Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
File:                     PWVWSolU1q6VL4ofevbBz7p4CUo.mft (raw, json)
Hash identifier:          8So2WwPLY/N9VpQMwBg0Q0dM3uNCmKIa2m1mUTMWjrI=
Subject key identifier:   48:FB:54:D5:7F:4C:44:A9:E8:0A:04:5C:43:53:C9:B3:15:FF:FE:FF
Authority key identifier: 3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A
Certificate issuer:       /CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
Certificate serial:       01962E61A6974C476AD1C4C83D72C51D7FEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft
Manifest number:          13E6
Signing time:             Sun 13 Apr 2025 09:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:13 +0000
Files and hashes:         1: PWVWSolU1q6VL4ofevbBz7p4CUo.crl (hash: 7imAaqzXhr3rEJ5NlP4DzkEInXuBJ6cuoSJJtGOS6vg=)
                          2: ev3ATXcLdak2upi-q5CN2dVa8sw.roa (hash: Pui9NepJvKzqfzXLpJKX8HaOdkpWn4dOU8GbtL7nT0M=)
                          3: jnu9mPgopzA31RWkYxNmWkz3kyg.roa (hash: cra9mYolkxUmIpM2wu5PjhAJgTEYoxZ+ixlWu91VIrU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a6:97:4c:47:6a:d1:c4:c8:3d:72:c5:1d:7f:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d65564a8954d6ae952f8a1f7af6c1cfba78094a
        Validity
            Not Before: Apr 13 09:01:13 2025 GMT
            Not After : Apr 14 09:01:13 2025 GMT
        Subject: CN=48fb54d57f4c44a9e80a045c4353c9b315fffeff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f9:80:e0:fa:da:7e:e5:34:80:e5:e4:ef:ba:
                    44:26:ce:c3:54:14:2e:df:96:f1:c6:d3:72:7c:c1:
                    b5:da:0d:39:57:6a:cd:24:fd:ba:e7:4d:04:6a:2b:
                    b6:1c:59:2d:58:42:44:2f:11:42:7a:57:1d:85:07:
                    f8:a4:fe:f2:49:5d:da:d8:87:12:25:7b:d0:4e:71:
                    03:5c:7a:58:e4:c0:cf:40:c5:a4:41:c6:e9:5e:2c:
                    2c:10:e2:32:7c:00:ed:e3:2f:67:a4:0b:27:16:4a:
                    a6:55:ca:aa:c0:f2:cf:a6:28:8a:29:8e:f0:71:b0:
                    b9:9f:f4:82:b5:79:14:e7:31:f5:50:09:c6:11:0a:
                    fd:2c:01:e3:89:24:12:25:90:c2:df:7f:9b:c8:65:
                    92:50:d7:60:a3:59:cc:e2:d9:61:f3:71:48:ef:8f:
                    9a:7f:b7:8a:5e:fc:ad:2d:c3:c0:1b:ee:15:3c:5a:
                    ca:92:8a:c7:d3:23:01:91:a1:39:2f:87:48:18:d9:
                    7c:4d:aa:1b:73:6b:ab:e1:76:f9:59:53:2e:08:d9:
                    e2:63:98:1f:dc:aa:1e:a6:3d:81:ca:98:e7:0c:94:
                    6b:45:7e:9a:54:c2:30:b9:f6:f8:ac:0d:40:b9:fc:
                    01:5d:eb:52:cd:59:db:ef:56:2e:34:d7:40:14:6c:
                    0c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FB:54:D5:7F:4C:44:A9:E8:0A:04:5C:43:53:C9:B3:15:FF:FE:FF
            X509v3 Authority Key Identifier:
                keyid:3D:65:56:4A:89:54:D6:AE:95:2F:8A:1F:7A:F6:C1:CF:BA:78:09:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWVWSolU1q6VL4ofevbBz7p4CUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/411877-b51a-464a-ad9e-104b14f5b0f8/1/PWVWSolU1q6VL4ofevbBz7p4CUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:13:fb:94:f8:32:ac:90:b8:58:02:1e:3a:79:5d:35:6a:3c:
         0a:f3:a0:87:f4:2f:3b:3d:39:83:ce:43:84:45:ec:f0:fa:79:
         7a:91:9b:f8:1a:7d:59:a4:0e:04:2f:63:fb:dc:71:04:ef:ac:
         62:9a:82:23:65:c3:86:59:5c:e2:ba:7a:a8:9e:05:b1:eb:d6:
         33:1c:1c:1e:45:54:8a:f3:45:e2:3a:75:d8:23:aa:ab:ce:3f:
         2c:25:5c:53:5d:0e:91:6c:64:24:8e:77:d7:7c:a2:5b:de:a2:
         dc:04:67:df:aa:d3:f1:33:11:51:84:b2:cd:9b:a6:67:13:d8:
         a4:c9:43:b6:f9:c4:8a:dd:9e:25:f4:a5:2f:d8:b8:aa:5a:9b:
         5e:8b:06:8c:d5:7e:e5:ef:8a:4a:3d:f0:97:0d:51:b2:26:86:
         bc:bd:1b:03:17:39:37:e6:87:ed:8c:78:ef:75:62:ba:e7:04:
         70:4e:45:df:ac:91:f4:f3:03:52:b6:8b:80:76:a5:c1:f4:4a:
         ce:c6:c4:ba:82:62:e8:f6:8d:04:e2:7f:86:4b:39:38:08:05:
         84:a7:d3:9d:2d:f4:4b:2d:dc:0e:4e:21:c3:31:4e:e3:ea:ae:
         52:4d:58:e0:4e:5a:1e:fc:15:05:55:fd:4f:27:2b:18:ed:d3:
         db:28:bd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----