Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
File:                     PZQks8jnL3RqWesZlFWqNkajpFc.mft (raw, json)
Hash identifier:          L28ZOs23JtCR2ydlPf1fiLIFtV9yAAUk+XgmpIU2gCY=
Subject key identifier:   0C:F4:6C:18:CD:A4:77:4A:B1:73:F5:2F:A2:34:5D:99:95:90:9D:7C
Authority key identifier: 3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57
Certificate issuer:       /CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
Certificate serial:       01962F74B08A4AB58EE9576117900CB12DCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:38 +0000
Files and hashes:         1: PZQks8jnL3RqWesZlFWqNkajpFc.crl (hash: fjOoOTZFxuwvzDk9coLFaes2cd9wAthaTqQAu9GqT8c=)
                          2: QIZ7oB864tCgRt_o70Ipdd0FOK0.roa (hash: m8Sbl87AQlvrLt/hOAausP00tdMD076gdUCeqvLuA8c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b0:8a:4a:b5:8e:e9:57:61:17:90:0c:b1:2d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d9424b3c8e72f746a59eb199455aa3646a3a457
        Validity
            Not Before: Apr 13 14:01:38 2025 GMT
            Not After : Apr 14 14:01:38 2025 GMT
        Subject: CN=0cf46c18cda4774ab173f52fa2345d9995909d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b0:97:9b:90:d4:be:8f:a7:59:aa:19:8e:79:
                    7a:87:6c:83:87:86:b0:f5:01:75:fe:38:3e:e2:75:
                    54:56:0e:8f:73:65:b5:db:40:09:4d:4a:d0:03:20:
                    9a:c7:25:d9:c7:54:16:6e:1c:20:b5:5e:b5:dd:98:
                    94:68:f7:11:f3:b7:05:98:66:35:48:d9:34:fe:25:
                    f3:70:ac:1b:a1:7e:1b:ba:62:20:6a:d3:59:70:94:
                    9b:10:c0:2e:ea:46:42:67:4d:58:eb:ad:de:0b:55:
                    d5:14:5c:de:14:f2:0a:d3:97:98:53:bb:93:68:c2:
                    34:0c:f3:2b:21:69:60:9c:b5:4e:47:b2:c6:4b:4b:
                    cd:be:db:23:89:7f:ed:ee:0e:73:d1:30:52:8c:20:
                    74:fb:04:c3:87:5c:f7:fe:b0:47:6b:d5:ea:b5:e0:
                    bc:87:38:7f:6c:6a:64:75:22:7a:2d:3f:f4:54:eb:
                    8d:e4:85:b3:66:61:9f:ba:d5:7e:64:41:83:48:08:
                    47:5b:65:33:3a:48:a7:a5:48:18:e2:c8:cf:47:c8:
                    e7:2c:e6:cf:40:93:11:ad:a1:6f:8d:f3:1a:db:7a:
                    25:60:28:7c:e1:0e:ed:c9:45:b8:25:08:ea:71:06:
                    6a:e3:53:a8:c2:7b:cc:03:8e:34:e1:f7:af:ca:d0:
                    dc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F4:6C:18:CD:A4:77:4A:B1:73:F5:2F:A2:34:5D:99:95:90:9D:7C
            X509v3 Authority Key Identifier:
                keyid:3D:94:24:B3:C8:E7:2F:74:6A:59:EB:19:94:55:AA:36:46:A3:A4:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZQks8jnL3RqWesZlFWqNkajpFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df2947-cd05-4405-949a-6a8033dcbe1c/1/PZQks8jnL3RqWesZlFWqNkajpFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:d6:5e:5a:86:c0:d7:e7:d9:c0:05:61:4a:8e:84:f8:b6:33:
         4d:d6:e6:a0:39:ce:c8:8d:e0:fb:89:d8:46:72:d0:1f:4f:a6:
         c9:cf:05:f3:82:c2:fa:6a:36:aa:f6:81:9a:50:5e:85:d2:fe:
         85:e9:88:f6:ea:f0:3c:2a:cf:b9:c1:c2:44:27:01:5b:38:57:
         84:57:4f:dd:ed:74:88:9c:82:3f:b1:31:f4:93:17:cb:74:d9:
         08:05:a6:15:97:2a:d7:22:4d:88:d4:66:6b:f6:e7:ea:a0:01:
         e3:53:7c:a4:7f:11:8a:51:b0:cf:3c:70:34:c7:e1:5f:55:bd:
         c8:29:b3:d7:e6:94:26:76:34:36:35:cf:00:60:3f:56:0e:94:
         ee:16:08:f3:7b:0d:f7:c2:a2:26:5b:20:ed:d1:e6:88:f5:1e:
         b8:25:10:ce:d1:a5:50:ee:9b:3b:02:d1:99:fa:ae:d1:f3:83:
         b8:2a:db:be:34:af:93:67:3c:f7:54:4d:ea:12:61:6e:51:56:
         3d:e1:2c:60:89:49:7a:79:2c:38:d8:d7:d6:55:51:76:4c:b2:
         0a:2d:38:39:3e:22:37:4f:b1:71:66:6e:51:4e:fd:63:b8:e1:
         32:d6:cd:99:f4:19:9a:57:a2:c1:65:ba:0e:27:84:e0:a3:b6:
         d5:5f:22:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----