Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
File:                     PH-snrclLdRq8BpNcoJsnZezJfQ.mft (raw, json)
Hash identifier:          uuGi3++J40InM1tVJq0m62yh0vqzHRw/2chLEErOLvc=
Subject key identifier:   FD:D3:5D:F2:97:76:42:18:20:3E:52:97:73:04:F9:53:74:2D:D5:6C
Authority key identifier: 3C:7F:AC:9E:B7:25:2D:D4:6A:F0:1A:4D:72:82:6C:9D:97:B3:25:F4
Certificate issuer:       /CN=3c7fac9eb7252dd46af01a4d72826c9d97b325f4
Certificate serial:       01962E98B5262DA266DCF5C823E88206A717
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft
Manifest number:          08F6
Signing time:             Sun 13 Apr 2025 10:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:21 +0000
Files and hashes:         1: PH-snrclLdRq8BpNcoJsnZezJfQ.crl (hash: q5vnWR1EShRx21UyoHUkaZYEjwH8aeJ6KJYPhB5FyJI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b5:26:2d:a2:66:dc:f5:c8:23:e8:82:06:a7:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c7fac9eb7252dd46af01a4d72826c9d97b325f4
        Validity
            Not Before: Apr 13 10:01:21 2025 GMT
            Not After : Apr 14 10:01:21 2025 GMT
        Subject: CN=fdd35df297764218203e52977304f953742dd56c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2f:07:a5:cb:a5:dd:8f:13:3e:32:4d:e6:bb:
                    09:7c:4d:4e:3f:08:9e:8a:bf:27:bb:ec:f0:c2:ff:
                    75:1b:df:89:a9:98:6a:b5:26:4c:48:56:31:f2:a2:
                    48:2f:67:74:4f:b1:3d:63:8c:ae:04:aa:ec:9f:f5:
                    a8:26:e6:65:7f:96:43:c9:32:40:f7:01:f9:5c:fe:
                    78:1a:04:60:44:2b:c2:2b:85:e7:da:df:15:50:7c:
                    57:69:45:dc:12:ba:a5:c4:03:07:ab:83:a2:2f:61:
                    39:16:6a:4e:ee:8c:47:59:c4:2f:d0:06:5c:26:33:
                    20:6d:7f:f3:eb:eb:97:fe:45:86:61:dc:4e:af:00:
                    9d:87:14:9e:69:ff:4e:a6:d6:48:84:fb:43:f1:05:
                    01:1f:ea:c0:49:e5:cc:4c:b0:b8:88:b8:e9:32:15:
                    6c:72:cd:ba:93:2a:4c:d2:c0:80:95:b8:ed:5e:42:
                    71:a4:15:1b:3e:cb:9c:63:58:1c:e3:c3:a1:ba:44:
                    27:54:b1:a6:88:81:62:96:2c:50:fc:1f:81:52:11:
                    d6:18:8a:5b:25:58:b6:fa:3e:40:5c:7b:f3:39:30:
                    ac:e9:44:c9:f2:d6:02:d3:14:03:f4:37:2a:2f:d2:
                    65:52:87:df:a0:94:30:a8:20:c6:3f:bd:2a:7b:94:
                    90:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D3:5D:F2:97:76:42:18:20:3E:52:97:73:04:F9:53:74:2D:D5:6C
            X509v3 Authority Key Identifier:
                keyid:3C:7F:AC:9E:B7:25:2D:D4:6A:F0:1A:4D:72:82:6C:9D:97:B3:25:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PH-snrclLdRq8BpNcoJsnZezJfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8200eb-0fbd-4881-8480-eabac16ea584/1/PH-snrclLdRq8BpNcoJsnZezJfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:be:2d:97:ea:d8:fb:6b:3a:2d:4e:00:ad:3c:5d:c9:19:65:
         6d:fc:cb:8f:96:b5:3d:0f:82:4e:37:08:fa:ae:b6:e7:16:83:
         b5:c0:36:11:0c:3a:81:31:fb:07:38:f7:3d:de:bc:17:a3:4a:
         13:27:2a:c9:59:15:3e:40:62:eb:e3:c5:95:dc:1f:8c:48:a1:
         ae:ac:26:9a:05:16:c4:d9:de:af:4b:04:7f:38:9b:1b:3b:49:
         93:7c:5c:b8:ea:f8:fb:e8:cd:9b:8b:df:73:c1:67:cb:85:14:
         c4:ca:e3:8a:2d:d0:70:81:db:b7:76:1f:28:24:71:e5:89:4c:
         e5:58:75:bb:73:4b:dd:25:1e:df:3c:05:78:24:dc:76:79:72:
         66:c3:9c:5f:a0:5f:eb:fb:7a:24:dc:e0:c6:cb:69:1e:90:de:
         db:8e:ab:e4:72:f1:da:26:e6:a0:30:b4:51:a4:dd:33:78:9a:
         b2:50:ac:e6:d4:49:9b:35:c4:c8:8c:21:e9:cb:05:9d:2b:b8:
         a4:7b:79:13:9c:35:40:c5:42:ad:21:bb:4b:41:16:0e:43:3d:
         8a:e1:f5:04:2b:bf:49:99:2f:da:f2:4b:77:5a:33:cf:eb:3c:
         0a:11:28:b6:6f:7a:54:16:59:0b:e4:73:23:b3:95:43:a2:43:
         92:ce:0d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----