Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
File:                     PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft (raw, json)
Hash identifier:          uxAGOSTrTq4r92fHIxE+VPxhHENSMRAlWzjfZ/UxL34=
Subject key identifier:   8E:3B:4B:19:8A:8F:C8:78:35:DC:A8:9C:72:A3:6A:AB:4F:4F:B2:57
Authority key identifier: 3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09
Certificate issuer:       /CN=3de4598e21736501a73944c107114c850c7d8b09
Certificate serial:       01962E996879640E8F780A7C58146AEA44FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
Manifest number:          1211
Signing time:             Sun 13 Apr 2025 10:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:07 +0000
Files and hashes:         1: PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl (hash: M+Q6HpR1zFdlsJaG5LsQEkN34GWXc9+xqDAxC4EGZr8=)
                          2: UMngkvwaRjIoN5eBBlFi84sCo3g.roa (hash: a8obNUaAoXy5QpQYwb8sCwj2NbkRTv7ZWZ/OkpJ4CGg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:68:79:64:0e:8f:78:0a:7c:58:14:6a:ea:44:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de4598e21736501a73944c107114c850c7d8b09
        Validity
            Not Before: Apr 13 10:02:07 2025 GMT
            Not After : Apr 14 10:02:07 2025 GMT
        Subject: CN=8e3b4b198a8fc87835dca89c72a36aab4f4fb257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d4:ad:79:5f:3d:56:d3:2d:27:1a:f0:45:e1:
                    c5:dc:37:d6:7b:3f:ee:71:eb:52:a8:38:87:dc:07:
                    59:21:c0:ab:4c:c9:05:87:8a:24:d8:6c:c8:56:26:
                    c5:b4:eb:98:43:14:1c:9a:17:eb:a3:18:af:0c:9c:
                    d9:6d:ba:7c:87:be:0f:c0:7a:90:34:0b:3c:f8:ca:
                    4e:1a:49:05:28:1d:c6:30:d9:d6:d0:5e:7f:97:b0:
                    0f:10:4f:bb:46:c4:97:a9:83:f2:01:3b:87:ff:93:
                    49:eb:b2:ff:ef:40:60:9a:c9:40:13:c3:16:74:51:
                    bd:12:ce:b0:4d:89:c0:6d:41:aa:4e:39:d9:c8:17:
                    7f:fd:15:ea:03:25:2b:f2:0b:d7:53:16:c0:d8:39:
                    1c:ae:44:f3:e2:19:e0:74:ad:db:c9:a7:27:ba:1e:
                    30:cb:b0:bd:6b:05:b3:a6:0e:14:7b:be:d8:aa:69:
                    2b:84:b0:36:30:23:de:d1:f4:9f:dd:ae:09:78:0f:
                    69:5f:88:49:10:3b:81:89:b0:8d:a5:24:18:c8:8a:
                    24:4e:23:06:9f:c8:f6:08:44:35:b6:1e:ff:5b:b2:
                    4e:cf:a3:bf:24:67:f5:fc:24:7f:98:90:69:72:10:
                    4d:07:f2:c1:ea:9c:76:54:07:7b:90:18:40:9a:78:
                    23:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:3B:4B:19:8A:8F:C8:78:35:DC:A8:9C:72:A3:6A:AB:4F:4F:B2:57
            X509v3 Authority Key Identifier:
                keyid:3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:87:01:f5:b9:06:65:a1:e8:20:8f:cd:fc:b9:77:06:af:51:
         2e:26:0a:50:20:2f:54:8b:af:7e:46:ca:bb:24:5b:65:a9:86:
         8e:ea:80:a0:70:86:a5:3b:ec:c8:b7:15:50:8a:6a:6f:2d:34:
         6e:94:2a:8b:d0:d4:23:3f:fc:2b:f6:a0:0a:2d:46:70:58:ee:
         e3:75:18:9d:38:cc:7a:c0:69:41:b1:23:e5:b8:ba:81:99:5c:
         67:66:1e:6a:97:c4:9c:77:8a:15:cb:07:10:bb:ef:8b:17:bb:
         bc:3a:c7:88:dd:d8:34:b7:42:fc:e3:21:2b:95:8b:fa:5b:31:
         ee:b5:ce:22:74:92:af:15:53:3a:87:37:66:98:94:d2:80:50:
         8c:ae:3d:f9:ee:49:20:b9:81:c6:bf:35:b0:97:a4:6e:ad:17:
         de:7c:7d:79:12:02:b9:6d:54:83:15:68:e6:a7:91:86:7b:69:
         82:1e:1d:0c:fa:f3:ac:30:91:83:50:ac:63:52:53:cc:72:fc:
         4d:63:17:63:8f:ae:46:3f:5a:40:7a:90:f9:77:89:8a:75:08:
         d2:48:e9:34:06:83:ef:0b:51:58:c6:e6:2f:16:1c:32:ea:3c:
         e9:c5:aa:6c:ca:39:01:b4:a6:68:19:45:eb:5a:78:7e:06:ca:
         32:f5:e0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----