Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
File:                     PQG9lJxV7QfnAkLhUDPQqEdKnho.mft (raw, json)
Hash identifier:          bnSS+bLaWGOzEzA/eIdlNQa5iOFWH6a/fWrsrYEFq7M=
Subject key identifier:   51:A9:E2:F4:38:0B:99:33:9D:3B:1F:01:0A:79:D1:74:0A:F4:26:19
Authority key identifier: 3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A
Certificate issuer:       /CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
Certificate serial:       01962FAB30885AACC487651959BDC78E306C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft
Manifest number:          03C9
Signing time:             Sun 13 Apr 2025 15:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:10 +0000
Files and hashes:         1: PQG9lJxV7QfnAkLhUDPQqEdKnho.crl (hash: azPickPxrw63eeU+BCBWeSD90H+ilhfgmlC+lcI1hEw=)
                          2: wTHnefFYASN9t7OgaDJP2pTz5W4.roa (hash: 9oC2Jer2cW2AbqdUqYgPoU7bU/Jm0xDFHVun+XWYaKg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:30:88:5a:ac:c4:87:65:19:59:bd:c7:8e:30:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d01bd949c55ed07e70242e15033d0a8474a9e1a
        Validity
            Not Before: Apr 13 15:01:10 2025 GMT
            Not After : Apr 14 15:01:10 2025 GMT
        Subject: CN=51a9e2f4380b99339d3b1f010a79d1740af42619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3a:9b:2e:31:4a:7a:55:cf:f3:96:52:ee:6b:
                    74:3e:fa:06:3e:df:81:e0:43:46:7f:50:e4:ec:80:
                    7d:9e:f9:95:85:d0:06:24:f2:19:ef:88:e3:8f:a2:
                    5e:f6:5a:a2:2e:4f:4c:75:52:2c:10:5d:33:f1:02:
                    ed:cd:0c:61:32:3f:ac:67:da:9a:0a:a0:8b:f6:27:
                    46:94:2d:0e:c1:f0:b4:d4:31:5b:2a:80:18:f1:41:
                    d5:ed:25:37:97:f2:30:76:ee:bc:5d:63:89:c0:16:
                    7e:80:92:92:f0:a3:65:0b:5d:ed:d4:6c:20:6a:c7:
                    57:f8:36:28:28:78:23:e0:df:a9:c5:e2:12:36:92:
                    a5:aa:d8:8e:36:21:5d:0e:a9:d7:15:3e:10:d5:6d:
                    3c:65:0e:b1:d4:e3:39:ea:68:e3:32:45:3e:37:38:
                    ac:83:49:40:29:6d:fc:52:4e:7f:66:90:99:b9:ed:
                    dc:46:63:2f:3a:3f:d1:89:33:64:ed:bd:03:29:82:
                    36:92:54:98:7a:2e:86:28:4e:0f:f5:c9:87:64:5f:
                    07:0e:e4:df:29:f0:7c:a1:c8:84:65:3f:68:de:44:
                    57:22:55:90:ee:83:df:5d:41:bf:fc:7c:a5:ad:c2:
                    e8:d2:ce:44:ae:97:9e:ab:b3:ec:2a:ed:05:f1:84:
                    0a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A9:E2:F4:38:0B:99:33:9D:3B:1F:01:0A:79:D1:74:0A:F4:26:19
            X509v3 Authority Key Identifier:
                keyid:3D:01:BD:94:9C:55:ED:07:E7:02:42:E1:50:33:D0:A8:47:4A:9E:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQG9lJxV7QfnAkLhUDPQqEdKnho.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c15003-ed53-42d3-af09-e4e0b555ad59/1/PQG9lJxV7QfnAkLhUDPQqEdKnho.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:31:0d:45:a8:29:ba:ee:21:d0:45:3f:3e:20:27:34:7a:d3:
         0e:59:68:81:04:a8:2e:e4:d1:8d:61:c5:4f:a6:b1:a5:49:49:
         cd:88:f6:9e:f2:79:ca:51:b2:90:41:aa:ff:8b:09:ab:5c:ce:
         c8:34:56:f1:f1:4f:21:c7:15:8c:40:c6:3c:ca:4e:f4:ec:f8:
         f7:40:36:66:7f:ad:35:4f:f8:a6:44:f4:9c:68:15:d0:c8:15:
         85:db:49:e6:5b:60:b9:c2:d9:30:bb:f1:53:1a:9e:ae:22:c1:
         f6:c9:dd:b1:eb:86:e3:a3:35:8d:d6:d0:75:b2:26:41:1e:b9:
         35:7e:b9:bd:be:80:48:26:3a:48:35:50:f4:16:06:1b:e4:46:
         3a:96:4e:7a:83:30:f4:01:3b:22:ba:50:d5:a3:49:0c:15:fd:
         eb:12:ad:aa:f9:a7:3a:65:42:de:20:22:f9:11:b1:6a:df:ad:
         bf:47:b9:0b:84:d7:a2:44:e0:47:75:05:bc:c0:58:4f:a8:27:
         30:f6:a4:2d:f4:ae:8a:46:44:a9:bd:8c:ac:88:16:f5:4f:73:
         12:13:9e:7e:54:35:24:8a:95:68:c0:e1:dc:10:26:a7:2d:6e:
         d5:25:65:60:65:d7:cb:69:14:59:6f:fb:42:a5:77:3a:4e:2e:
         00:ef:f9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----