Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
File:                     P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft (raw, json)
Hash identifier:          GglfiJI//9cWq4fzZdFqIwvk4dfRjCI1PTaR8pnk4vc=
Subject key identifier:   8E:2A:BE:85:76:FC:CC:E1:F3:74:23:B0:10:70:A4:CC:E1:96:46:52
Authority key identifier: 3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA
Certificate issuer:       /CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa
Certificate serial:       01962E61ED68A13C47E545D045FD155D1E6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft
Manifest number:          146E
Signing time:             Sun 13 Apr 2025 09:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:31 +0000
Files and hashes:         1: P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl (hash: ilP4fuHd6yxVsvrpPkP0SqP5yNZcive8W7dNmkzBcZU=)
                          2: dfyn6nhNR8JQy6SGJlUvEZfvkyM.roa (hash: k281u51pv38AcL8abAJjlmfLN2hampMY0v32cElp30w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ed:68:a1:3c:47:e5:45:d0:45:fd:15:5d:1e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa
        Validity
            Not Before: Apr 13 09:01:31 2025 GMT
            Not After : Apr 14 09:01:31 2025 GMT
        Subject: CN=8e2abe8576fccce1f37423b01070a4cce1964652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ec:11:41:e1:d9:b8:f5:42:0d:b6:b8:6e:60:
                    ae:b0:e6:c9:e5:40:0c:a2:c5:45:ab:96:41:53:34:
                    cf:65:9f:99:b3:ad:15:87:4f:27:c5:30:06:c4:9a:
                    fc:2d:64:a1:75:db:79:5e:93:3b:52:b1:a6:66:fa:
                    d4:a9:ac:f0:82:1f:45:2a:17:04:7f:b1:1d:a5:a2:
                    16:30:fa:c6:d1:11:fe:5a:40:ce:d6:29:74:85:fd:
                    28:d0:04:b4:17:8a:ca:01:ad:13:3c:a2:fb:3d:35:
                    dd:87:29:44:c0:01:70:e1:06:71:27:14:f1:b4:25:
                    1f:10:c6:27:ff:b4:45:59:16:9e:45:3f:fb:70:28:
                    5d:a1:ad:60:c4:df:92:eb:51:64:e8:9c:25:e7:83:
                    aa:3e:26:ba:6e:38:7e:f3:20:1c:d4:fc:f4:f0:9b:
                    f5:4c:27:09:23:32:c8:a0:67:d4:95:93:bc:1b:bd:
                    b0:05:7d:a9:fe:66:05:21:37:55:21:7f:b4:4a:da:
                    6b:59:4e:1c:14:54:8c:2b:e5:ff:50:34:b5:9a:59:
                    72:b9:80:70:5f:3e:c7:8b:fb:64:e1:67:09:31:d9:
                    33:c3:e0:3f:e3:df:7d:2b:44:d5:4c:77:97:15:79:
                    38:88:82:35:4e:dc:04:4d:6e:d8:56:1a:58:e0:e5:
                    af:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:2A:BE:85:76:FC:CC:E1:F3:74:23:B0:10:70:A4:CC:E1:96:46:52
            X509v3 Authority Key Identifier:
                keyid:3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c5:84:5d:9c:40:88:ee:f0:fb:ed:93:06:cb:7e:6e:21:c0:
         59:d3:d1:00:a0:17:c8:80:54:f1:70:55:f9:b5:6f:65:5a:5b:
         ad:6e:b5:99:83:92:1e:55:a7:28:d5:99:67:b4:ff:f8:54:64:
         33:d2:55:1c:9d:87:53:d4:9e:5c:d8:bf:66:c9:47:91:2f:bf:
         70:54:71:ca:06:65:8b:99:73:2b:93:5b:e5:d5:01:b6:cd:8b:
         9a:dd:cb:4c:a1:e4:26:d6:ad:f0:47:36:bc:41:1b:29:d8:72:
         b5:c3:d1:d2:50:49:48:e8:64:b5:92:3c:d8:2c:94:40:a5:86:
         6c:7b:03:48:46:88:13:59:8f:a3:1d:cb:dc:3d:05:c7:a2:79:
         63:f0:19:ae:b3:07:68:09:4a:98:3e:34:52:25:c9:47:56:5b:
         67:11:c8:79:1c:e9:f8:d7:7f:22:5c:32:74:b3:c8:bc:57:16:
         94:a9:5a:57:88:28:6b:0f:39:9f:ef:0a:bf:f8:26:e0:6d:82:
         9d:66:63:81:54:7e:1d:1a:2a:de:53:2c:d4:16:a8:93:c0:4b:
         4b:dd:48:19:4d:3a:3a:e2:7d:a6:fa:2b:07:af:3d:8c:ba:65:
         c1:cc:a8:0a:fe:3e:6e:c8:94:2d:4a:9a:f9:13:d4:4f:18:22:
         24:b2:f6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----