Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
File:                     PXD-HXX32nbS49w0T7HwsLad4AE.mft (raw, json)
Hash identifier:          gtB9ch8aHHJwefLTA+q/0EL2qqkWgK1rJ+93Zsi80zQ=
Subject key identifier:   50:DF:FF:E2:47:72:6E:4B:1E:FF:5B:66:D9:42:C2:92:01:8B:A4:87
Authority key identifier: 3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
Certificate issuer:       /CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Certificate serial:       01962E98EBB11794324ABBE214E2422916A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
Manifest number:          1458
Signing time:             Sun 13 Apr 2025 10:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:35 +0000
Files and hashes:         1: PXD-HXX32nbS49w0T7HwsLad4AE.crl (hash: xfb6VJ3kieITn0IxE9qCjZMg1oHYq7pEi/cR1a6MBkg=)
                          2: qcINREJGIFWN3YXOgtNuqjCBfnY.roa (hash: 1gG5XU0DGFtKFXRvNOA96XCA/EPC9XB/rEykj9F+ocs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:eb:b1:17:94:32:4a:bb:e2:14:e2:42:29:16:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
        Validity
            Not Before: Apr 13 10:01:35 2025 GMT
            Not After : Apr 14 10:01:35 2025 GMT
        Subject: CN=50dfffe247726e4b1eff5b66d942c292018ba487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c5:22:c3:ad:35:fb:b3:04:df:9f:ce:ed:85:
                    fb:ed:f3:97:8f:5f:23:e2:66:16:39:93:0f:a7:ad:
                    c9:d6:34:07:24:8a:b1:47:2a:c0:27:ac:ae:69:6b:
                    cf:5e:fa:f1:e0:e0:22:5e:c1:84:a4:37:3b:48:9a:
                    a4:9a:8c:f1:36:08:8e:de:90:1e:15:a3:00:f9:88:
                    31:e2:d1:1c:98:dc:b4:fe:72:a7:19:61:c1:0a:ed:
                    3f:83:2d:4b:a2:cf:98:0f:83:36:46:57:ba:81:22:
                    85:9b:63:2d:a4:ce:17:93:46:8b:c4:c4:62:be:10:
                    8e:7b:39:e3:84:46:9a:fc:fe:87:f9:10:fa:be:be:
                    d2:2c:93:1c:f6:c0:e6:09:be:66:db:0e:21:d3:d5:
                    66:22:e9:4d:40:68:93:f1:5e:ca:6b:d5:b7:e4:d7:
                    12:60:6b:93:43:87:7f:32:7c:e3:1d:63:1f:cb:6a:
                    09:80:66:53:b1:04:c5:a0:7f:78:ba:40:9f:fa:0a:
                    cf:4b:aa:88:00:4a:a5:65:10:37:24:5d:12:c6:cd:
                    65:76:9a:ef:1c:91:d2:3f:22:6c:0b:9a:5b:57:ac:
                    6a:76:77:b6:a5:bb:06:47:9d:77:f0:0c:5a:c5:70:
                    a1:9c:b3:82:5b:aa:5f:47:ca:7b:b6:bd:17:70:77:
                    bf:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DF:FF:E2:47:72:6E:4B:1E:FF:5B:66:D9:42:C2:92:01:8B:A4:87
            X509v3 Authority Key Identifier:
                keyid:3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:35:f4:81:a0:e3:d7:af:74:06:70:19:9c:83:2d:cf:f3:da:
         17:47:e8:19:6e:0f:5a:6d:c4:5e:3e:4a:46:6d:37:12:4c:60:
         97:bb:bb:36:5c:4f:44:03:b9:06:fb:67:19:0f:60:3b:a3:90:
         cd:12:e1:4a:4e:9e:69:e7:31:43:6a:5b:ec:5f:0a:cb:03:34:
         73:87:e9:b0:b8:07:99:e4:67:cd:36:b2:90:0e:0b:f4:d1:85:
         63:5f:ba:1a:56:c6:0b:6c:29:6e:18:39:86:81:be:b8:37:5c:
         1b:96:b8:d0:b8:c6:dc:80:95:43:96:c2:06:8a:83:bd:91:2a:
         9c:94:4c:b6:db:ce:c5:5f:f1:00:70:c2:f2:e9:8b:d5:1f:ed:
         a6:a8:52:e8:ac:42:28:89:41:32:51:ee:89:89:2d:26:86:54:
         c8:4e:be:23:64:97:55:ab:ad:f9:83:87:34:1c:ae:fd:f8:75:
         78:69:76:4e:ce:d3:9b:a9:9d:bd:ad:5a:66:85:16:49:96:82:
         85:29:f5:27:54:ed:07:ba:74:22:ce:eb:fd:f9:72:32:f9:8c:
         c9:31:4e:2e:4b:b0:91:e4:79:0b:4d:8d:5f:1e:3e:87:96:65:
         23:43:7e:3d:2e:ad:98:8f:0c:36:cf:49:d0:7d:ba:1a:c5:b9:
         51:34:aa:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----