Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft
File:                     pnhXc98xO5FxG_a8WxSezCRrnok.mft (raw, json)
Hash identifier:          fxd+3eJQhwV5TML221J7taffSmeZWGcNkESvTYa8XrI=
Subject key identifier:   6F:9B:92:E5:51:DB:74:A5:A4:41:F0:FF:71:B6:34:78:70:29:A5:B9
Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
Certificate issuer:       /CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Certificate serial:       01962E61E1C45B930E793948D32ECAE46EDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft
Manifest number:          12B2
Signing time:             Sun 13 Apr 2025 09:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:28 +0000
Files and hashes:         1: 4_O_iIpyAI9RehObq-pOpadb0Oc.roa (hash: yk0faU3G873g+gLSQoGVoe7NYYyCWEaHzHI6ZIk9UdY=)
                          2: 7loUqY3SMQ476AvW8cBj_oE5D0w.roa (hash: 9ZWiK7Ya0oQoJXKuXssFNZZZ1jcO9WaxjH/2eSSyYlw=)
                          3: 9qXJnie35SdfH2J2EgodKBngTzA.roa (hash: jwDaD5ZgcucjZdcdoISWLpA3Zdrcncz7G1jWAlDHN4k=)
                          4: _K6pKy4r_yxn6KKjdedN6hKQIRc.roa (hash: Fa8PiwPRQ/Nbg/tMa4sLtAZckTKFYG8hQ2oLAm3z+YE=)
                          5: eeGo9wragRSvkLaXijzUVv6g1UQ.roa (hash: f0fCuBwmYqh4E9JpX2SXK0IGaTdlCqkrpCwPLzLM7U8=)
                          6: f_BAmJDU6YD_W-jGGFTEv2Fs7Ak.roa (hash: PaLYZLAv0TrU+Bsc9bxTmK6PnOfA5lCBIqcJSl9Ay7o=)
                          7: h0Rq-64YdH2Rhgx8VqQPxecaOJk.roa (hash: +OMPPDfPiGbQBs5xm10WtKzO2XvkhzUC6VL8TFg0R8M=)
                          8: p7CrYRPqjfqg5-SpOOWgZYcH7pg.roa (hash: VxeYJO6+oO8JTtkcjhdpm2dOlDG12rU/cm/baKhjYqs=)
                          9: pnhXc98xO5FxG_a8WxSezCRrnok.crl (hash: my4yyJASNlEnGAkt1MezdQfNIvkmZpUFzV7SvD9j06c=)
                          10: vm5i6AVzmYzAz9qPwbnD4VrLfVA.roa (hash: VDQ8oeDiLzJU7KaKEM2DHEI37PMjg/GP0JQI1knZDEc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e1:c4:5b:93:0e:79:39:48:d3:2e:ca:e4:6e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89
        Validity
            Not Before: Apr 13 09:01:28 2025 GMT
            Not After : Apr 14 09:01:28 2025 GMT
        Subject: CN=6f9b92e551db74a5a441f0ff71b634787029a5b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5c:b4:32:11:f2:91:6c:9e:e7:22:8f:37:3b:
                    9a:59:40:91:84:4e:56:49:81:48:25:97:c6:a2:04:
                    bd:ae:d8:ae:47:4c:a3:1f:eb:72:7f:35:a7:eb:6e:
                    4e:22:fe:db:fd:98:dd:c4:7e:c7:42:78:a3:53:7d:
                    e0:b9:aa:da:4e:4d:04:49:6a:3b:7c:f5:ac:c9:80:
                    d1:21:9f:7d:bd:c3:5c:eb:bc:06:5c:97:2f:c9:bb:
                    e5:a2:18:f1:55:b5:47:eb:f2:f2:0c:2e:84:e3:e8:
                    14:34:e2:fc:36:6f:31:ed:f3:4a:bf:f5:d8:48:7f:
                    bf:49:9d:88:40:3d:6c:08:23:a0:d8:33:48:1f:00:
                    1a:b1:f5:c5:ec:25:c3:99:79:f9:ff:a4:a0:d9:b6:
                    7c:ac:cd:4e:b6:97:b5:93:d1:17:bc:bf:be:db:11:
                    53:9e:d5:7e:67:44:29:d3:7a:c2:9d:10:36:47:5e:
                    8e:00:51:0d:6e:4d:9a:e3:2c:4e:28:9d:c0:22:56:
                    0d:23:c6:8b:9f:3b:7b:8d:b6:52:31:d6:99:53:4f:
                    3d:4a:45:1e:ad:5e:f6:24:fd:90:72:31:50:33:0f:
                    91:14:2e:ee:b8:50:f1:4c:73:35:2a:4e:ca:0c:51:
                    94:63:7d:99:49:45:f0:da:f0:53:40:49:9c:99:26:
                    9d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9B:92:E5:51:DB:74:A5:A4:41:F0:FF:71:B6:34:78:70:29:A5:B9
            X509v3 Authority Key Identifier:
                keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:ed:29:12:15:c6:a1:e3:e2:3f:ff:3a:29:48:7f:95:b4:04:
         a0:5c:6d:8f:f7:a2:73:1e:e6:a2:e4:55:3f:c0:39:c2:08:70:
         89:9a:d7:4a:9f:29:02:42:ef:4b:49:7a:07:e4:03:e3:f6:da:
         74:a6:3c:dd:44:cd:28:89:c4:51:15:4b:fb:80:13:7e:13:71:
         61:8f:8c:2a:aa:51:95:55:7a:3f:2a:28:a2:36:b7:21:39:ba:
         09:1e:7a:33:a8:f7:14:e9:f3:18:68:39:89:ed:ec:42:63:d4:
         8d:0d:a5:7c:dc:1f:73:cc:96:94:3a:58:b8:a4:56:ad:8e:7d:
         35:6d:4b:96:7c:d9:91:9a:31:8d:10:33:5e:75:72:16:f1:5a:
         8d:b4:6f:49:5b:00:8c:52:11:c5:ef:10:bb:81:83:04:6c:cc:
         fd:e4:26:15:37:7f:c9:cf:5d:fb:24:df:b3:79:a0:0d:4b:bd:
         b4:cf:a4:6c:ab:b0:36:9c:81:18:95:60:67:45:dd:d2:a1:de:
         4e:59:c3:47:14:30:54:e9:e9:4f:0d:e2:b7:91:2b:23:fc:3e:
         60:f8:1b:d5:8f:1b:b4:4d:ea:af:d6:44:9f:47:80:12:57:4d:
         e7:9c:8e:50:46:50:74:e7:bd:bc:db:0b:d0:cd:7d:ba:94:65:
         01:c1:57:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----