Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
File:                     Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft (raw, json)
Hash identifier:          Sk071hpu/29/2wo/KEwW23Q7C4odtcsRnK9/OWLnmK8=
Subject key identifier:   51:E5:88:14:9F:05:2A:65:67:30:22:80:AA:5C:FA:B4:BC:E3:41:7D
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Certificate issuer:       /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial:       01962F06FCADEDBD536A112406060B098B5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
Manifest number:          14FB
Signing time:             Sun 13 Apr 2025 12:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:49 +0000
Files and hashes:         1: 5MqBF4i8BqhzlDGimWpaFWipxD8.roa (hash: MYEA5FchPdcQGymALvx1VvMPC8QAmCOTqUn7uw1S3z0=)
                          2: FLnErLvOpzZbsRT_gxw1xkGyG-k.roa (hash: hVcpYnUD1s1paKRtMc3s9Fba/ywgfiiofSMSn9fncl4=)
                          3: HXA-khxqd5TaAqh8eLrHhN2_LU8.roa (hash: zWZYj+sxS+SqeGEcqQJZ7ZzfpiEWQtCnX+c5IlcAdbA=)
                          4: LJXfFjUyeBtIYJYHu_FuhqB1K7M.roa (hash: UNA0suK2iB8VMx8ZOUiNd9zgODojPJ2lTfHJ5gbz9pQ=)
                          5: N5iyTAEpv93HsxrTmem4hLdY3ww.roa (hash: TCSknb2zb5gnp3tc4p1BhXY4e/UAF4G5Usp9zTKGTJY=)
                          6: Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl (hash: uBQeX1HZ6m0yfpxA8yjwC3r+o1x9onSnpWfVPBAxvUs=)
                          7: dpiwVyP36v1YV2afir9h5xUMcuE.roa (hash: YrE4G5icZyg4bgdRocIY+JMcSadk1tZR0cVr4Ds0EB0=)
                          8: fHBWkmSFwq7LIW_ikf6imNT9GPM.roa (hash: vMQgcBUmEy5lwUWbnyfzmlIYcn2OcylWPP/mcEC7Ato=)
                          9: oxxYyMD9-MXd0OWiZhKW-CdMQTw.roa (hash: Y7mHGy+U3U1zSd6zRNzErqyDJ2hjbwn9SB30MoGbyUM=)
                          10: qG-WX1fopXDz0qQT0U9YtbS5nr0.roa (hash: 28PSMJL/ooEpgWs64Lr2agA+bTb7t6T/v6hQPgbSK14=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fc:ad:ed:bd:53:6a:11:24:06:06:0b:09:8b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
        Validity
            Not Before: Apr 13 12:01:49 2025 GMT
            Not After : Apr 14 12:01:49 2025 GMT
        Subject: CN=51e588149f052a6567302280aa5cfab4bce3417d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c6:3d:ca:4e:2d:bc:38:a2:40:04:9b:ed:05:
                    8c:5a:2b:64:33:17:79:1d:dc:40:49:b8:dc:7c:8e:
                    55:5b:e5:8a:5b:d9:d8:3d:28:af:31:31:7b:56:39:
                    7f:3c:1b:55:b4:53:79:40:f0:9e:66:a2:94:fe:0d:
                    1f:33:fa:47:fa:05:53:cb:92:81:2e:27:93:d8:b8:
                    3b:84:e2:8e:6a:7f:9b:1b:86:1a:d1:75:d8:de:d8:
                    46:2f:d7:63:64:77:5a:6e:f4:e6:eb:b6:4b:5e:5f:
                    1d:6f:54:b2:bf:6d:ba:27:c7:fa:89:c5:5e:cf:e2:
                    5c:26:3c:ef:da:f4:0d:66:67:76:f6:41:6f:ab:52:
                    6b:bb:03:f4:15:53:86:65:9a:46:fd:59:b4:e6:e3:
                    d6:46:5f:c1:34:83:42:fe:b8:45:45:6c:dc:d0:c4:
                    d1:79:c0:22:6f:92:62:40:12:68:53:c7:d5:6c:31:
                    dd:60:8b:e4:4c:b8:28:ed:b0:6c:21:c1:a5:26:32:
                    3e:d6:65:37:85:9f:9e:ab:51:cc:24:00:17:9d:a8:
                    f9:bd:53:85:26:71:5b:17:5a:09:44:99:e2:50:e2:
                    f4:98:c8:ea:82:7a:89:7d:8a:9f:3d:15:5f:46:fb:
                    d7:87:c1:05:d9:1c:c9:94:21:1c:2b:74:c3:dc:52:
                    f6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E5:88:14:9F:05:2A:65:67:30:22:80:AA:5C:FA:B4:BC:E3:41:7D
            X509v3 Authority Key Identifier:
                keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:c0:75:9a:db:87:14:fa:73:21:8c:b9:ae:a9:9b:f2:a2:2c:
         00:46:28:79:ac:13:76:67:b6:86:c9:5f:dc:84:7e:3f:91:95:
         60:27:52:b4:21:e1:55:15:0c:c2:7e:79:b9:56:70:1d:be:26:
         d0:8e:ee:f5:0c:9c:42:c0:b9:5c:6a:d5:b0:bf:ce:fc:8b:bd:
         53:73:b1:0a:bd:cc:0e:aa:79:bf:73:21:84:e2:ab:e0:7f:7f:
         34:ae:7e:05:bd:23:8e:89:a5:58:ab:df:b3:1d:3e:d1:e7:de:
         35:8c:8b:e1:53:c6:13:8f:ca:bb:ef:35:13:08:be:3c:e4:74:
         ab:ff:83:d9:8f:bb:12:c6:37:a0:37:1f:31:29:4d:b1:9a:9a:
         f8:fd:dd:e1:65:02:8e:e4:67:c9:71:06:b2:8c:f9:01:e3:fe:
         f8:71:55:28:82:5a:51:db:11:ec:e6:22:e2:09:37:cb:be:4d:
         f1:ea:54:6e:a8:d9:f1:e4:8b:42:0c:47:89:40:02:fd:cb:78:
         a4:34:e5:53:29:4f:8a:97:e6:4b:a2:93:e9:73:6a:74:0c:48:
         09:48:a6:a9:ae:b4:f1:8a:14:ff:41:ea:7a:12:91:59:03:8f:
         59:5c:4a:96:6f:23:d0:ca:25:c5:0a:26:97:14:25:a0:00:10:
         3f:7e:9e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----