Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft
File:                     P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft (raw, json)
Hash identifier:          J2525UBQNip97v+NxEhd1KZLC/m8KD/j/SrCepcr85o=
Subject key identifier:   BA:6E:73:6F:5A:42:AD:B3:02:A7:BD:D3:FB:34:D3:9B:0C:F9:FC:FE
Authority key identifier: 3F:81:A8:E8:C7:5B:58:F7:D1:EF:D4:C3:E6:52:2D:27:86:3F:9C:CF
Certificate issuer:       /CN=3f81a8e8c75b58f7d1efd4c3e6522d27863f9ccf
Certificate serial:       01962ECF646779F4F50534546E47FF3269DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P4Go6MdbWPfR79TD5lItJ4Y_nM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:05 +0000
Files and hashes:         1: P4Go6MdbWPfR79TD5lItJ4Y_nM8.crl (hash: LzbOjj0Q6bO8eTpxID6MRc88yiW65cAk5hDR1FFOTwo=)
                          2: xxFhvD1_C6pipJEBTKl033yHEF0.roa (hash: wMvUINT+XWfdQDveaENdYgbkPPqi3fpmXNh+RaQEiM0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:64:67:79:f4:f5:05:34:54:6e:47:ff:32:69:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f81a8e8c75b58f7d1efd4c3e6522d27863f9ccf
        Validity
            Not Before: Apr 13 11:01:05 2025 GMT
            Not After : Apr 14 11:01:05 2025 GMT
        Subject: CN=ba6e736f5a42adb302a7bdd3fb34d39b0cf9fcfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:19:20:42:b0:bd:27:13:06:41:5d:ce:d1:1a:
                    b9:5e:e1:a8:25:ae:bc:29:7d:7f:e7:7f:f6:b7:36:
                    e0:fa:39:31:72:81:7c:d3:2f:12:bd:ae:87:45:8d:
                    92:65:36:50:6b:d0:78:17:f3:74:af:03:7e:f9:ff:
                    6f:5d:a1:a1:71:00:b6:9d:2d:04:c4:37:cc:9a:8a:
                    d7:61:64:31:f6:c6:9d:7b:b3:10:c5:96:a3:14:71:
                    0a:97:ea:a1:2a:c0:ca:c6:a2:64:3f:3f:85:93:19:
                    ec:2a:fc:11:2b:81:2d:59:d8:c6:f8:51:d7:a6:da:
                    d5:ab:31:f4:01:8f:23:3e:f4:b6:4c:fc:fd:c5:a4:
                    8d:9b:ff:1c:9e:a7:27:e8:d7:31:52:5a:f9:3c:a7:
                    66:7a:79:9d:35:a7:06:98:40:ac:d4:8e:d8:07:9f:
                    53:ee:10:d2:97:23:da:b3:aa:fb:08:90:71:8d:24:
                    92:fa:c2:3b:f3:e2:e6:1d:33:30:73:34:be:c0:67:
                    52:7a:5c:a5:8a:01:32:d4:d6:d6:e4:a7:30:c7:c5:
                    79:b3:0b:08:bc:73:91:f3:00:83:53:dd:d3:73:7c:
                    22:15:1b:26:c7:a1:d9:78:30:09:a7:13:ad:5e:e3:
                    ce:b3:57:d2:1a:c0:f0:b2:a4:e0:35:2d:91:a8:3e:
                    1e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6E:73:6F:5A:42:AD:B3:02:A7:BD:D3:FB:34:D3:9B:0C:F9:FC:FE
            X509v3 Authority Key Identifier:
                keyid:3F:81:A8:E8:C7:5B:58:F7:D1:EF:D4:C3:E6:52:2D:27:86:3F:9C:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4Go6MdbWPfR79TD5lItJ4Y_nM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/eb7f7e-a880-497b-b54c-b708c40a667f/1/P4Go6MdbWPfR79TD5lItJ4Y_nM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:d4:bc:6a:7f:5e:92:55:d0:00:e5:2c:9d:1c:53:22:a7:83:
         7a:f9:f0:78:71:e7:b7:88:ce:a4:54:31:d4:d4:09:91:7c:0e:
         c7:89:e1:14:b5:43:8c:c5:59:19:98:82:80:f7:66:b1:a6:fa:
         87:07:62:85:8a:78:bf:12:0f:04:25:78:e2:62:e3:d3:50:ac:
         bf:7c:09:0b:b2:58:24:99:b7:da:6d:1e:1e:e8:08:97:74:ef:
         fa:68:d6:25:c3:6c:4a:08:48:f5:b2:66:24:e0:f6:ee:78:c2:
         31:44:22:69:1b:a2:6a:c6:6f:87:db:d5:8f:47:88:74:86:7e:
         9f:ac:70:58:f3:b3:e8:0d:4b:13:41:dd:cc:b9:45:a8:71:48:
         a9:fb:0e:5b:23:08:90:8a:a0:ae:1a:cb:1d:ce:5d:0e:d0:ce:
         bb:b7:39:a5:b2:7a:f2:d6:33:08:85:4f:2f:aa:3f:bb:97:c6:
         87:bd:39:73:5f:0e:64:c0:33:a4:a1:62:be:ee:f1:02:ea:83:
         47:83:25:e8:83:66:d6:cd:d2:56:80:b5:55:4b:7e:91:33:57:
         d0:b7:7b:f9:fe:d5:a3:7e:80:da:e2:8b:9d:57:40:f1:c6:d0:
         d2:32:8e:da:39:fb:0d:94:4d:d5:89:9a:a4:2d:51:9f:a0:ec:
         8f:7c:a1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----