Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
File:                     PytPzqS3IvKm9scFxVie4avGIK4.mft (raw, json)
Hash identifier:          bszhhh4cDia9vU0gg0BO/ND0TPQicRNNkUthM/ZWFSs=
Subject key identifier:   9F:48:31:3E:84:84:27:6A:E5:55:81:75:00:CD:3B:CD:03:4A:50:4F
Authority key identifier: 3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
Certificate issuer:       /CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Certificate serial:       01962F74B9F95F625A9F2C96263D5C51FA9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:40 +0000
Files and hashes:         1: PytPzqS3IvKm9scFxVie4avGIK4.crl (hash: dsHeYveSQUXbMvXQHzsBBFu6TgBGFINXUDSMcPBbjgA=)
                          2: YQBFYB0MYwrVqZbuM7UQcqbC024.roa (hash: wyZtqH/kTGiAK4e2xHLNhEXkV/FU12e6HKB8OJ8RKis=)
                          3: wfcB4mAnFj3QU1k-UoqD7LNH2ks.roa (hash: SfjPp8tTJZPwOpMDomAWdq0cbTqhgyvnx9jbemLwves=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b9:f9:5f:62:5a:9f:2c:96:26:3d:5c:51:fa:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
        Validity
            Not Before: Apr 13 14:01:40 2025 GMT
            Not After : Apr 14 14:01:40 2025 GMT
        Subject: CN=9f48313e8484276ae555817500cd3bcd034a504f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:39:a6:75:71:45:9e:2d:b4:13:cc:0f:91:3a:
                    9a:2e:26:7e:2f:ef:5c:2d:cc:cb:a7:26:ca:97:22:
                    dc:1c:f3:db:8a:e5:95:ba:a0:a2:3b:9e:37:a8:ac:
                    48:3b:db:61:32:83:a1:19:e7:43:b5:7e:a2:22:f7:
                    87:f7:4f:40:b9:a5:c1:73:25:14:54:c9:58:6f:59:
                    8f:c8:58:90:2c:ff:05:ea:e0:0a:fd:ac:1d:1c:1c:
                    18:cc:6d:7e:fb:26:f6:ea:32:da:2d:69:e4:82:ad:
                    fa:e1:81:77:5a:43:58:5c:b3:07:1a:13:51:66:2f:
                    16:08:33:8f:f7:73:f4:67:2e:06:fc:d6:61:5a:53:
                    b0:de:cb:b9:81:63:d2:03:d2:20:82:f1:ec:e3:bc:
                    e1:70:8f:5c:06:42:79:93:62:3e:c0:56:09:b3:2b:
                    74:b9:fc:8a:39:d1:fe:3e:6d:eb:a0:6c:cb:8d:d1:
                    1a:74:c0:1d:28:7b:7a:1a:7a:a8:7e:3c:93:2a:8c:
                    99:c6:55:7f:88:6c:d8:df:c7:b3:b4:6a:48:79:b2:
                    7f:ab:3a:9c:56:3c:24:cd:79:5d:35:15:28:a0:20:
                    c8:e8:76:5e:73:31:f1:18:d8:ad:17:b2:ed:bd:d7:
                    69:ab:da:ed:65:17:98:11:a4:22:9e:10:98:9a:53:
                    ca:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:48:31:3E:84:84:27:6A:E5:55:81:75:00:CD:3B:CD:03:4A:50:4F
            X509v3 Authority Key Identifier:
                keyid:3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:1a:89:45:a7:d8:21:b0:f0:98:65:72:80:52:36:b1:24:a1:
         f2:2c:6d:46:dc:42:a5:6b:4e:17:67:e1:b0:83:7c:c5:83:b4:
         cf:9c:64:76:3a:97:83:bb:7a:d0:bc:b3:bc:1d:d2:ac:56:f5:
         24:e8:b5:14:da:88:29:82:a4:ff:ab:9a:65:9a:2e:fc:26:c8:
         37:58:87:d1:22:4a:da:66:c7:6d:44:f0:e5:91:a7:de:f8:75:
         c3:0c:ef:c0:71:2b:29:0e:de:38:a5:2c:3d:43:c7:f1:ad:8f:
         41:7f:c1:a2:e1:7b:d5:40:fb:b0:a5:61:eb:88:5b:5a:09:d3:
         5a:63:2d:3b:23:57:c3:c5:83:0b:a8:c1:a3:63:f5:58:31:5d:
         2c:7e:3d:36:61:c2:af:b7:d8:8c:dd:bc:15:4d:17:a5:e1:21:
         69:55:a2:28:18:40:ea:d8:28:67:41:0e:42:86:cd:86:f0:fc:
         15:65:b4:80:89:22:8b:6d:45:0c:16:2b:d2:b4:ab:c1:40:94:
         be:55:36:19:cf:57:c5:ef:c7:0e:0a:58:cb:3e:47:c6:8c:e3:
         80:d6:c5:a6:de:72:32:b5:dc:32:2c:8f:e4:e0:5a:5b:b9:29:
         d1:38:22:28:8c:1a:33:84:40:27:21:91:f9:a7:a0:36:10:9a:
         67:48:cd:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----