Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
File:                     PXud_6rjPsLPGbWtTknB6esdnWQ.mft (raw, json)
Hash identifier:          BXGGUp0vesJMt/G9or6zn7OPGPITJkmW0JiIjKLfzQo=
Subject key identifier:   A5:89:7E:F1:AE:21:7E:D9:23:43:77:95:EA:A4:72:2F:71:84:50:DC
Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64
Certificate issuer:       /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
Certificate serial:       01962FAB1307DD0599CC6086156D37CA0E02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft
Manifest number:          012B
Signing time:             Sun 13 Apr 2025 15:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:02 +0000
Files and hashes:         1: 3FVtAmT4CuSQyPiethz-XgOvP58.roa (hash: IEGrgBrOkw8YlrSrNv8kZ3M0U4oFphY6duIZ/wFLP30=)
                          2: ChRH7dBDxb1weLGvVRfQis9Rg3Y.roa (hash: wO0mTzTihbQlap/EisW3oXQUnWCtN3yf2lFQECPIAtE=)
                          3: PXud_6rjPsLPGbWtTknB6esdnWQ.crl (hash: PRO9XkqMl71Z9mZlodxN87CJipvVZi1L+tOUU2nJv6w=)
                          4: ZA1mwjKR7_7569CyCMJfpDsJl3M.roa (hash: HYD+j34t1ndEQo/JB/oE14Ibls9UlENhpbw/0fKKgMw=)
                          5: lThuEEXjbOk9kIBiQn4XNJSri60.roa (hash: saUcIO3Pzwx9suP3W1g5k4dgT0dO1lpuD0PTK3qh6JE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:13:07:dd:05:99:cc:60:86:15:6d:37:ca:0e:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64
        Validity
            Not Before: Apr 13 15:01:02 2025 GMT
            Not After : Apr 14 15:01:02 2025 GMT
        Subject: CN=a5897ef1ae217ed923437795eaa4722f718450dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ad:10:d0:b6:2f:42:72:4f:f1:dc:74:21:4d:
                    08:55:a2:7f:cc:d1:c0:be:7c:ed:85:4c:ac:64:3f:
                    cd:41:67:2c:eb:ce:d3:ad:55:4f:32:a5:e7:b3:37:
                    33:d3:26:50:41:bf:ed:3f:19:03:89:d9:c4:95:86:
                    95:19:fc:eb:6d:dc:b9:99:eb:4e:80:56:61:2f:8f:
                    94:ea:4e:a3:40:95:ef:45:17:0f:8c:80:03:a9:92:
                    84:3d:79:97:56:f6:c6:29:3b:41:0a:8a:15:51:f7:
                    c5:56:6f:97:c9:9c:1b:cc:82:ae:08:0d:27:a7:a9:
                    6b:4b:e5:e2:ad:41:2c:6a:cb:14:52:78:12:46:7c:
                    6f:21:ec:83:d8:eb:de:20:38:58:f9:20:a1:f8:14:
                    dc:98:15:cf:9b:34:af:d4:63:a0:3c:28:50:ee:c5:
                    4e:b2:11:45:a7:24:4f:15:8c:45:05:46:52:18:42:
                    69:40:61:94:3e:5c:2e:6c:a3:10:66:1c:7c:bd:f5:
                    a2:4f:29:56:92:86:09:dd:f4:a2:43:6c:30:9f:d9:
                    32:64:75:bb:7a:74:c2:b6:c9:f2:dd:f7:d4:86:14:
                    e5:8e:bf:4b:7d:17:83:a3:20:90:f5:54:3c:36:82:
                    f3:dc:2d:0d:5d:c9:9f:5b:a7:59:17:39:45:9c:49:
                    eb:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:89:7E:F1:AE:21:7E:D9:23:43:77:95:EA:A4:72:2F:71:84:50:DC
            X509v3 Authority Key Identifier:
                keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:35:96:db:75:c2:c0:57:5b:c5:38:3b:83:53:b7:5f:8e:7c:
         65:22:02:cc:87:e5:dc:6e:67:15:d4:cd:96:00:cc:93:e2:88:
         93:af:f7:4c:3d:1f:67:4a:28:ef:9f:87:06:03:60:4e:82:3b:
         d1:76:d5:d5:18:8f:24:02:52:41:4e:fe:69:6c:92:8b:53:8a:
         f8:01:06:47:85:c0:ab:f3:fe:02:ab:a5:87:b9:2c:06:5c:b4:
         b4:22:88:cb:4e:61:e4:ae:2c:a7:9a:12:49:bd:13:32:81:ee:
         68:a5:99:a9:e5:f5:3a:ee:35:51:e8:dd:aa:03:d9:d8:3e:eb:
         62:cb:c6:67:3c:18:fe:70:4d:a6:06:78:7c:1d:18:c8:e2:02:
         36:f9:de:8e:86:e7:ea:e9:27:47:9d:36:88:56:c3:6e:68:92:
         88:9a:0e:81:aa:4e:40:55:2a:98:88:76:1b:9a:ba:cd:33:3c:
         2c:a1:b6:e5:72:31:6d:30:b4:e8:d7:38:82:ba:90:05:b8:60:
         4d:c0:a1:2e:39:80:3b:f1:ab:fe:ac:43:00:63:86:79:8c:33:
         45:a8:9d:50:af:33:d9:bb:5d:35:82:b2:88:df:ff:92:e9:76:
         ef:6c:f6:85:c5:72:d8:d1:3a:94:b8:5a:15:c2:71:e0:5b:67:
         ee:b6:c6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----