Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
File:                     pPP3bj7O8kl-ET6ju664U_YvWP4.mft (raw, json)
Hash identifier:          6ujPlgm+qFoDRN90dwmmlSgPwrx9a1dv7O2+O6QBzMo=
Subject key identifier:   72:B2:AC:3A:5C:DF:E9:68:EF:8F:DF:77:07:21:EF:32:EC:BB:BA:2B
Authority key identifier: A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE
Certificate issuer:       /CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe
Certificate serial:       01962F74CD0585353F22C6F113859B1644D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft
Manifest number:          0B7F
Signing time:             Sun 13 Apr 2025 14:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:45 +0000
Files and hashes:         1: 66ywR3ba4enexaVdWoqndnOvp4U.roa (hash: Qkz3r6su/bj0dLkhbVaX1i/95TsjjuS65tg9qxOjli4=)
                          2: pPP3bj7O8kl-ET6ju664U_YvWP4.crl (hash: AthKGRE2yA/lYsbFpSDqdGCKIIgmnruB4R+oH4N9/gs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:cd:05:85:35:3f:22:c6:f1:13:85:9b:16:44:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f3f76e3ecef2497e113ea3bbaeb853f62f58fe
        Validity
            Not Before: Apr 13 14:01:45 2025 GMT
            Not After : Apr 14 14:01:45 2025 GMT
        Subject: CN=72b2ac3a5cdfe968ef8fdf770721ef32ecbbba2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4c:71:68:fd:4b:d0:b0:81:d6:f9:63:94:d0:
                    a0:52:9d:72:cd:c3:73:71:89:27:2f:b1:b5:0c:1b:
                    96:ec:4c:14:12:27:e1:f7:6d:6b:35:37:09:3a:60:
                    c3:d3:2f:ce:be:3a:12:6b:31:1f:6d:6d:69:70:fd:
                    a5:94:52:12:31:b2:33:fb:ea:74:0c:1c:6a:53:6e:
                    f3:2f:25:51:48:64:9c:0f:f5:1e:f8:f5:0a:8d:8a:
                    d0:d1:d2:c8:f7:ab:90:54:57:d6:c1:85:cf:d1:16:
                    cc:5d:37:53:40:c9:db:84:52:b6:00:86:bc:ca:eb:
                    f9:b0:b8:48:c5:1a:44:53:1d:01:a8:ef:82:b0:77:
                    52:61:ff:fb:c3:9b:b1:ec:f3:cb:b4:2e:6a:4d:2d:
                    ba:aa:31:bd:c7:ee:4b:61:34:4e:82:19:9c:cf:83:
                    46:16:5a:d3:8f:35:d1:3f:43:ab:bd:d6:7d:44:e4:
                    25:67:90:44:3c:51:b6:13:3f:d1:18:fb:b5:3b:9d:
                    fa:3f:33:7b:d0:dc:6d:5a:01:a1:56:e2:04:ed:3a:
                    82:3c:05:f5:f2:1b:9a:26:18:80:dd:34:63:2c:7d:
                    91:6e:d1:da:67:1f:9c:67:09:3a:89:90:2a:8f:57:
                    d5:1d:be:94:58:8d:c5:0c:7c:6f:59:12:e4:7c:74:
                    23:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B2:AC:3A:5C:DF:E9:68:EF:8F:DF:77:07:21:EF:32:EC:BB:BA:2B
            X509v3 Authority Key Identifier:
                keyid:A4:F3:F7:6E:3E:CE:F2:49:7E:11:3E:A3:BB:AE:B8:53:F6:2F:58:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPP3bj7O8kl-ET6ju664U_YvWP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6c55a-8628-429f-a2ec-4f2c19bd54d7/1/pPP3bj7O8kl-ET6ju664U_YvWP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:1a:66:67:44:f1:a4:09:ab:4d:36:a1:d4:be:47:4f:f5:c5:
         9a:75:ef:0d:61:ee:7c:5b:06:fa:04:cc:bd:f8:db:86:cf:02:
         76:73:21:5e:64:64:7b:18:bb:6e:01:e9:33:46:a0:01:61:43:
         9b:17:ca:e4:20:17:c9:ec:00:5b:b4:86:6e:ec:6b:8c:2b:7d:
         cb:bf:32:ca:ad:a3:f9:2f:c4:9d:ec:02:9e:21:02:7b:28:8d:
         dc:e7:33:18:de:14:e4:f0:c6:a6:df:a5:7c:92:78:bb:f7:29:
         89:aa:a6:ee:b6:e6:83:67:2c:58:3e:15:c2:e7:07:58:e7:3d:
         0a:81:ac:87:89:3d:62:fa:74:14:b6:50:7d:b1:b8:bf:66:98:
         f6:37:38:c6:f7:31:81:f4:f4:6d:ad:4b:5e:4c:8f:20:5e:cd:
         62:ba:c5:54:4e:9d:83:c2:82:73:3d:32:82:0b:96:b1:e1:cd:
         68:37:f4:1a:50:d3:66:82:fe:a0:15:25:fa:97:8e:13:fc:72:
         4f:5e:3f:38:a2:93:8a:17:68:84:f6:fe:ef:c0:fb:2b:c9:ef:
         26:88:59:ef:ea:07:01:2b:48:db:b8:53:46:13:cf:df:da:85:
         e7:3f:25:72:18:fd:f2:8a:0e:43:4a:8a:b9:3d:6d:47:c6:31:
         7c:cc:7e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----