Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft
File:                     PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft (raw, json)
Hash identifier:          444uVg6hxK/25EI2c/gNRGqpG9aiJXu8CO8L++LhXf4=
Subject key identifier:   51:23:DE:BB:26:07:06:BE:FC:CD:65:84:4D:FD:F6:AD:68:57:22:09
Authority key identifier: 3D:94:DF:65:A3:BD:DD:FB:55:60:9F:18:50:E1:49:F8:2B:EA:78:F7
Certificate issuer:       /CN=3d94df65a3bdddfb55609f1850e149f82bea78f7
Certificate serial:       01962FAB7C8B6E5EEC2B4F731E7F98A9CF48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PZTfZaO93ftVYJ8YUOFJ-CvqePc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft
Manifest number:          0A07
Signing time:             Sun 13 Apr 2025 15:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:29 +0000
Files and hashes:         1: 4HFAWmQXrJvJPwvQ-nacdREAjwA.roa (hash: smesMzM3abS3/IiONa1NHYIBIDWL+noqBcVPlJGz8P8=)
                          2: PZTfZaO93ftVYJ8YUOFJ-CvqePc.crl (hash: 2SQ+BMS2MpWsEZelVkxXGnQEekaQnkj/eaeViRd8Sl0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7c:8b:6e:5e:ec:2b:4f:73:1e:7f:98:a9:cf:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d94df65a3bdddfb55609f1850e149f82bea78f7
        Validity
            Not Before: Apr 13 15:01:29 2025 GMT
            Not After : Apr 14 15:01:29 2025 GMT
        Subject: CN=5123debb260706befccd65844dfdf6ad68572209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5e:68:0a:f4:cb:d1:e7:1e:00:76:e3:56:77:
                    de:ac:6c:67:af:ce:86:a5:ab:8f:14:74:66:96:22:
                    18:05:a9:72:e9:b0:08:ae:a0:d1:58:0c:f5:ab:a9:
                    6c:59:c6:5b:a8:4b:ce:c7:09:60:3f:a9:37:59:6e:
                    69:57:cd:12:76:ec:b7:51:7b:e2:8b:ab:51:0d:c4:
                    9a:9b:6c:36:d3:b3:09:69:55:69:99:53:8b:fb:3a:
                    c8:a2:3e:c1:c5:1d:54:eb:8f:8f:b0:b2:13:b5:ee:
                    91:3c:ee:fe:c1:15:cb:04:8d:f0:ac:f7:b8:fd:ff:
                    e0:90:b8:ca:54:01:2d:32:c7:59:66:b7:67:a9:0d:
                    0a:19:f2:86:b5:36:ae:10:2c:6b:f5:69:c7:56:cf:
                    21:99:64:bf:d3:80:7d:eb:a7:4e:86:05:e9:f0:6f:
                    0b:59:43:99:e3:1b:f2:a4:6d:02:55:f5:5d:39:60:
                    f6:91:1f:fa:96:44:9a:f5:ce:1d:c6:7b:ee:6b:fa:
                    fa:e7:03:0f:6f:41:11:4e:a7:9a:30:a1:34:59:e5:
                    e3:05:37:75:de:9e:d1:55:4f:3c:9d:f3:b3:46:b2:
                    ce:bb:cd:6e:9f:5f:80:fe:8b:23:86:b0:ec:bd:2a:
                    5b:8d:38:12:fe:ad:10:f5:b4:54:97:fa:43:70:63:
                    a4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:23:DE:BB:26:07:06:BE:FC:CD:65:84:4D:FD:F6:AD:68:57:22:09
            X509v3 Authority Key Identifier:
                keyid:3D:94:DF:65:A3:BD:DD:FB:55:60:9F:18:50:E1:49:F8:2B:EA:78:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZTfZaO93ftVYJ8YUOFJ-CvqePc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/da9c62-8e16-46df-be2b-06b9ed99f16c/1/PZTfZaO93ftVYJ8YUOFJ-CvqePc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:3e:cf:8a:68:9f:0d:1b:5c:6f:86:24:e2:be:9b:c7:91:15:
         db:8b:9c:21:c9:bb:83:68:5b:f3:27:00:7b:05:bc:36:89:b6:
         59:e4:a6:cb:12:07:f7:6d:5d:c8:14:1d:66:95:36:d4:09:79:
         79:5b:25:d3:73:84:60:62:ad:04:e5:44:68:27:2c:68:31:58:
         34:e0:39:49:f9:4b:91:72:a7:30:5c:00:09:82:6a:50:90:2f:
         bc:99:19:1e:d4:0b:be:dd:78:39:51:8d:5f:ea:f1:9e:e9:50:
         91:6c:1e:22:31:25:c0:55:d6:61:29:8d:71:ef:10:2f:54:aa:
         7a:84:0b:bb:5c:18:6a:3a:c7:7c:3c:ae:f0:80:71:6b:ed:23:
         7b:51:0a:33:15:9f:a1:78:9f:ef:72:35:24:9e:00:69:45:81:
         df:cc:cd:c2:0e:d8:96:e8:79:17:38:62:c9:30:9a:42:7f:fa:
         b0:e1:22:80:3c:bf:4d:b5:e3:ce:fd:9a:62:36:48:0f:94:d2:
         ae:63:06:03:bb:89:cb:6f:69:11:71:87:e3:95:ed:3f:e0:ea:
         0a:3d:54:91:c3:6e:d7:cf:f4:1f:ac:71:cf:a3:ca:22:e5:f2:
         90:49:74:d2:aa:18:5a:0e:76:17:9a:04:11:ca:79:e4:1e:d5:
         49:b5:1e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----