Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
File:                     PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft (raw, json)
Hash identifier:          hK3oh9J5PuXX9ZkgvCYc3rRjmyFNynttFizpMExOsP0=
Subject key identifier:   D1:4F:2F:07:F7:A5:94:7A:FF:43:0C:60:66:80:4B:6D:D2:83:10:C8
Authority key identifier: 3E:B9:1F:36:CF:FE:80:EF:E0:DF:F2:61:23:F8:F9:7C:15:D9:76:3C
Certificate issuer:       /CN=3eb91f36cffe80efe0dff26123f8f97c15d9763c
Certificate serial:       01962E992680AF9674063AD04F19764FC765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:50 +0000
Files and hashes:         1: PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl (hash: mlN0mpSj8MfC5qoL9iV5/iPk3tna6mQKla9CMtOVQek=)
                          2: nuDK-TC5cc4Dv5m-g_HwBrvB2yM.roa (hash: HAIc8rXtzi2UFMvUxwUOqrhRhKG5mpUAWpR1IBhhhmQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:26:80:af:96:74:06:3a:d0:4f:19:76:4f:c7:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eb91f36cffe80efe0dff26123f8f97c15d9763c
        Validity
            Not Before: Apr 13 10:01:50 2025 GMT
            Not After : Apr 14 10:01:50 2025 GMT
        Subject: CN=d14f2f07f7a5947aff430c6066804b6dd28310c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c5:2d:16:69:c3:07:28:c7:45:c0:0b:67:c8:
                    ff:8a:45:9b:cf:80:ad:c4:76:f7:17:66:bc:3a:1d:
                    f4:fc:02:6d:2f:b0:be:35:51:8f:d3:7b:d6:6f:0a:
                    91:7a:df:8b:7e:8d:3d:d8:45:4e:47:c6:e7:30:be:
                    99:6c:52:22:f3:ec:55:4d:d1:25:8a:55:bb:64:47:
                    dd:49:cd:21:ea:10:82:45:3f:83:f3:c8:85:4e:8f:
                    a5:d5:2d:09:cd:23:63:15:e6:10:72:73:5d:6f:73:
                    11:43:5e:dd:c1:69:b7:05:78:fc:35:0e:5b:1a:51:
                    f2:a1:7c:be:12:16:39:de:02:32:6d:b2:2b:e5:39:
                    23:25:49:5a:76:f6:2f:18:37:0a:ed:61:c5:0e:dd:
                    62:11:da:4a:61:15:6b:62:3c:41:cd:ac:b2:4b:7c:
                    0f:31:1b:14:59:5a:2e:90:5c:d0:0a:17:c8:41:23:
                    d6:9a:7b:e6:35:57:e3:39:a0:0c:f1:48:a4:dc:04:
                    56:5d:ae:7d:4d:81:d0:f1:21:a0:1b:52:db:da:61:
                    21:99:24:0c:29:d2:b4:5e:cd:83:2b:a0:7d:c3:a5:
                    a3:f7:88:01:5f:1e:9e:c2:b2:64:a6:e7:f2:7d:de:
                    3c:3a:c9:b4:bd:f0:10:a6:6f:ed:6c:1a:31:8e:60:
                    82:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4F:2F:07:F7:A5:94:7A:FF:43:0C:60:66:80:4B:6D:D2:83:10:C8
            X509v3 Authority Key Identifier:
                keyid:3E:B9:1F:36:CF:FE:80:EF:E0:DF:F2:61:23:F8:F9:7C:15:D9:76:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:52:99:6d:c1:a6:d5:90:c3:4a:4c:dc:08:91:98:ea:3e:18:
         d7:eb:5b:d1:f3:0c:13:18:41:95:16:60:1f:a2:b5:d2:e6:45:
         42:eb:ba:76:31:ee:20:40:a1:c0:f6:b4:03:c9:5f:e1:84:f7:
         ff:ac:c1:5f:43:ab:98:5d:dc:62:25:77:5a:2a:90:3f:2f:a8:
         ef:57:17:e8:a1:35:32:93:5f:62:5f:09:82:5d:0b:ff:78:28:
         48:b0:b1:4b:41:36:13:17:30:ac:b0:ca:3d:94:2d:ea:c2:fb:
         a5:42:2a:a2:57:ca:61:1b:dd:1c:41:f6:98:fa:42:69:6c:6b:
         50:92:8f:bb:82:7a:1d:2e:98:1e:66:1d:79:6d:66:39:82:00:
         38:a5:56:0b:8f:e3:40:e4:d0:dc:38:1f:43:33:fe:17:ef:fa:
         8e:70:5f:be:f5:36:8f:16:eb:2d:e9:26:95:cb:23:5f:14:20:
         ab:58:f3:ae:4c:f1:80:bc:2d:7c:51:fe:dc:76:af:94:f2:65:
         b4:67:c1:b2:5e:ad:e0:d5:86:eb:ae:93:83:b3:84:09:27:83:
         6f:87:1d:31:54:22:62:54:f1:e0:21:f2:6e:c8:ae:ee:07:4c:
         36:97:cb:21:1c:8f:c8:1f:c0:d8:f1:bb:76:a0:28:01:9d:67:
         da:14:54:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----