Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
File:                     PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft (raw, json)
Hash identifier:          gtnupwbJRTRGgpezsud5J4mMV231VFHGco1Ct7EFNWI=
Subject key identifier:   B0:7F:56:C7:38:A8:4C:8C:66:79:91:88:DC:5F:08:16:26:F5:D7:6E
Authority key identifier: 3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68
Certificate issuer:       /CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668
Certificate serial:       01962DF4191821D37FAAA515F3A57D81842D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:33 +0000
Files and hashes:         1: 3DgJf8B6gHn6-h7mtLpM7uiT9zs.roa (hash: bNvleSp/4QB52V4DZ5fxsf4u+utsXgrzdigeABa48Cw=)
                          2: PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl (hash: YgT3wcjehcYl8Rb+No4tfdpbhypWknrzIIsqsZ0Whtw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:19:18:21:d3:7f:aa:a5:15:f3:a5:7d:81:84:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668
        Validity
            Not Before: Apr 13 07:01:33 2025 GMT
            Not After : Apr 14 07:01:33 2025 GMT
        Subject: CN=b07f56c738a84c8c66799188dc5f081626f5d76e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:cb:70:e0:38:4e:91:13:aa:ff:d1:95:0b:05:
                    23:a6:fe:20:75:3c:d2:13:64:60:91:24:72:d9:9f:
                    70:a9:01:a0:ad:63:05:5f:29:f1:54:eb:21:cf:f4:
                    a8:b9:ce:bb:cf:24:ed:15:8a:5d:4a:c0:ec:1a:54:
                    ce:26:a3:2c:70:2f:c2:bc:39:0f:c9:f9:26:58:41:
                    ba:b9:e7:ff:5e:ec:e4:fd:a5:b4:2c:01:46:be:6a:
                    76:59:c3:b9:43:5e:d7:f4:6d:53:11:f9:06:9b:ab:
                    24:14:e3:af:75:91:f1:bb:ba:f4:a1:c9:ad:cd:54:
                    a2:45:8e:4d:0b:ad:02:6f:b2:6b:38:0a:97:f2:24:
                    ee:e2:49:49:fb:e7:7c:a3:78:a4:e5:97:3f:71:f0:
                    9e:b7:5d:40:29:54:7f:28:97:1f:8d:62:ac:bb:e5:
                    b1:bb:54:98:3a:6b:97:4d:10:0a:be:12:ef:97:bb:
                    af:92:59:89:b3:d3:74:c7:2a:53:59:90:97:9b:75:
                    37:54:2c:d8:41:10:76:50:20:da:f5:b9:99:6d:9c:
                    b6:fc:1d:4b:6a:27:7f:27:cc:7b:72:f7:23:b4:19:
                    40:41:80:d8:6e:67:96:d8:5b:28:54:da:42:b7:a2:
                    3a:37:9b:a8:9e:e1:c7:60:92:77:b7:3e:c7:66:d3:
                    85:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:7F:56:C7:38:A8:4C:8C:66:79:91:88:DC:5F:08:16:26:F5:D7:6E
            X509v3 Authority Key Identifier:
                keyid:3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:58:6f:96:39:d6:76:a6:95:68:4b:1c:5c:68:a8:c3:10:12:
         bd:6f:6c:84:da:27:3d:23:f8:b7:b3:4b:e2:e1:59:1c:bb:34:
         3a:88:77:e2:9d:b1:35:b4:ae:4c:5f:ef:61:8f:03:f2:fa:8e:
         c7:41:cb:90:5f:cb:1f:ae:0d:f5:5e:99:83:4d:73:0b:72:39:
         b6:4d:04:a2:a7:4a:1b:91:ee:14:a2:8d:91:ae:c3:e4:39:3c:
         b5:50:4a:08:0a:cf:3b:0b:6b:f5:07:e5:3c:81:cf:c1:f3:65:
         36:f5:fa:19:44:61:73:24:76:8a:9e:6a:26:05:8b:64:ee:d9:
         73:8a:44:0c:d3:3d:ae:e9:7b:24:7a:1b:e0:d2:a6:77:c8:9c:
         5f:bc:ae:7a:d6:3b:42:da:ea:0c:da:fa:eb:47:03:18:b6:b9:
         bb:7f:f7:b0:a2:71:b8:d5:3e:ea:99:04:09:ed:c5:81:17:8d:
         ec:31:8e:43:07:79:6e:8d:13:96:d3:94:5f:3b:e7:5d:d4:e3:
         da:64:12:e1:6d:8e:97:c7:be:76:9d:fe:b5:66:6d:2d:23:aa:
         6a:97:2b:de:78:c4:5c:a8:51:29:a3:0e:66:0f:15:d2:23:65:
         4b:2e:6a:52:e9:34:20:2d:08:73:9f:af:af:2f:5a:bc:6d:ba:
         af:c6:7f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----