Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft
File:                     pnYhghhEiOf3hxIqcYCZfOjpDUw.mft (raw, json)
Hash identifier:          EiiIGVxE0nOesdL2m+5tBaTo912exkDhGPoS6kiBmhc=
Subject key identifier:   68:41:32:C1:D3:56:AF:DD:B8:D9:22:09:3C:A2:C5:34:BE:0E:7E:B1
Authority key identifier: A6:76:21:82:18:44:88:E7:F7:87:12:2A:71:80:99:7C:E8:E9:0D:4C
Certificate issuer:       /CN=a6762182184488e7f787122a7180997ce8e90d4c
Certificate serial:       01962E2B3F98C41CB9196D03C88AD7EA2058
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pnYhghhEiOf3hxIqcYCZfOjpDUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft
Manifest number:          01AF
Signing time:             Sun 13 Apr 2025 08:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:48 +0000
Files and hashes:         1: pnYhghhEiOf3hxIqcYCZfOjpDUw.crl (hash: QjMuibAYJcBtj6U8HBz9NDQ5gwZkCUsYgWrvYXwcO1A=)
                          2: yNyV4cceOnlRqYhPeAllARW73Jw.roa (hash: 8x/01ij81KHBd33TvjxnJ5OVDsgBIBKqbtRkLV2shYM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:3f:98:c4:1c:b9:19:6d:03:c8:8a:d7:ea:20:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6762182184488e7f787122a7180997ce8e90d4c
        Validity
            Not Before: Apr 13 08:01:48 2025 GMT
            Not After : Apr 14 08:01:48 2025 GMT
        Subject: CN=684132c1d356afddb8d922093ca2c534be0e7eb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:eb:3b:83:26:45:2b:67:54:6d:f7:0d:c1:f0:
                    d2:39:e9:dc:8e:d2:69:aa:9c:48:21:36:d2:5a:ef:
                    57:45:ba:cd:6b:6a:d3:05:39:90:2f:97:9a:91:11:
                    0b:64:0b:df:18:11:bc:a6:58:0b:b5:07:eb:06:25:
                    37:43:e6:de:60:af:00:2a:b3:e5:6a:e7:65:01:6f:
                    e0:3b:9f:a6:f4:ce:96:75:9c:40:a9:73:5c:87:34:
                    e9:ae:92:eb:bb:86:c4:b0:5b:01:0a:48:fa:8b:c7:
                    b4:c5:33:aa:8e:06:d8:73:b3:de:96:28:5e:7c:83:
                    c4:42:5f:d6:3c:f7:e7:0f:00:80:f5:7c:8a:0e:1d:
                    f2:da:28:ef:6f:22:cb:9e:c9:ab:e8:13:17:e1:04:
                    a2:19:9e:d4:aa:4b:e8:56:22:dd:c8:e7:73:3c:12:
                    79:76:4a:07:c5:e2:05:68:ca:0f:5b:d7:51:bc:38:
                    8b:ae:b8:85:b7:df:66:6f:0d:1a:96:6b:f9:14:27:
                    ed:3d:4e:65:95:1f:f8:30:8b:e7:d9:97:01:16:82:
                    7b:e2:ea:db:32:c9:03:1d:18:0d:28:e6:70:f2:4c:
                    41:40:db:e2:77:4e:20:a6:3f:9e:d3:26:e3:65:99:
                    1a:b5:b2:3f:09:f8:ba:e8:f8:df:81:2b:3b:75:77:
                    b7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:41:32:C1:D3:56:AF:DD:B8:D9:22:09:3C:A2:C5:34:BE:0E:7E:B1
            X509v3 Authority Key Identifier:
                keyid:A6:76:21:82:18:44:88:E7:F7:87:12:2A:71:80:99:7C:E8:E9:0D:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnYhghhEiOf3hxIqcYCZfOjpDUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/2f319e-2685-4427-aec0-ed60bab7572f/1/pnYhghhEiOf3hxIqcYCZfOjpDUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:0a:a5:bf:af:b2:52:80:01:dc:7e:36:cf:75:51:a3:5b:7a:
         a9:6b:22:8d:97:19:82:3a:d8:86:9e:54:9a:e5:b6:a2:68:c1:
         8c:df:85:02:c6:4b:ee:7a:8e:2a:b7:45:e7:07:52:e2:5e:82:
         4f:bf:76:b6:43:28:e5:bc:a0:1d:86:7d:a9:20:83:a7:4c:46:
         d8:73:b0:a3:25:2e:55:8f:82:58:b0:7a:f3:eb:8a:92:03:dd:
         3c:08:5d:7f:e6:8d:8a:32:b5:e7:6d:5e:5b:9c:9e:f5:d5:83:
         3c:0b:5c:fc:0f:b1:a7:da:38:52:26:8c:c2:a6:f2:f0:84:20:
         90:79:b5:02:17:2f:6e:df:65:81:9e:dc:21:cf:d7:0c:e1:7c:
         65:a7:db:d7:68:05:bf:03:62:96:92:fd:86:a4:f2:44:ac:a7:
         5f:d6:64:5b:a5:5f:5b:52:5e:ee:ec:9a:f1:49:97:76:fd:cf:
         66:fe:d8:13:7b:a1:45:98:09:43:6c:3c:65:93:18:fa:ad:ab:
         d9:0c:d2:aa:37:76:19:a3:e5:ba:6a:b1:3e:f8:a9:ad:7d:ab:
         cb:54:ed:45:f8:b3:3b:ce:12:b6:05:72:98:0f:9f:45:ea:d9:
         f6:2f:34:3e:42:64:e0:bb:7b:e7:2a:88:37:75:64:d2:28:5a:
         45:5d:9e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----