Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
File:                     PGFL8lfTr3cLvzxsLTW_pGVobOs.mft (raw, json)
Hash identifier:          bIqg0iU/63AgaRyADgHy7gtMyct9b3YXPbuxLssFrHE=
Subject key identifier:   40:76:54:78:C6:BE:F9:A2:EA:7B:03:E0:E9:78:01:E3:5A:2E:49:20
Authority key identifier: 3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB
Certificate issuer:       /CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb
Certificate serial:       01962ECFE63F434E824FA28CAFA2E4CDF900
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:38 +0000
Files and hashes:         1: PGFL8lfTr3cLvzxsLTW_pGVobOs.crl (hash: JH2w1WY8Id0Fmi+SPKpqZBwSRMPk/q/CqibIPuEUDYY=)
                          2: idSC5Hw5WkkMOAbfku6Dkz9XO6I.roa (hash: UXJcLdtFjpO9Edbh8qYFBpHmdjidm11out2Ag90FqaE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:e6:3f:43:4e:82:4f:a2:8c:af:a2:e4:cd:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb
        Validity
            Not Before: Apr 13 11:01:38 2025 GMT
            Not After : Apr 14 11:01:38 2025 GMT
        Subject: CN=40765478c6bef9a2ea7b03e0e97801e35a2e4920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ed:96:c8:82:a5:68:51:ef:7d:2c:17:8d:d2:
                    2b:8a:6b:69:29:67:34:60:cb:91:3c:2d:52:29:73:
                    69:4c:99:eb:59:cc:b7:84:4c:2c:39:0a:4e:e1:f5:
                    d9:29:7e:b0:d7:59:3c:32:61:11:93:88:df:70:15:
                    8d:64:eb:01:7f:9d:e6:71:f9:30:78:b4:a6:7f:34:
                    b5:ce:70:66:35:11:76:64:95:8a:0d:3c:ff:3b:fb:
                    c1:a2:ea:01:f0:c4:3d:e3:60:e0:e3:8d:cb:23:50:
                    59:71:b3:82:32:93:3f:60:e8:ef:65:1a:fe:73:af:
                    01:61:d6:a3:4a:03:6f:10:c1:e3:71:c2:f4:99:a5:
                    a6:26:eb:95:f8:91:f7:06:37:2c:11:0c:56:75:58:
                    1d:89:0a:06:24:6d:53:18:a6:5f:74:91:08:f0:e3:
                    6f:9f:90:fc:64:ee:86:c9:2e:c7:b1:d4:bc:93:56:
                    ef:bb:51:1d:d7:54:b0:c7:53:3c:a8:f9:4d:8e:9f:
                    e2:4d:6b:eb:3e:11:1a:9d:3b:03:3f:15:75:92:e7:
                    cb:2b:ed:a8:ba:b1:30:6c:dd:24:77:9d:ec:63:cd:
                    72:5a:0a:08:2b:46:7d:6e:a6:78:90:eb:07:23:16:
                    10:45:12:c8:c6:e3:0e:96:94:6e:8e:14:39:bd:98:
                    fc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:76:54:78:C6:BE:F9:A2:EA:7B:03:E0:E9:78:01:E3:5A:2E:49:20
            X509v3 Authority Key Identifier:
                keyid:3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:8d:1f:9c:37:80:4b:ea:6b:6f:89:ba:6b:3b:2f:84:da:c1:
         55:8c:05:74:d6:54:7d:95:46:6f:cf:a6:58:1b:d2:34:8e:41:
         25:01:91:6c:5b:ad:49:30:af:ef:24:1e:c1:2f:c9:6e:83:dd:
         22:03:ad:f0:33:d2:e3:eb:7f:9b:6d:3d:26:fb:38:31:c0:23:
         ce:30:91:74:50:2f:a9:ad:09:20:e7:7c:93:73:ad:ec:9f:0f:
         1a:21:55:70:94:f1:8a:76:c2:88:82:f6:5a:7b:b2:27:bf:d6:
         bf:1e:08:1b:0e:29:00:ec:58:a7:1d:f9:c2:12:aa:c5:7a:1e:
         48:60:4b:00:4b:32:e4:25:25:8e:c3:86:ff:3e:df:bc:95:11:
         6e:35:91:cf:f4:eb:26:94:c9:36:77:85:78:4f:2f:8b:ad:62:
         d8:55:25:d3:ca:23:24:2e:78:fe:d1:29:92:68:e8:cd:00:09:
         0d:ae:0d:82:45:95:e1:db:97:1f:44:f4:7f:f6:cc:d2:06:06:
         dd:a0:37:79:8d:eb:68:06:ff:62:bd:be:ce:a6:8a:ee:85:c3:
         e5:e3:51:03:29:ac:a3:ab:bc:dc:b6:08:b1:fc:3b:8d:a0:df:
         66:52:32:7e:6c:21:ea:77:7c:b5:84:d3:42:12:b3:ab:74:ea:
         e9:b4:66:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----