Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
File:                     PBuDiIaW_ERHjGk9bngD6VFiUOY.mft (raw, json)
Hash identifier:          1HQhG3SU+3vVBmpDcMe1R9YjXJeznrp++n7bNbBlALc=
Subject key identifier:   06:60:98:89:5C:A1:33:20:79:9E:8A:F3:95:BE:CE:A2:A8:74:03:96
Authority key identifier: 3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6
Certificate issuer:       /CN=3c1b83888696fc44478c693d6e7803e9516250e6
Certificate serial:       01962E2ACABC1CC87DD83F67322960E4AE15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft
Manifest number:          0BF8
Signing time:             Sun 13 Apr 2025 08:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:18 +0000
Files and hashes:         1: 1-PRouHcN36iLzwy9uNqLaIiV2X0.roa (hash: 4hehSvfv8sJqIC+vHja2uEOG+73HXBFbIDrIN8bH3vg=)
                          2: 67RGYz7m7xWKzUB6-JO6U9Kw4Oo.roa (hash: Iy7s2Aw6gINY7MrIIhsJrkKAANHoHyCQ2Dm8An5q6ps=)
                          3: PBuDiIaW_ERHjGk9bngD6VFiUOY.crl (hash: IWrkA/sRFtQZ/Ju52HwjYxla+oOSThh9BapFXqSAiUI=)
                          4: rTI3MC_cflVKmz4QHcC39TCJNIM.roa (hash: Gn7Y1Iho0e2nKKiZXGFb+cFXQIXgua4De8STjxaheIw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:ca:bc:1c:c8:7d:d8:3f:67:32:29:60:e4:ae:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1b83888696fc44478c693d6e7803e9516250e6
        Validity
            Not Before: Apr 13 08:01:18 2025 GMT
            Not After : Apr 14 08:01:18 2025 GMT
        Subject: CN=066098895ca13320799e8af395becea2a8740396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a7:b2:2a:a4:40:be:9b:7c:70:25:75:d8:f7:
                    4f:29:ce:06:92:80:27:5c:e2:68:01:2c:d8:fc:9a:
                    11:7b:eb:bd:50:b3:c5:0c:51:aa:c9:04:be:7d:0b:
                    59:64:29:6e:d7:e0:44:2a:22:6f:ef:77:28:0c:27:
                    21:7b:b2:9c:bf:68:79:37:36:05:54:46:ef:0a:71:
                    15:a9:ee:aa:1b:9a:2c:7b:60:59:91:ee:a4:e4:ab:
                    5e:b9:a2:32:ee:88:fc:19:a6:26:6c:b8:f7:30:0b:
                    7c:f9:82:80:51:20:48:4f:d5:70:29:bb:8c:7a:d3:
                    be:41:a7:13:bf:53:40:b7:85:f6:fb:53:50:ca:08:
                    cb:7b:cb:6a:b0:69:b8:62:8b:7d:92:db:8b:e6:2c:
                    45:27:79:7c:2d:a9:22:ec:72:75:2a:a7:71:f6:5e:
                    a1:3a:2e:d4:5a:cf:ae:8c:6a:65:a7:08:17:0b:4b:
                    fc:29:9f:72:42:f7:a0:23:d2:fc:81:b0:2a:04:e7:
                    ed:cb:6b:3f:dc:2b:6a:15:55:33:c8:1d:b5:fe:86:
                    fa:9c:6f:fc:8a:35:ec:6a:f5:60:13:89:5b:0f:81:
                    f7:87:ac:e6:46:fd:89:68:74:ed:16:76:50:9f:2d:
                    71:13:c3:9d:0a:6c:c0:b0:d6:3b:21:97:76:f7:ed:
                    a4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:60:98:89:5C:A1:33:20:79:9E:8A:F3:95:BE:CE:A2:A8:74:03:96
            X509v3 Authority Key Identifier:
                keyid:3C:1B:83:88:86:96:FC:44:47:8C:69:3D:6E:78:03:E9:51:62:50:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBuDiIaW_ERHjGk9bngD6VFiUOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d55683-fec2-47fd-ac6e-9e82da7315cf/1/PBuDiIaW_ERHjGk9bngD6VFiUOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:f7:af:16:8c:72:f4:f0:6a:dc:63:ca:8d:b0:b4:7c:82:fd:
         63:3d:b9:c6:b3:5f:83:b9:3a:cb:a0:6d:e5:2b:55:66:43:f1:
         54:82:c0:29:b0:bb:db:1b:fe:16:a7:0b:4b:da:c8:17:22:09:
         6b:1a:77:2a:e6:5f:c7:a8:21:4e:d2:c5:9c:f8:e1:a5:2c:ee:
         79:95:c1:4e:ed:ef:db:b4:ae:ca:f3:6e:25:50:2f:dd:53:ef:
         12:3b:4e:4d:e6:cb:53:2a:10:8f:1b:f2:50:d7:f3:b2:54:7b:
         37:71:a0:65:51:7b:49:33:94:fb:74:23:c1:31:1d:97:97:44:
         88:8d:86:87:3f:b1:ce:9b:66:7a:0b:31:c8:34:e2:0a:a3:72:
         38:33:6f:2e:11:c9:16:03:71:0d:e3:fc:58:6f:ab:a4:0f:00:
         a5:b7:b4:45:52:f7:61:35:ac:7d:50:7c:67:b2:36:6b:6e:81:
         21:79:f9:4c:85:88:fc:41:6a:48:bf:67:e5:30:70:65:d6:54:
         0a:13:7c:98:13:c9:7b:43:e5:0e:fd:8b:07:66:4f:97:5e:44:
         89:80:13:82:be:8c:25:8b:75:ba:a7:1e:fc:66:75:c3:8a:ed:
         db:e8:30:0a:c2:d5:65:ca:b2:01:54:2d:fc:34:c3:56:2d:48:
         76:53:a6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----