Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
File:                     P98IRZEZlp1LnBf1qF6ScyxVF9E.mft (raw, json)
Hash identifier:          j0KzVE7cTychXTCZSeaagDmOnUacebfTUtVjJ/aG7OI=
Subject key identifier:   CB:1D:DD:CC:BC:DE:8C:E1:4F:3A:E3:5B:5B:10:C5:FA:B2:50:94:63
Authority key identifier: 3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1
Certificate issuer:       /CN=3fdf08459119969d4b9c17f5a85e92732c5517d1
Certificate serial:       01962E2AD40C556072F8F199B4E9BD8EFF3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft
Manifest number:          14D1
Signing time:             Sun 13 Apr 2025 08:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:20 +0000
Files and hashes:         1: P98IRZEZlp1LnBf1qF6ScyxVF9E.crl (hash: ZjJiJg8YZ/JaPqN+Z2f7JrjvqwqMiPFidcg5N051vCw=)
                          2: qHPsdBiuTYXVZwMEuexg2CV5_Rc.roa (hash: okNXh+NCN1SYoCMfp10oC5B+Is3b/qKgY4b94Oq45BU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:d4:0c:55:60:72:f8:f1:99:b4:e9:bd:8e:ff:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fdf08459119969d4b9c17f5a85e92732c5517d1
        Validity
            Not Before: Apr 13 08:01:20 2025 GMT
            Not After : Apr 14 08:01:20 2025 GMT
        Subject: CN=cb1dddccbcde8ce14f3ae35b5b10c5fab2509463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ed:c4:e4:99:63:d7:3a:fc:87:d3:23:a0:07:
                    b0:5b:5a:29:6c:f9:9c:ec:43:b6:04:8d:e8:e3:c7:
                    2b:f3:4a:63:dc:96:a3:52:00:eb:82:ca:c2:35:cc:
                    b9:18:36:a5:09:63:43:da:c8:5a:39:bb:17:9d:fc:
                    5a:fc:3b:29:2e:ba:18:90:71:f7:6c:55:b4:9e:62:
                    da:9a:14:dd:17:c2:5c:74:77:ae:23:ab:2e:dd:80:
                    b2:91:e7:ff:25:d1:c5:4e:21:68:32:5c:ad:a2:c5:
                    53:39:ac:0f:6d:51:5d:94:fb:86:50:d4:63:fd:20:
                    b5:a8:e1:34:c2:be:86:6e:41:32:af:b8:e1:af:41:
                    5c:56:c9:6e:c8:96:d0:5d:13:1a:79:78:60:e9:d3:
                    55:2a:a4:b1:8f:80:df:ce:c6:10:be:e8:0f:4d:da:
                    22:7b:3f:6a:eb:0f:f9:29:b6:50:6b:f2:77:f4:bb:
                    11:9c:07:81:18:80:21:06:de:a1:e3:6c:ad:49:54:
                    6b:d5:70:22:1b:f1:13:64:bd:d3:fa:5f:4c:2b:4e:
                    88:a5:0f:86:78:b2:8f:96:f8:1a:d0:44:a0:4a:05:
                    98:a0:29:07:31:4b:fa:98:3b:43:d3:cf:dc:17:ea:
                    28:9f:24:6a:73:51:35:0e:fd:9c:4c:0d:4d:a1:5a:
                    73:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1D:DD:CC:BC:DE:8C:E1:4F:3A:E3:5B:5B:10:C5:FA:B2:50:94:63
            X509v3 Authority Key Identifier:
                keyid:3F:DF:08:45:91:19:96:9D:4B:9C:17:F5:A8:5E:92:73:2C:55:17:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P98IRZEZlp1LnBf1qF6ScyxVF9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5645cb-f0ba-44fc-ba93-7369f2ca5b3b/1/P98IRZEZlp1LnBf1qF6ScyxVF9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:8a:cc:24:5e:69:40:f3:45:f6:74:ce:b0:cc:ce:5e:01:ce:
         93:65:f9:04:00:45:d1:e0:5d:ae:3d:df:7a:09:94:1d:d9:64:
         a7:16:cf:04:a9:ad:a5:c1:cd:c5:c8:ca:b7:4f:53:4f:5d:fe:
         66:ad:82:a9:9b:b1:a2:c2:8d:c5:db:89:dd:68:62:e2:60:94:
         e1:cf:f9:8c:5a:b4:6a:7d:fd:57:31:af:4b:58:fe:d4:a9:ef:
         5f:2d:ef:13:60:b6:ac:fa:26:04:ef:9e:f7:63:c6:80:b3:86:
         c5:9d:b2:6c:c9:dd:b8:ca:71:fe:9e:56:31:8a:6e:58:00:6e:
         74:ae:de:e9:2c:a8:b5:a2:85:a0:3a:8e:a0:c6:ad:ea:9b:95:
         9c:3f:c5:17:b2:6b:ca:86:25:e0:dc:2b:1d:0e:3b:8a:03:ac:
         6f:49:bf:41:71:1e:2c:37:e1:56:2b:be:35:00:30:62:0a:9e:
         98:fb:be:cb:b7:9d:00:a1:4c:ad:fe:ca:b7:ff:5e:81:b2:71:
         cc:c0:fc:fb:d2:20:c6:de:20:52:e0:95:6c:11:41:c0:26:09:
         6a:11:e5:3e:1b:f1:93:5f:8b:ab:9f:4c:c3:53:b7:fa:96:7d:
         26:59:7a:2f:86:0a:bb:b7:f2:3d:1c:9a:f3:c4:84:56:2a:6a:
         00:39:c1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----