Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
File:                     PDULqC8_61ruKJOPvxsJweL9GbQ.mft (raw, json)
Hash identifier:          T6KscQTeXi7EzkVPBj6SG//zRZNlSNiJQaEYTSJWCNo=
Subject key identifier:   07:65:9C:7C:72:80:5F:C1:42:A4:1D:0F:31:D9:AB:18:44:5C:6F:4B
Authority key identifier: 3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
Certificate issuer:       /CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
Certificate serial:       01962DF3D89CA63809D1FB728C2CA7A0A6C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:17 +0000
Files and hashes:         1: 1-Csr3W7RFkTtbpc5vegpM0x3SJg.roa (hash: OEps/3ayuoO5bERjIwyI74TPDpt1ijmiHI+Ru4dOW1I=)
                          2: PDULqC8_61ruKJOPvxsJweL9GbQ.crl (hash: s0xiLXC6PkFLiixCFAOH1BPFpInVp6aoo78M83/uzHk=)
                          3: aI9PtDrL1wGCUURcBpHMKfTf4hE.roa (hash: 4oSaxJpQHFX+hBtLYICwFPgrE4wCzYMHUMuoAxfYBXE=)
                          4: j6dQ2cjzXA3192uDTyOAiZGLE8Q.roa (hash: b9/CxQNUb4cLntaVBU/KEYsxwEObm97HgDwZmznQiH0=)
                          5: jyPlSfMwE97ShJiNEree4W-YnKc.roa (hash: RPRkI69AUdx22PSRgMKu/d39p+trzoeOCprFB1jyo6s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d8:9c:a6:38:09:d1:fb:72:8c:2c:a7:a0:a6:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
        Validity
            Not Before: Apr 13 07:01:17 2025 GMT
            Not After : Apr 14 07:01:17 2025 GMT
        Subject: CN=07659c7c72805fc142a41d0f31d9ab18445c6f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2a:09:fc:9b:45:64:1d:46:0b:32:82:81:01:
                    22:26:bd:22:34:c7:a2:65:fc:aa:0b:7f:3d:fc:37:
                    0a:a6:11:aa:04:bb:b2:4b:92:dc:3e:5b:9d:7e:da:
                    d7:6f:93:bb:db:4f:e7:a3:eb:d2:f7:c7:df:7c:c0:
                    36:c2:77:10:10:0c:66:5e:6a:7a:1c:2f:a5:03:1b:
                    3c:30:af:f2:12:6e:e7:92:cd:0a:0e:e6:46:ab:29:
                    21:17:e0:c4:5f:72:e5:f6:bd:d6:31:a7:3c:87:f1:
                    6c:5e:05:25:4c:8b:cc:9e:a3:63:16:8c:74:e7:9f:
                    32:22:83:88:31:54:a0:7b:86:ee:2a:b7:19:ba:b3:
                    c1:bd:92:a7:76:3c:d8:52:49:08:74:70:8b:88:47:
                    ae:9e:7a:69:c8:71:bf:d4:33:70:98:dc:85:8c:6a:
                    c5:8b:09:4e:82:a4:9a:21:b8:61:cd:30:bb:1c:02:
                    08:a0:4a:c4:49:9e:ad:c8:de:89:2d:6f:a3:e3:82:
                    93:fe:2c:7b:57:cf:8c:ff:0d:30:77:83:47:b6:da:
                    90:c4:13:e6:a8:be:af:e9:aa:cb:ec:8d:d2:ee:c5:
                    bf:aa:ec:1a:7f:da:08:06:63:a7:d0:fb:b5:40:6a:
                    b8:3b:b4:64:1f:bf:5f:56:3b:fe:c0:42:9e:dc:78:
                    d2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:65:9C:7C:72:80:5F:C1:42:A4:1D:0F:31:D9:AB:18:44:5C:6F:4B
            X509v3 Authority Key Identifier:
                keyid:3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:41:88:bf:9d:e5:9f:59:04:86:59:2e:57:34:dc:63:6a:ab:
         08:10:a5:13:72:4f:f1:89:4c:e9:e8:10:9b:f7:81:4c:c8:f6:
         14:ce:5e:f9:82:06:6d:36:df:10:62:32:4e:e8:82:ef:90:91:
         4a:1b:91:57:fa:6c:fa:c7:7e:42:db:5c:20:a3:50:09:fd:2c:
         da:e5:df:ce:0d:3b:64:14:8b:86:92:82:bb:55:0d:b1:46:50:
         17:35:a1:d4:e9:35:0d:79:a1:e6:0c:b2:32:a5:6a:d1:e4:68:
         ce:ee:96:0d:e7:a7:f5:8f:5c:f8:5e:99:8d:44:13:65:51:cb:
         c4:a8:13:53:b1:67:21:9d:27:5d:2d:cb:dc:c3:40:1f:ac:1a:
         c2:22:0c:3e:9e:7c:d3:03:99:e3:ae:4b:36:81:fd:f5:7b:b4:
         49:bd:72:d0:a6:a9:72:bc:23:e9:ff:50:d9:20:bc:08:8c:d6:
         94:f8:12:ca:9d:52:f3:a6:27:0c:c2:71:f6:90:7f:8b:d3:29:
         e8:57:ff:8d:95:43:18:55:1a:ad:55:42:de:e2:bc:96:cd:ef:
         65:8f:17:d7:9a:ad:bc:cf:63:1b:ad:73:2e:28:7b:72:ff:d8:
         4f:a8:74:08:fb:c0:25:ec:c0:fc:97:88:76:1a:3d:71:d4:0c:
         36:f7:c5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----