Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
File:                     PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft (raw, json)
Hash identifier:          87O1txWP/3dX5rgdNKMQlYMJP+WzT32gIszmRUto1v4=
Subject key identifier:   0E:F2:46:E5:2A:40:A5:8F:E9:3A:4F:67:AB:8E:19:70:C7:A9:7F:32
Authority key identifier: 3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1
Certificate issuer:       /CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
Certificate serial:       01962F74C705C3AA0C60F71F644B4E50F32C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft
Manifest number:          10C0
Signing time:             Sun 13 Apr 2025 14:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:44 +0000
Files and hashes:         1: PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl (hash: YU8Kjmh1VOB28alT94ymhPNol1YVwkRgyGfgV3evZMw=)
                          2: W_v27Hupk3RRQBILYKusMtNhoAc.roa (hash: yWY4EAVlw3dwpD2kqQElXOLSvOEEYUa61TWmAID32CM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c7:05:c3:aa:0c:60:f7:1f:64:4b:4e:50:f3:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c52f8c17df46f863360e032fa9d31689e4af6f1
        Validity
            Not Before: Apr 13 14:01:44 2025 GMT
            Not After : Apr 14 14:01:44 2025 GMT
        Subject: CN=0ef246e52a40a58fe93a4f67ab8e1970c7a97f32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6f:7e:78:b7:0e:44:77:4b:01:c8:11:6a:44:
                    bc:6d:84:30:6b:00:74:68:69:c8:8c:6e:80:27:34:
                    6b:e4:f1:62:bc:55:44:fe:74:cf:dc:1b:a4:bb:b2:
                    70:22:2c:59:47:c7:14:e5:bf:a4:5f:91:b5:98:42:
                    3d:45:c7:cd:da:10:9b:ee:20:07:9a:41:49:6f:66:
                    f2:24:c6:ea:4e:ec:1b:72:90:f8:d8:04:74:19:76:
                    6e:b2:69:ca:13:e3:ba:78:0c:bc:73:15:fc:57:25:
                    4f:8f:5e:fd:43:e8:04:8d:fc:36:d2:1a:a0:e8:ec:
                    d9:52:ef:bf:10:ed:d6:c1:fb:03:cf:5b:b3:34:f7:
                    ea:8a:d3:a6:e4:37:2b:4f:ad:54:a4:19:78:78:a5:
                    55:97:97:a5:ff:d3:63:2c:94:40:82:6c:72:5a:3c:
                    6b:f1:8f:c4:2a:74:99:b8:92:38:2e:82:aa:f0:8c:
                    cb:a8:ea:36:e4:4e:db:58:27:8d:fe:f8:30:80:0d:
                    69:00:1d:ae:04:cb:bc:29:71:8e:23:d3:7e:eb:9d:
                    81:e3:c7:3f:b4:b3:4c:5c:44:f6:d6:5f:83:aa:5e:
                    27:30:24:e5:ed:b7:a5:e3:fd:3a:2c:ae:78:6d:96:
                    0b:33:d4:70:8f:01:ee:fc:42:09:51:d2:df:de:31:
                    bb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F2:46:E5:2A:40:A5:8F:E9:3A:4F:67:AB:8E:19:70:C7:A9:7F:32
            X509v3 Authority Key Identifier:
                keyid:3C:52:F8:C1:7D:F4:6F:86:33:60:E0:32:FA:9D:31:68:9E:4A:F6:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFL4wX30b4YzYOAy-p0xaJ5K9vE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/901012-0e2c-41ba-8734-bf06d7873f02/1/PFL4wX30b4YzYOAy-p0xaJ5K9vE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:2e:6e:1d:75:75:14:63:9f:cb:bc:e8:32:88:c2:c9:3c:0b:
         13:f7:8d:ee:a2:b2:f7:0c:c8:e5:c5:52:7d:c2:db:f7:6c:be:
         cb:1e:4f:73:59:2a:e2:0f:1b:65:a5:c5:a9:56:a1:c4:3b:55:
         a3:87:a9:2e:11:b3:fd:e9:4a:10:ef:93:e4:f8:a3:f3:75:d2:
         cd:86:5c:84:98:a0:21:79:ca:20:39:68:08:c7:da:74:10:a7:
         62:c4:1b:b4:b9:d1:69:ce:7c:7b:36:90:f1:0a:1b:ce:d5:4e:
         f6:a8:68:73:c4:41:4e:51:09:bf:b7:7a:58:e8:2a:b3:b2:a2:
         83:c4:f3:e3:90:7d:e7:67:08:71:c3:56:9b:bf:74:e8:f5:8c:
         6f:89:a9:a6:6d:a5:fc:f0:34:88:9e:46:50:39:a8:ae:fa:a9:
         89:81:ed:18:cf:66:ef:7a:a7:73:b6:57:bb:7d:cd:e4:cb:15:
         11:90:f0:4d:c3:74:fc:ba:8d:d5:aa:d6:d1:9a:89:f8:0a:86:
         eb:fe:39:68:2a:6d:1a:99:e3:f2:b2:c0:83:8a:95:08:e5:23:
         70:83:ad:a9:40:25:63:b0:36:d0:f1:33:31:65:3a:a8:86:c7:
         b1:98:8b:8a:08:4c:1e:7b:fd:bc:c0:56:14:84:98:61:26:59:
         25:9c:52:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----