Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
File:                     P1amMzFVLvkdigAFozjsmC3zfIs.mft (raw, json)
Hash identifier:          t8oesRQB2+MqE5Zn60kiIqrIA1bv8/ytG35KHPDQolQ=
Subject key identifier:   14:F1:65:0C:F2:DB:AF:CE:EF:D5:E9:A1:BC:43:E5:79:1A:E5:B9:65
Authority key identifier: 3F:56:A6:33:31:55:2E:F9:1D:8A:00:05:A3:38:EC:98:2D:F3:7C:8B
Certificate issuer:       /CN=3f56a63331552ef91d8a0005a338ec982df37c8b
Certificate serial:       01962E2ACCEB22BDB97305DCFF59A0810E62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft
Manifest number:          0EF4
Signing time:             Sun 13 Apr 2025 08:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:18 +0000
Files and hashes:         1: P1amMzFVLvkdigAFozjsmC3zfIs.crl (hash: QHnsQ8Ds8Z4xCPqMtI/p411G+AgB7OUKI5POFlrpXA8=)
                          2: i_E14tU_jnnkTSG9INpa9JShg9E.roa (hash: ZqQOvQcYLRY+mr+wSPe0ltP607X6tGik7hBPTVxfXqk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:cc:eb:22:bd:b9:73:05:dc:ff:59:a0:81:0e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f56a63331552ef91d8a0005a338ec982df37c8b
        Validity
            Not Before: Apr 13 08:01:18 2025 GMT
            Not After : Apr 14 08:01:18 2025 GMT
        Subject: CN=14f1650cf2dbafceefd5e9a1bc43e5791ae5b965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6c:9c:c9:81:0e:34:29:53:ec:d0:53:ae:9b:
                    f1:95:c3:19:19:26:6d:da:50:c6:95:f7:2a:28:b0:
                    b0:cc:0a:8f:9b:9b:e1:c1:a6:78:30:2b:c0:9d:e7:
                    a4:a9:6c:1e:d8:57:b1:5b:8f:28:50:a3:1e:0c:63:
                    d8:2e:2a:f8:08:21:70:2e:89:38:6b:ec:1c:46:8a:
                    97:e0:f6:b6:3d:7c:cb:3b:fc:a9:01:88:58:44:57:
                    65:3b:c3:da:a7:3e:3b:6d:9a:ed:8e:3b:87:77:cd:
                    0d:23:76:d0:ec:45:8d:d8:7f:6c:0f:21:e2:a9:96:
                    a2:ba:97:94:61:51:2a:aa:ff:60:c4:45:35:30:dd:
                    32:77:c7:ac:fb:41:c7:97:3e:63:ac:dd:18:12:5f:
                    d9:4a:11:0c:f1:11:d9:32:8d:17:1b:ac:bb:45:4f:
                    30:ca:e3:74:5f:17:57:78:a3:68:d1:2a:3d:94:05:
                    a0:f5:69:d5:ee:a6:89:d4:8a:15:31:a9:61:1e:04:
                    84:cf:5f:e2:38:50:6b:81:f9:ba:68:6d:91:01:09:
                    e0:16:00:39:d9:75:53:95:7f:0d:2e:30:13:57:55:
                    2d:d4:d5:ee:8d:de:39:6d:c1:b5:ef:6c:c3:a9:9c:
                    6e:00:d0:e1:4b:80:19:1d:34:6d:20:5c:77:cc:9c:
                    65:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F1:65:0C:F2:DB:AF:CE:EF:D5:E9:A1:BC:43:E5:79:1A:E5:B9:65
            X509v3 Authority Key Identifier:
                keyid:3F:56:A6:33:31:55:2E:F9:1D:8A:00:05:A3:38:EC:98:2D:F3:7C:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P1amMzFVLvkdigAFozjsmC3zfIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/2b179c-2d2d-4423-b6d6-b0837a7d4641/1/P1amMzFVLvkdigAFozjsmC3zfIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:26:11:c7:95:c3:3e:eb:29:6c:ba:5e:cb:8b:12:96:3c:6e:
         92:8d:5a:fa:47:8e:c8:5d:d2:79:13:bb:8d:1b:4c:eb:93:bc:
         b6:97:68:30:8b:cd:d3:35:b2:09:31:e5:06:a7:99:e8:b0:8a:
         e0:0a:ab:39:ca:4c:90:dc:9e:d0:15:fa:b5:93:21:3c:ac:62:
         5d:a5:7a:31:89:95:e1:d6:c3:64:41:91:1c:56:82:29:ad:37:
         7e:b1:d0:23:dd:37:44:f7:8d:bd:5b:2b:28:4f:d1:a6:b0:67:
         e6:53:27:8f:77:46:a3:96:7d:d3:02:c6:3f:c3:59:22:ad:75:
         38:d1:3d:64:97:ee:c0:51:da:cb:41:72:b0:24:a5:6e:b4:47:
         23:0b:e6:6d:9b:e4:a1:bc:82:6e:8d:30:e9:53:ef:8a:09:41:
         b3:de:97:65:dc:7a:b5:4b:ed:c9:7d:37:49:9f:5f:26:02:74:
         9c:97:0e:b4:22:fd:d1:7c:87:d2:b8:86:26:da:a1:bb:32:2d:
         9c:3a:79:41:16:cf:a9:40:25:bb:14:6c:87:4c:56:70:60:13:
         83:86:e9:ce:15:bf:6e:54:8e:2e:59:ae:c1:4d:e6:90:68:82:
         ba:c6:e8:06:79:60:2e:6b:29:b7:b1:c8:df:d4:5d:28:7d:0c:
         1d:d2:cc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----