Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.mft
File:                     PqFIQth34nvEBouYH-dK64vufnM.mft (raw, json)
Hash identifier:          2cHYOUoe3/op0rihR1RIVgw+vZsyfQXcnB9EmTPt0jU=
Subject key identifier:   45:61:B6:CD:C1:49:B4:79:A7:42:12:46:AD:40:B6:62:B7:5F:2B:5A
Authority key identifier: 3E:A1:48:42:D8:77:E2:7B:C4:06:8B:98:1F:E7:4A:EB:8B:EE:7E:73
Certificate issuer:       /CN=3ea14842d877e27bc4068b981fe74aeb8bee7e73
Certificate serial:       01962E61996EA2DE93368D42E6EACD4FD6EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PqFIQth34nvEBouYH-dK64vufnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:10 +0000
Files and hashes:         1: PqFIQth34nvEBouYH-dK64vufnM.crl (hash: o58+KVPyxANeuEZwaEzOm9T6qYgTayOKeMhr7GERfOY=)
                          2: h5AoEy-X54Db83-jTlFH2Y1fCVw.roa (hash: HOh3C7TWeQ0O5hO+1P91yiEiZozSeSnp7F1/q290vZs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:99:6e:a2:de:93:36:8d:42:e6:ea:cd:4f:d6:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ea14842d877e27bc4068b981fe74aeb8bee7e73
        Validity
            Not Before: Apr 13 09:01:10 2025 GMT
            Not After : Apr 14 09:01:10 2025 GMT
        Subject: CN=4561b6cdc149b479a7421246ad40b662b75f2b5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2a:92:36:41:14:95:d7:a5:5a:07:67:3a:63:
                    44:af:66:df:1e:6e:29:a3:a9:8f:57:50:66:e8:dd:
                    17:c4:d0:9e:55:96:2b:b9:ed:d2:c1:60:53:a2:54:
                    3d:20:44:70:46:0b:73:ae:80:7a:67:be:5a:48:78:
                    f5:9d:1c:53:c3:52:6f:a9:58:4c:57:3f:c7:c0:e6:
                    d0:d4:be:f5:48:92:e9:a2:15:c1:5f:c6:b8:af:cd:
                    a7:d7:ea:10:2d:31:bf:ec:15:15:4d:4e:10:7d:d4:
                    70:ec:77:c9:be:fd:51:95:51:3e:67:7b:d2:e3:24:
                    69:9b:e6:19:31:db:7e:65:3c:77:82:fc:66:a1:5e:
                    28:7b:93:00:43:f9:61:da:4b:83:2c:91:cc:42:5d:
                    7a:c5:3b:9c:5c:29:f1:2d:a4:2e:98:fc:03:16:14:
                    ff:b1:3e:1f:fe:c7:e5:94:68:67:6b:32:50:49:ea:
                    5b:e8:6d:98:55:b7:3e:8c:39:17:d3:7a:bd:15:50:
                    e6:9c:58:23:df:3a:62:c5:da:04:46:d6:d2:9a:16:
                    80:40:f9:80:5e:1a:f3:fd:ac:98:65:0a:c0:3c:20:
                    fa:0d:fb:a6:25:08:27:5b:d8:05:0d:11:ed:78:fb:
                    65:14:6d:16:9b:77:74:ac:7f:86:f8:32:6d:17:61:
                    54:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:61:B6:CD:C1:49:B4:79:A7:42:12:46:AD:40:B6:62:B7:5F:2B:5A
            X509v3 Authority Key Identifier:
                keyid:3E:A1:48:42:D8:77:E2:7B:C4:06:8B:98:1F:E7:4A:EB:8B:EE:7E:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqFIQth34nvEBouYH-dK64vufnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/797057-278a-4f73-80a1-4dce4f3ea13e/1/PqFIQth34nvEBouYH-dK64vufnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:58:7d:4a:6f:93:f6:5f:f9:b5:69:17:6e:a3:6c:9a:0f:fc:
         3b:41:90:69:1d:72:cb:be:6f:09:b0:e2:06:4a:9d:03:74:d2:
         e1:ef:df:f2:38:fc:ec:8a:43:16:39:b0:a8:5f:cd:99:f3:78:
         6b:8c:20:84:f5:3d:4c:c9:c3:25:f3:e1:ea:0b:37:99:ce:c3:
         cf:13:dc:32:ac:a4:e2:61:fe:e9:76:e0:ab:56:2f:ae:85:23:
         74:16:5a:22:d8:c7:ab:de:9d:4e:2e:05:a8:9e:df:f4:d1:7d:
         b3:14:58:f5:53:94:31:2f:ea:cb:c3:f6:e1:89:d9:7d:9c:2b:
         23:98:26:14:e9:d1:da:d3:5d:34:7a:44:86:0a:a4:4f:75:81:
         68:60:84:2e:59:d6:44:dd:9b:2b:e8:fe:1c:bf:97:4f:52:59:
         60:64:6a:c8:21:5d:94:e4:2d:99:7d:e4:7e:7d:78:0d:7c:e1:
         f6:cd:1d:09:53:bf:c7:94:a6:4c:7b:93:bb:07:f2:39:f2:86:
         68:c5:a8:28:fb:c8:9e:fe:ae:cf:f9:5f:0b:2b:a1:d5:45:65:
         55:10:fe:bb:9c:ca:27:7a:0a:6d:b1:97:69:22:cb:b3:47:ff:
         47:ff:38:6b:2f:75:f0:e3:83:19:59:2a:95:2e:38:aa:3b:00:
         5e:5d:db:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----