Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
File:                     PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft (raw, json)
Hash identifier:          FXOppxdj+gZE6E76LEDmFJHhitNlerzNZ9AVqw8dO/g=
Subject key identifier:   2C:F6:DC:21:CD:0D:8F:ED:67:D3:FA:C9:73:C2:28:7F:99:33:94:C1
Authority key identifier: 3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4
Certificate issuer:       /CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
Certificate serial:       01962F746597A38484AE1CA453D04A4AE94E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft
Manifest number:          02A6
Signing time:             Sun 13 Apr 2025 14:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:19 +0000
Files and hashes:         1: PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl (hash: mxjrBloAJ5yKkzqGTrIfhzXOS/IDBpUTJgkAqwyOcTc=)
                          2: UTJEyA5eoUQbkVsnzE_qVEPp7QI.roa (hash: QLgDwiA3HQMhzQTCpM1sPvRtSa6KhJD7pUZz4AfYcjY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:65:97:a3:84:84:ae:1c:a4:53:d0:4a:4a:e9:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c87feb4ab9a57765fc0a664572c35032e866ad4
        Validity
            Not Before: Apr 13 14:01:19 2025 GMT
            Not After : Apr 14 14:01:19 2025 GMT
        Subject: CN=2cf6dc21cd0d8fed67d3fac973c2287f993394c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:54:97:13:d6:7b:ad:93:fd:8e:7a:1c:3a:c3:
                    fa:13:99:05:a8:58:37:15:6e:cb:9a:70:fd:5c:a9:
                    19:50:e8:7d:85:23:a5:00:c9:ba:27:5b:2d:5f:c1:
                    6d:da:df:0f:7d:bc:71:e2:57:5d:b3:3a:f3:e6:72:
                    b5:00:b1:05:40:67:82:3b:76:20:81:1c:28:92:5e:
                    45:ca:1a:c2:ad:a1:bc:c3:7b:a3:c1:ab:34:9f:c8:
                    11:11:29:70:dc:48:80:b0:b8:d9:05:4a:f7:46:ae:
                    09:84:f6:ee:7e:5e:8d:49:5c:73:4e:cd:74:43:38:
                    99:0e:d5:0b:94:f5:73:ff:00:96:80:71:96:e2:f8:
                    d7:0f:0d:02:7f:89:9f:27:c3:fd:ec:f5:bf:2e:37:
                    a3:73:9e:d4:25:61:36:fe:b7:4b:76:75:18:3a:d3:
                    e9:42:24:7f:cc:ed:37:e0:f7:74:71:21:57:ac:63:
                    c6:fa:96:54:a4:c2:ff:30:3b:f7:17:51:86:65:45:
                    80:6d:e7:e3:1c:d8:35:06:fa:eb:bb:e5:98:b1:8a:
                    8f:32:d3:b7:42:ff:0f:dd:d6:a0:7c:d6:a5:9f:d4:
                    d9:7d:f1:3b:58:82:7e:31:5a:1a:24:3d:e8:50:f8:
                    e0:02:a5:c2:40:cf:e4:05:dd:c1:f1:2f:db:c6:49:
                    39:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F6:DC:21:CD:0D:8F:ED:67:D3:FA:C9:73:C2:28:7F:99:33:94:C1
            X509v3 Authority Key Identifier:
                keyid:3C:87:FE:B4:AB:9A:57:76:5F:C0:A6:64:57:2C:35:03:2E:86:6A:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e41a6-d845-4da1-8b34-48fb00fc97b6/1/PIf-tKuaV3ZfwKZkVyw1Ay6GatQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:03:84:33:ba:de:f6:13:39:40:78:04:33:ef:6c:82:5c:b3:
         7b:77:a6:ac:27:e4:4d:18:0d:ed:8c:97:5b:62:eb:5c:52:ba:
         35:5a:9c:c5:31:d7:9a:3f:41:13:b2:e3:fa:8c:bc:65:2b:78:
         3b:b1:a2:ed:26:48:e0:ba:82:9a:db:8a:d8:e2:50:35:99:fd:
         0c:64:2a:2f:ce:6d:9a:7d:6e:37:ab:c5:ff:ab:59:05:15:8f:
         b7:a4:92:1e:68:cf:19:86:bf:d3:8e:ce:c4:ea:12:3e:7e:d4:
         c9:fb:89:a9:08:83:3e:ef:93:a3:ac:2a:4b:06:54:fa:79:6c:
         65:a2:b4:4a:63:43:09:6c:81:2e:22:9d:17:78:05:55:5b:3b:
         2b:4b:18:64:27:b1:0e:0b:d5:1c:5a:b8:7e:3f:c4:3c:fb:c6:
         60:0a:e5:08:c9:c7:a4:e7:be:1b:78:37:a8:31:40:70:0e:b7:
         72:4b:10:45:dc:d5:2e:6e:cb:a6:ef:d3:8c:2d:27:a1:47:73:
         ff:e7:b2:3d:71:4b:a9:b5:fc:4f:90:f4:f9:04:19:d3:9e:09:
         12:40:a0:12:6a:a1:53:fd:c2:cd:ff:55:db:61:0b:3b:36:2c:
         d3:7d:9a:84:f7:7c:70:a9:14:d4:6a:a1:10:21:c1:e7:7e:38:
         14:c7:2e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----