Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
File:                     PeSbGET-RCKvvhDN0oGcdEgnfmU.mft (raw, json)
Hash identifier:          kpLAibXcNXgIYLGruRP8XvSDyUHnTbITE3vKgMRRzQw=
Subject key identifier:   6E:09:49:D8:B4:E9:C4:25:3F:25:FC:8C:82:8A:50:10:B1:D5:58:B6
Authority key identifier: 3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65
Certificate issuer:       /CN=3de49b1844fe4422afbe10cdd2819c7448277e65
Certificate serial:       01962E992A658222FD37349D7523E56062B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft
Manifest number:          0899
Signing time:             Sun 13 Apr 2025 10:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:51 +0000
Files and hashes:         1: Fw_E1L4Nw5Hr77P4PSs-fCdld4o.roa (hash: 02j0pLQbdlE9MH5ggabxr1xIMQYmyzEOYjg+Z13q0BA=)
                          2: PeSbGET-RCKvvhDN0oGcdEgnfmU.crl (hash: 1wXZAM/xruN6yprh2fXuG+jNgi7wBA27o3JaBNDOEaI=)
                          3: VrCXOdxzLdld1tE0j_xLZ92cqsk.roa (hash: QEJHs3sdF5W7Kc4VSrPn7L7Yyup7NDcWYP/rulbrnEw=)
                          4: wbEopCsHgdsUwl85d1p6YVkQyt4.roa (hash: Mueh9tzlM1Esxrp4PnyphjifQnr2qX7ryaFawIufllw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:2a:65:82:22:fd:37:34:9d:75:23:e5:60:62:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de49b1844fe4422afbe10cdd2819c7448277e65
        Validity
            Not Before: Apr 13 10:01:51 2025 GMT
            Not After : Apr 14 10:01:51 2025 GMT
        Subject: CN=6e0949d8b4e9c4253f25fc8c828a5010b1d558b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8a:a6:d9:51:4f:94:8b:fd:0e:09:fc:77:a3:
                    de:d3:f4:69:2d:1d:47:30:77:10:75:33:5e:07:16:
                    b0:21:8b:a6:56:7a:c0:1c:45:87:15:31:51:67:2d:
                    b8:a2:e6:e6:ba:a6:9e:ee:6f:8f:21:64:0e:db:00:
                    47:d0:0f:8e:93:13:7c:1e:d9:d3:6c:ec:2c:25:f2:
                    2b:fd:d1:83:96:89:62:f8:bd:f5:cd:c9:13:40:d0:
                    c1:d1:36:6b:cd:f8:39:fd:d9:c8:62:e9:a4:dd:35:
                    82:98:3e:bb:2a:a8:52:51:4b:c4:18:0c:40:c4:8f:
                    4e:8f:60:6f:f8:ca:6d:08:4d:05:a7:c1:1e:04:c9:
                    f6:07:88:5a:52:06:3c:29:7d:28:f7:81:3b:be:2c:
                    30:86:7c:77:66:be:7c:82:6a:83:92:b1:b0:01:86:
                    ad:f8:67:d1:17:90:69:55:48:49:df:36:de:4b:57:
                    86:e7:b6:ea:2b:d4:0b:0c:28:b9:9b:4e:ca:2d:71:
                    a1:81:e3:af:2b:99:28:3a:3d:17:d4:1b:d2:32:bb:
                    e1:3e:8c:76:86:92:06:14:90:62:18:aa:e7:7a:02:
                    85:05:1f:1d:bc:6e:04:ad:30:35:4b:3e:cf:f7:89:
                    f6:d3:e0:24:1f:1c:a3:42:a9:f3:a9:e5:c3:d2:18:
                    e3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:09:49:D8:B4:E9:C4:25:3F:25:FC:8C:82:8A:50:10:B1:D5:58:B6
            X509v3 Authority Key Identifier:
                keyid:3D:E4:9B:18:44:FE:44:22:AF:BE:10:CD:D2:81:9C:74:48:27:7E:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeSbGET-RCKvvhDN0oGcdEgnfmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/81b188-255d-49c7-9f98-0ac9b4d7eab7/1/PeSbGET-RCKvvhDN0oGcdEgnfmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:97:04:ff:85:a5:75:ed:bf:56:b6:b3:c5:8a:37:39:c9:14:
         f3:f8:74:a7:94:4b:36:a0:5f:2a:69:7a:d9:4b:79:ae:5b:37:
         e1:ae:b5:cb:7b:ea:f0:fe:09:b7:a4:fe:35:23:40:e9:e9:fc:
         67:77:20:0f:8f:62:c6:e0:d8:f0:49:43:cc:e9:72:56:1f:e1:
         5f:33:4a:b2:bb:9c:25:b3:2c:1a:0f:8c:fc:b4:7b:06:84:09:
         32:67:cc:26:bc:99:b8:13:fd:b6:07:1e:b1:07:11:9a:cb:e1:
         53:78:72:e0:8e:04:ae:4c:75:85:af:09:a7:df:b7:0e:aa:4c:
         6d:90:4f:5d:6b:fc:ff:2c:6f:42:da:0b:42:f0:a5:76:24:bc:
         b1:e5:43:a1:97:ae:c3:12:6d:cc:91:a0:2e:a4:b8:b3:fe:57:
         0d:ea:66:30:d5:b0:fb:8d:a5:d3:4a:3d:de:a1:f7:fe:27:8d:
         96:19:b3:04:e1:f6:58:32:8e:ef:55:6a:b5:66:39:5e:0a:e2:
         94:81:b6:37:aa:a9:65:97:c6:6d:54:27:f9:99:bd:dd:28:4b:
         aa:44:e1:0e:89:56:81:a3:3e:64:a7:6a:6e:3d:db:ee:48:38:
         92:bd:7f:9e:37:b4:41:b1:71:6c:fe:94:4f:c3:9b:68:2b:06:
         93:99:4f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----