Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.mft
File:                     PXZ9X-fvPyKL3b3loOXBgAb3VAg.mft (raw, json)
Hash identifier:          9/1hfggHaxJ5EZQL195rFVhuAYdgga/GriO5zqxeRoA=
Subject key identifier:   26:0C:61:F8:76:FF:53:D0:AE:3F:7C:78:85:4E:E8:89:94:87:20:BB
Authority key identifier: 3D:76:7D:5F:E7:EF:3F:22:8B:DD:BD:E5:A0:E5:C1:80:06:F7:54:08
Certificate issuer:       /CN=3d767d5fe7ef3f228bddbde5a0e5c18006f75408
Certificate serial:       01962FAB8B667808F429CD8C3247FC0AB107
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PXZ9X-fvPyKL3b3loOXBgAb3VAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.mft
Manifest number:          0D71
Signing time:             Sun 13 Apr 2025 15:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:33 +0000
Files and hashes:         1: J60Pw4hyKKjQhqi1eSTzFtauoi0.roa (hash: Pts66hPVy/S0JFZfVc88DLunALgdL+k1upaL/I3M97g=)
                          2: PXZ9X-fvPyKL3b3loOXBgAb3VAg.crl (hash: JvVopFKiM7diPlIJ4zjt5IuGf9qxQ+2ixAVNMKV6lvk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8b:66:78:08:f4:29:cd:8c:32:47:fc:0a:b1:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d767d5fe7ef3f228bddbde5a0e5c18006f75408
        Validity
            Not Before: Apr 13 15:01:33 2025 GMT
            Not After : Apr 14 15:01:33 2025 GMT
        Subject: CN=260c61f876ff53d0ae3f7c78854ee889948720bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:85:b1:bb:60:26:f6:86:79:9e:b5:18:ee:13:
                    ae:64:61:41:c8:f7:dd:bf:cd:ec:d4:eb:3e:8e:d3:
                    6f:bd:20:70:c5:a6:85:ba:57:9c:17:c5:6d:9e:f0:
                    44:c9:a5:e5:e0:52:d7:23:00:32:0b:dd:59:a9:3d:
                    19:ea:17:bc:01:a1:9d:db:8d:33:35:98:7e:30:bf:
                    c7:39:5c:71:09:16:3b:a7:b0:12:37:bc:9c:8c:0a:
                    03:e1:4c:e8:cb:a1:7a:43:0e:6a:39:84:c4:35:7a:
                    12:c6:31:50:dc:36:ca:45:0d:4d:09:64:6c:3f:4d:
                    57:00:de:d0:8e:e1:f9:cc:fa:2f:66:c4:dd:5c:f5:
                    db:4c:f3:2f:36:4d:83:5d:e3:ca:26:ed:13:1b:07:
                    0a:82:ca:8e:43:b2:a6:e3:f6:f6:02:63:19:9a:c2:
                    cb:65:8d:03:5c:f4:84:98:e8:4b:43:56:9e:33:c6:
                    5c:52:2f:9a:9d:e1:d8:d8:01:ed:7a:65:c6:25:55:
                    96:25:47:9f:49:4f:00:4c:f3:1d:58:a0:a3:49:50:
                    7e:1f:21:ab:6c:d0:0b:13:97:db:87:19:a9:a7:bf:
                    28:96:ed:44:54:e1:cb:c7:98:5e:b9:95:e6:8a:35:
                    18:8c:56:fa:3f:d3:2a:10:88:f3:68:34:5a:ae:b7:
                    dd:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:0C:61:F8:76:FF:53:D0:AE:3F:7C:78:85:4E:E8:89:94:87:20:BB
            X509v3 Authority Key Identifier:
                keyid:3D:76:7D:5F:E7:EF:3F:22:8B:DD:BD:E5:A0:E5:C1:80:06:F7:54:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXZ9X-fvPyKL3b3loOXBgAb3VAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/074982-db01-4747-9d12-ff72e4fa93a5/1/PXZ9X-fvPyKL3b3loOXBgAb3VAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:a5:f1:56:a9:0e:ca:32:c9:ae:06:0e:90:19:1e:fe:dd:4a:
         51:85:ee:91:8c:df:42:70:5f:a4:27:9b:26:1d:01:11:45:ad:
         b0:0f:cc:e6:06:e5:32:a7:7f:95:36:47:b0:f3:79:1f:31:9f:
         4c:a6:60:36:28:5d:64:11:07:1b:70:76:0b:45:d9:7e:5f:e8:
         c7:ea:f1:11:f8:5e:3b:ad:88:38:9a:52:40:71:a5:5f:f8:ed:
         6a:a2:10:e7:ed:73:e8:5a:83:98:36:03:bb:d1:14:ff:16:61:
         77:f1:ac:44:21:78:d9:a2:45:1d:e9:2c:bb:16:be:8b:fd:64:
         90:30:f0:e4:de:96:e2:0d:32:ea:d3:b0:d1:e1:c4:5b:17:7f:
         6f:bb:b7:6d:8a:51:d1:a7:80:35:a4:c6:cd:71:0b:36:19:47:
         5d:f6:35:82:cb:36:d1:8d:58:eb:ea:8e:51:72:92:1c:17:e8:
         0a:fd:a3:c7:36:0f:8b:60:0e:48:d4:03:7e:95:8c:36:e3:72:
         4f:d4:c6:89:47:49:bb:49:c1:6f:e3:af:63:6b:20:25:93:76:
         f8:73:1a:6b:0c:ae:ae:09:78:cf:e4:b8:7f:80:88:e2:86:6c:
         6d:56:e5:64:39:a4:12:6c:2f:b1:e9:d4:d6:ae:36:74:59:66:
         39:4d:3d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----