Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
File:                     PP8fKxF18GBdAl5RAXNpwcqLGkY.mft (raw, json)
Hash identifier:          8fba9gbKlALN5/A5fAEwbj12ImdqHB1pU4u6q8McuZ0=
Subject key identifier:   BE:97:E5:E8:5D:52:23:D6:C5:40:B4:7F:69:60:AA:1B:27:09:04:D2
Authority key identifier: 3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46
Certificate issuer:       /CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
Certificate serial:       01962DF435FECD901E384E46C41B4CCABF89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:41 +0000
Files and hashes:         1: PP8fKxF18GBdAl5RAXNpwcqLGkY.crl (hash: +4KIkrYO10tYfKZg9YSb/wSic0vAuxppfZywMDLHakU=)
                          2: rEJUWBjq_sWfsa1cNiXjG-c5ovw.roa (hash: ZZH1S0+UsBnMa9sS+gXeBGEXEb7GWoo4AFZx2+gdykk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:35:fe:cd:90:1e:38:4e:46:c4:1b:4c:ca:bf:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cff1f2b1175f0605d025e51017369c1ca8b1a46
        Validity
            Not Before: Apr 13 07:01:41 2025 GMT
            Not After : Apr 14 07:01:41 2025 GMT
        Subject: CN=be97e5e85d5223d6c540b47f6960aa1b270904d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:46:70:c9:e6:12:90:c5:22:9c:80:6b:80:83:
                    8a:bf:aa:40:90:72:3a:d3:2d:b1:4a:29:d9:74:ad:
                    25:ce:3e:60:2b:5b:7b:13:5b:af:91:27:52:cf:90:
                    7f:ce:34:4e:7d:6b:69:55:67:69:f5:01:d8:62:0f:
                    c5:46:e9:fa:07:5f:62:16:16:a2:1e:79:03:ea:b0:
                    14:ea:a9:7e:86:85:a5:7a:a8:4e:17:81:a1:16:2b:
                    f0:90:61:ec:23:db:11:20:56:bd:13:d2:8c:42:f0:
                    b3:3c:86:02:ba:c2:02:79:54:1d:1c:74:81:f8:b8:
                    43:da:81:f0:84:63:a9:f3:85:c4:55:c1:4a:fe:a9:
                    97:31:ae:30:f0:7e:aa:8d:b1:74:87:94:5c:80:54:
                    af:2b:56:ee:0d:9e:70:c8:9f:bd:ef:cc:6f:86:09:
                    55:88:bc:f4:34:41:77:df:81:f5:a9:ef:25:78:44:
                    fa:9a:4c:91:20:19:56:d3:2e:2d:2e:2e:96:c3:08:
                    af:29:26:76:66:af:a3:76:7a:f7:f9:76:2c:8e:5d:
                    07:31:45:78:c1:e1:9f:f7:da:ca:5f:b8:fa:57:2a:
                    f4:f2:c0:35:b1:41:55:b0:e3:20:2a:3b:13:f0:b3:
                    56:92:0b:64:bb:ca:a9:45:cc:1c:3d:67:c9:6f:18:
                    7b:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:97:E5:E8:5D:52:23:D6:C5:40:B4:7F:69:60:AA:1B:27:09:04:D2
            X509v3 Authority Key Identifier:
                keyid:3C:FF:1F:2B:11:75:F0:60:5D:02:5E:51:01:73:69:C1:CA:8B:1A:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PP8fKxF18GBdAl5RAXNpwcqLGkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/ac7949-a1ca-47f4-b393-2bf34c5262e7/1/PP8fKxF18GBdAl5RAXNpwcqLGkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:8f:4f:8e:c0:61:64:fa:ea:bd:f9:1a:16:c3:35:fb:b7:26:
         0c:52:b0:80:91:e3:3f:60:c9:8c:ad:7b:46:d1:17:b2:33:83:
         c7:e0:56:44:d5:4b:88:4c:ba:7d:76:4b:53:f5:9c:c8:f9:b3:
         96:c0:22:1a:2d:ea:fa:e5:d0:fb:58:57:ce:14:b3:7a:b6:e5:
         3b:77:2f:98:ea:63:4f:1f:08:48:e6:72:8a:06:61:ed:65:b8:
         69:d5:c7:e3:0a:a2:4b:de:7d:13:e1:94:8a:d1:90:6c:57:6b:
         01:15:2a:69:ad:4c:5b:05:0a:c1:ef:b0:31:10:b4:0c:07:82:
         a6:af:ab:79:57:8d:21:f0:64:e1:1d:0f:c5:70:de:9d:3d:83:
         93:4a:4d:20:90:3c:1e:f4:23:85:ae:3d:0e:07:09:28:63:f0:
         e6:f5:0a:b3:8c:57:20:5d:ff:4e:ff:5a:75:1b:0c:f8:a0:cc:
         0c:11:d7:03:da:8b:88:0e:fc:65:47:21:69:bc:5b:7c:48:3c:
         38:22:59:1a:2a:d9:6b:5f:64:fc:95:96:d3:00:97:eb:97:92:
         c3:77:0e:62:bf:01:f4:29:03:9d:97:7a:b1:4a:42:78:4a:e4:
         43:d9:c0:4e:9b:51:7c:a2:0b:b3:0a:f3:d6:23:2d:21:73:1f:
         51:07:ad:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----