Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
File:                     PIbsMh5y_UbJjcwM18cLytVX1Zw.mft (raw, json)
Hash identifier:          5d+na4OrteSarY3LtnHCmqnT3mZuJxWvLxfFTdfFMUQ=
Subject key identifier:   9B:4A:CF:5D:E7:3B:86:85:24:17:43:BB:C9:69:DF:81:F8:01:92:C6
Authority key identifier: 3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
Certificate issuer:       /CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
Certificate serial:       01962ECF7E31832E6114CD24C73AAE0F11A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 11:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:12 +0000
Files and hashes:         1: PIbsMh5y_UbJjcwM18cLytVX1Zw.crl (hash: kq5+zppR1KzNWeB6YijnkPWUHgT8lu9H1TWemY57y70=)
                          2: XgpSQjhhfxwk9vZfnDmQ4hugM38.roa (hash: 0VqbQTYbejzGPg6sOJbQNqmXP31XYN5qUoi8IUVN5jw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7e:31:83:2e:61:14:cd:24:c7:3a:ae:0f:11:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
        Validity
            Not Before: Apr 13 11:01:12 2025 GMT
            Not After : Apr 14 11:01:12 2025 GMT
        Subject: CN=9b4acf5de73b8685241743bbc969df81f80192c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:58:62:02:2f:7b:7a:2f:02:47:14:2f:71:06:
                    f5:3d:2c:18:c5:bd:6c:c5:bb:5d:fe:66:bc:4d:4f:
                    4b:42:91:4a:06:ce:fc:b3:e9:23:f2:be:60:72:cf:
                    21:f5:88:90:0f:ed:98:90:af:22:0b:91:71:66:4c:
                    fd:d0:d9:f2:2a:8b:b5:59:5e:a6:63:54:66:77:74:
                    37:4d:97:8b:33:7f:93:f6:a9:07:b3:f5:ac:55:b1:
                    fe:f8:7a:df:96:c2:8d:2a:a0:af:41:c2:b6:cd:6e:
                    90:c5:44:b0:41:35:61:71:d2:1b:a9:90:92:07:06:
                    da:d8:40:02:8d:a1:1f:dc:05:cc:c1:b3:8b:8e:6f:
                    70:fa:98:06:54:69:66:30:07:f9:a4:49:a8:66:d9:
                    5d:d0:06:2c:60:31:cf:e8:75:0f:84:73:87:ae:a1:
                    cf:b5:08:b5:40:e1:52:e2:be:fb:01:a8:99:a5:ff:
                    50:22:a8:87:5a:18:04:f1:70:11:35:35:68:87:68:
                    4f:af:5d:3b:23:47:78:06:6d:54:32:35:a8:3b:c5:
                    b1:39:d2:ae:c9:d5:e6:9a:a8:41:f5:77:e0:1c:f2:
                    74:ae:a4:0b:7b:17:95:67:89:3b:4d:8f:7f:d7:0a:
                    7d:c9:b3:29:44:6b:28:6c:b0:b4:2c:5c:98:bb:dc:
                    ca:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4A:CF:5D:E7:3B:86:85:24:17:43:BB:C9:69:DF:81:F8:01:92:C6
            X509v3 Authority Key Identifier:
                keyid:3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:a9:e0:05:26:3c:db:8a:2a:0c:e0:8f:bc:3b:60:07:70:c6:
         90:31:92:ed:3e:30:69:04:a9:98:00:56:3b:a9:08:0d:6d:83:
         04:11:24:51:ce:6d:89:25:16:3f:e0:ed:2c:2c:99:ee:f6:34:
         eb:98:c3:5d:13:64:ba:02:49:08:7c:a5:36:26:47:f8:6f:dc:
         1f:21:54:3e:6b:cd:01:6f:cc:0c:9a:d5:6e:03:3e:e7:2a:af:
         b0:b6:68:99:88:19:ff:db:e8:b1:6b:c9:80:8f:c1:c0:7c:56:
         91:2a:f7:52:59:e5:4a:35:4a:95:84:dd:07:a2:a3:bc:3c:28:
         65:14:d9:ab:86:14:34:6d:2a:87:f1:13:15:5f:e7:1c:8c:10:
         7d:b0:d1:a5:77:22:54:6c:12:d5:9e:c6:65:28:2f:04:fe:eb:
         fe:0d:54:e6:2c:3d:32:77:3f:de:c0:51:d0:8a:f4:ac:93:02:
         17:77:ab:53:95:1a:09:68:9f:33:40:6a:36:eb:92:1a:2f:6b:
         65:54:78:9b:94:e8:ae:a4:41:4c:3d:ad:ae:3d:75:0c:6d:62:
         a0:9f:e8:37:7a:21:41:53:7a:be:4e:3d:fc:59:c9:ba:31:18:
         8f:0b:60:0b:fd:b3:14:17:bf:cc:6b:aa:bb:73:64:de:b6:87:
         0f:30:60:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----