Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft
File:                     pzfikBac_OajOKZrykXP5jXRVEY.mft (raw, json)
Hash identifier:          SfTtKYcVI24XecJfYz/KaWYOO4CZK2Dr+A8KTK5Y2k0=
Subject key identifier:   1B:31:AE:77:C1:93:01:DC:49:49:D6:71:43:25:9B:27:55:E3:47:3B
Authority key identifier: A7:37:E2:90:16:9C:FC:E6:A3:38:A6:6B:CA:45:CF:E6:35:D1:54:46
Certificate issuer:       /CN=a737e290169cfce6a338a66bca45cfe635d15446
Certificate serial:       01962F06E34553BAA78409AC2552948020C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pzfikBac_OajOKZrykXP5jXRVEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 12:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:42 +0000
Files and hashes:         1: pzfikBac_OajOKZrykXP5jXRVEY.crl (hash: 2nUpwbUPsWsJDRi423tik68/GLitY3oirevC06wBFwI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e3:45:53:ba:a7:84:09:ac:25:52:94:80:20:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a737e290169cfce6a338a66bca45cfe635d15446
        Validity
            Not Before: Apr 13 12:01:42 2025 GMT
            Not After : Apr 14 12:01:42 2025 GMT
        Subject: CN=1b31ae77c19301dc4949d67143259b2755e3473b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:27:04:98:fe:3f:52:fc:21:3d:6b:68:07:12:
                    d3:6d:4b:e9:7f:b4:ba:d2:fb:fd:5d:28:91:99:bd:
                    40:ac:7c:a1:1c:e5:fa:76:d7:c7:78:c7:46:c1:ce:
                    3c:f2:61:57:27:4e:3c:04:be:eb:59:48:c0:e2:d3:
                    6d:75:30:63:1c:75:54:7f:25:32:b2:39:45:97:2c:
                    f4:91:9a:81:89:77:2b:e1:44:03:62:70:41:8d:77:
                    20:fb:7d:5e:f9:bc:8b:ed:63:b2:b5:aa:fa:77:37:
                    9a:cc:f1:72:ff:6c:01:dc:97:5a:72:ac:6f:52:07:
                    84:80:4f:3e:c6:ff:ec:66:3c:12:82:43:2d:57:72:
                    a3:e3:a9:8b:c6:d6:fc:3d:05:91:b4:5a:8c:f5:8f:
                    64:38:ec:11:a2:48:83:8b:da:7b:43:69:5d:5f:f6:
                    e6:79:9d:48:73:15:6f:32:e0:9b:ad:b3:fa:15:e6:
                    14:51:94:4f:33:ea:36:3e:17:c0:43:41:af:45:ac:
                    cf:f6:6d:64:21:2e:94:65:79:de:4b:3d:10:3f:f2:
                    ec:2d:e7:1e:31:b1:55:59:ea:24:a5:60:eb:33:fb:
                    f9:fc:f4:d8:f6:db:30:6b:1a:6c:17:13:10:1e:32:
                    1b:51:7e:81:6e:d8:a9:23:90:bc:da:63:08:47:90:
                    8b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:31:AE:77:C1:93:01:DC:49:49:D6:71:43:25:9B:27:55:E3:47:3B
            X509v3 Authority Key Identifier:
                keyid:A7:37:E2:90:16:9C:FC:E6:A3:38:A6:6B:CA:45:CF:E6:35:D1:54:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pzfikBac_OajOKZrykXP5jXRVEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/afa9af-fe5e-4023-ac0f-76d267a2489d/1/pzfikBac_OajOKZrykXP5jXRVEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:68:4d:e3:3a:5a:ab:61:64:d7:d2:e6:96:a6:e4:29:db:f5:
         4c:45:a8:6b:aa:94:b3:c1:df:ad:b5:aa:7d:c7:dc:d0:0e:11:
         17:a9:2b:c0:9f:61:81:3f:da:2e:bf:83:5c:c3:65:f8:e5:74:
         e1:a1:8e:37:ec:64:41:ab:ce:7b:af:5a:3d:ed:eb:bd:85:ac:
         bd:72:44:85:ff:fa:6e:2e:d9:7b:0b:f1:57:97:d0:0b:f6:1b:
         3c:f6:0b:17:dc:9b:71:5e:45:9b:59:41:6f:00:ed:61:a0:09:
         58:51:eb:74:fc:71:02:2c:1a:8a:c9:09:c4:86:58:d7:de:d6:
         88:7a:65:d5:39:e7:1b:c3:a9:99:ff:32:b7:25:df:69:d2:f8:
         e7:e3:5a:79:14:b1:9c:60:24:4d:a1:78:f0:c8:c8:25:83:35:
         d7:96:2c:c9:af:05:6a:6b:b9:74:4b:06:3f:d5:84:81:75:d0:
         7a:ea:d5:9f:57:59:bd:4c:21:29:f3:53:37:2c:3d:b6:f3:0a:
         58:57:b3:90:99:5c:b3:20:7f:86:97:8c:93:db:f2:c1:64:4c:
         7f:f2:b9:e2:9a:38:71:d0:19:b2:70:cb:65:91:11:29:9c:cf:
         3d:bc:1d:43:33:2d:4b:b5:bf:7d:c4:38:2e:b6:84:af:b0:bc:
         4c:1e:f1:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----