Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft
File:                     Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft (raw, json)
Hash identifier:          zgArMzKwnRxZy1VmxTMRHO415vGRXjLaMVaS/45NQ6Y=
Subject key identifier:   4E:07:75:5E:62:CF:DE:6D:8A:EC:D2:5A:0C:F4:84:B4:CE:22:35:46
Authority key identifier: 3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F
Certificate issuer:       /CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f
Certificate serial:       01962FAB4E7DAF3C6EB282FB9C2C0709704D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft
Manifest number:          0EE8
Signing time:             Sun 13 Apr 2025 15:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:17 +0000
Files and hashes:         1: 3jkyEgeUwHuLrsjz6T_ObqcY74c.roa (hash: JoJ/5W4dG3D9w6kILiihWs6cJdsEqCFWaxmLM7gkMSI=)
                          2: 5BBAqb-ZPpAIYao4Vwv4C7kYHp8.roa (hash: zeVZxVXoVg6CA4xU6hMT88LFhpR/jzGOghHaqJNZWX0=)
                          3: Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl (hash: BB7B/b3jsRHajWxbdD1nCgqeyhvTykYRtIv5t0/UZK0=)
                          4: c_VdOA86HAho8DyTOmnwSwlTlAk.roa (hash: 850TFYirePJY29VuqkCG/JWWe8g21qbj4etquhKOEz8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4e:7d:af:3c:6e:b2:82:fb:9c:2c:07:09:70:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f
        Validity
            Not Before: Apr 13 15:01:17 2025 GMT
            Not After : Apr 14 15:01:17 2025 GMT
        Subject: CN=4e07755e62cfde6d8aecd25a0cf484b4ce223546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:35:62:dd:c8:e0:84:10:8f:57:a0:e5:4b:d9:
                    c0:d3:b4:a3:be:5a:49:ad:fd:31:af:b5:1c:42:32:
                    41:cb:33:10:d9:06:d0:fa:0a:43:98:ab:51:fd:60:
                    27:9b:bf:c1:a7:27:84:20:16:b9:42:bf:96:49:0e:
                    0f:cf:a7:84:41:8b:22:2d:2c:2d:64:9e:ce:0e:f8:
                    4e:6e:31:c7:71:b4:7e:9a:cc:72:4a:d4:be:51:66:
                    a5:05:ca:49:45:42:36:34:e7:e1:be:48:88:8e:4f:
                    cc:bc:bc:fb:44:72:1d:38:32:1d:00:b2:4f:e1:92:
                    b7:49:7d:88:e6:74:68:6b:de:a0:f7:a3:2b:eb:89:
                    6d:b7:d0:ca:6f:30:a4:60:ff:e2:14:9b:74:b5:b0:
                    cc:b5:dc:96:3a:5e:cf:21:98:b5:6f:0b:2a:40:65:
                    76:36:fa:29:69:3e:68:9b:f8:ad:15:0d:f1:64:f5:
                    88:76:81:f4:ae:e1:01:7d:25:60:27:5c:0b:d7:70:
                    76:a9:0a:ea:11:2d:60:6f:c8:1d:c3:67:b1:40:31:
                    b4:92:d9:f0:f4:91:c7:a9:c5:58:1d:bd:0a:28:a5:
                    60:87:9d:a0:fd:f2:ee:4d:8e:01:27:ca:be:09:97:
                    0a:6d:0e:18:3f:9f:f8:a5:b9:9e:70:5d:af:03:df:
                    64:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:07:75:5E:62:CF:DE:6D:8A:EC:D2:5A:0C:F4:84:B4:CE:22:35:46
            X509v3 Authority Key Identifier:
                keyid:3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:14:6f:0d:64:8d:6d:cc:82:53:22:65:57:6f:a8:28:f7:51:
         53:bc:d0:c1:2b:dd:30:6d:63:1f:21:b0:4c:22:0f:ed:d3:89:
         f5:99:07:78:23:b0:67:ee:ff:73:b0:c1:6e:80:76:0d:ce:45:
         f6:54:3c:a3:b1:1f:72:e6:c7:fb:5f:5c:8f:3e:50:61:d9:9c:
         42:24:fb:7a:d0:47:0d:2b:af:09:7e:8e:fa:af:ef:56:dc:ca:
         7e:1e:87:9a:2d:c1:a1:02:29:91:b1:07:79:f3:72:05:1c:7c:
         5e:e8:46:1e:a5:c5:f7:97:88:55:9c:37:62:d1:7a:58:2c:65:
         68:01:aa:ef:5f:79:68:91:27:5f:6e:a7:ca:ac:40:ea:9b:4a:
         91:cf:36:bd:cb:c7:b3:c6:76:dd:03:d9:1c:7a:c0:52:e3:69:
         ff:a0:43:af:7f:7b:20:e2:06:cf:b0:91:1c:ec:59:72:ef:76:
         a8:8a:9c:20:83:8e:23:9b:50:11:3c:76:6f:f4:71:da:bb:f5:
         5c:79:a9:c2:ce:53:f1:d3:72:2e:75:49:2e:ae:ba:84:65:b3:
         1f:13:91:56:28:bf:54:6a:92:24:90:23:47:4c:09:ac:3c:f4:
         32:6c:c3:78:f6:59:6a:eb:0e:75:12:01:03:bb:81:fe:73:a6:
         4d:c6:fb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----