0:cb:46:1f:e2:6a:
         5d:13:68:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----