Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
File:                     PtQqBIdwVgYBXlow2h5w9Aflnpk.mft (raw, json)
Hash identifier:          KL37kZroifY+pZ3rLPyxNxO+hY+WsNNFqf6JVBQFV1o=
Subject key identifier:   96:03:C5:AF:42:07:11:44:66:8C:E0:5B:6B:1D:A2:A4:24:31:C1:28
Authority key identifier: 3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99
Certificate issuer:       /CN=3ed42a0487705606015e5a30da1e70f407e59e99
Certificate serial:       01962DF45098696582EF8B097541934FA90D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:48 +0000
Files and hashes:         1: PtQqBIdwVgYBXlow2h5w9Aflnpk.crl (hash: 2eD5Z9wSHVpCgxM2tAMJhCOPnbLBSUa6zXUOuGbUxJs=)
                          2: Ygud2H3mQvpplx2m1ZwaXdOogYA.roa (hash: /wnaFbQu+otS41ERWGG+1dFZ6eGw9L5BsokLI2OTM5g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:50:98:69:65:82:ef:8b:09:75:41:93:4f:a9:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ed42a0487705606015e5a30da1e70f407e59e99
        Validity
            Not Before: Apr 13 07:01:48 2025 GMT
            Not After : Apr 14 07:01:48 2025 GMT
        Subject: CN=9603c5af42071144668ce05b6b1da2a42431c128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:53:7a:0b:bd:6e:4a:85:2a:cb:01:4d:c8:a6:
                    7c:ac:28:f3:86:d3:09:a3:fa:d8:9f:46:4c:aa:f0:
                    85:60:a6:c2:4d:31:4f:64:95:8c:8c:15:ec:70:28:
                    9b:b9:18:6f:3c:94:74:a5:1f:b1:cd:52:94:de:26:
                    4e:a6:c9:da:88:e4:2a:a4:fd:c7:4e:c3:ea:b2:44:
                    63:48:02:fc:3b:5f:ed:08:30:1f:1f:b8:f0:71:ec:
                    03:97:37:67:b9:d5:b7:96:ed:ab:50:d6:02:37:9a:
                    9c:be:6c:c4:ab:b2:4f:e5:09:4b:4a:49:22:c7:66:
                    f5:8a:c2:a4:25:61:05:f6:98:55:77:7e:c9:a3:a1:
                    e3:8b:7b:b1:36:b2:9f:84:89:df:48:93:d0:aa:3e:
                    00:b5:0b:e5:17:5e:d7:b2:e8:7f:75:a1:23:ba:13:
                    66:3f:d2:40:a9:19:83:4e:1a:59:ea:4c:5f:eb:80:
                    34:d3:b5:22:ee:c3:a1:00:1b:98:56:00:68:52:5e:
                    ae:3f:32:13:74:87:23:a4:c6:f1:f6:99:1f:3e:03:
                    bd:d2:b6:6f:00:52:b0:a9:10:81:ad:91:02:20:b7:
                    13:15:9a:26:31:4c:ff:f8:fe:eb:90:1b:85:0c:ec:
                    f4:e2:bc:82:46:47:5a:d6:ae:dd:1f:e0:5c:a4:61:
                    62:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:03:C5:AF:42:07:11:44:66:8C:E0:5B:6B:1D:A2:A4:24:31:C1:28
            X509v3 Authority Key Identifier:
                keyid:3E:D4:2A:04:87:70:56:06:01:5E:5A:30:DA:1E:70:F4:07:E5:9E:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtQqBIdwVgYBXlow2h5w9Aflnpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc93b1-064e-44ab-90da-8262539de46f/1/PtQqBIdwVgYBXlow2h5w9Aflnpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:0a:ed:49:bf:b1:71:f1:dd:45:16:ad:da:05:5a:dd:c7:9a:
         a2:49:19:15:d6:fe:ed:75:60:1c:f6:47:1c:28:f9:1c:a1:2f:
         9d:b8:aa:6f:4d:af:9a:74:d4:25:20:b2:d5:c4:f0:1e:95:90:
         41:97:fa:8a:7e:97:c0:22:6b:89:e4:ac:fd:a3:25:22:33:72:
         09:00:9c:21:3d:eb:e2:86:6e:1e:24:4e:dc:1f:b0:fd:c9:8d:
         3e:1c:e1:fc:aa:34:d3:df:01:48:81:04:3f:ab:61:4b:4f:16:
         32:2d:86:54:a2:d0:fc:2b:f3:36:b4:2e:3d:c0:ee:52:e2:28:
         f5:ba:28:ef:21:42:a5:66:1b:28:4a:1a:e1:dd:b8:c6:26:a2:
         49:07:8f:df:79:d6:9f:55:4e:15:0c:ea:a8:49:b4:9e:70:6c:
         90:92:b2:33:2e:86:33:e7:fe:c4:15:37:b2:d6:cb:56:57:09:
         5f:6e:38:9f:52:87:e1:24:15:f5:54:3a:c2:2e:02:7c:50:8a:
         1c:a6:10:30:31:87:d0:37:9b:db:37:27:ab:5f:36:40:b8:6a:
         e6:95:3f:4d:fc:39:d8:b1:73:72:aa:20:a0:a0:c5:ce:dc:58:
         99:bd:59:cd:92:74:f9:89:f3:d2:df:68:87:8a:77:e1:3c:2a:
         e8:23:5b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----