Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
File:                     Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft (raw, json)
Hash identifier:          bUXwvNzNJcc9U6M9cm5M6PzUlnI7htiMjrxVd1qXPLo=
Subject key identifier:   5F:F5:60:A0:49:70:EA:25:62:D7:7D:AE:D7:A4:87:73:E9:21:3B:6D
Authority key identifier: 3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
Certificate issuer:       /CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Certificate serial:       01962E617EBD86D13E89914EDE091B58C9A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
Manifest number:          0415
Signing time:             Sun 13 Apr 2025 09:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:03 +0000
Files and hashes:         1: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl (hash: NmYimQ6WSVtSXPyTtz1SwWcPw8nHfdEaLhagKQb8U8w=)
                          2: R3hdyvcGqSNq9MuuQgsgENnLqRc.roa (hash: p4vr1woIgR7A2etkhsE5WicuvE4bBuEK3XJxuDU+KOU=)
                          3: bdN5bSk-xsk3V329iHiH8aXvTdI.roa (hash: B5/9B1uBl6eNvv9W6TPaWnFzqWQvfYoiY7n1wWqxjpc=)
                          4: wWkcOa8cqDGRhn8j-1x_z-ePvg0.roa (hash: gQMjNWFHknHqWjiClHplw+oae04KXbyQbF9fSFE9xPI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:7e:bd:86:d1:3e:89:91:4e:de:09:1b:58:c9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
        Validity
            Not Before: Apr 13 09:01:03 2025 GMT
            Not After : Apr 14 09:01:03 2025 GMT
        Subject: CN=5ff560a04970ea2562d77daed7a48773e9213b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4c:4d:3f:1b:61:60:ec:3a:ed:7d:59:af:9b:
                    e5:19:7f:d3:e2:6a:a1:3b:60:b6:f7:27:f4:60:96:
                    81:15:5f:13:79:94:77:0a:8e:0c:57:f4:9a:40:52:
                    ac:4b:2f:fe:30:2a:19:f4:bf:00:a5:36:2b:18:43:
                    f5:9a:f9:5c:b8:3a:c7:89:82:aa:e2:c6:9f:83:b7:
                    b1:c8:b8:f7:3d:14:07:29:00:00:58:e6:61:b4:96:
                    5d:92:d9:b1:bb:39:45:87:6c:50:56:2e:0e:59:5c:
                    1c:52:1b:c1:bd:27:fa:59:18:14:9c:1d:a8:fa:2c:
                    94:99:21:00:73:1f:a2:69:4b:37:1b:26:c0:8f:e9:
                    36:4a:59:e7:24:28:62:23:f1:cf:c7:80:de:45:39:
                    ca:60:40:3b:8f:a8:06:b9:6c:3a:c1:83:0b:70:d9:
                    ae:88:78:1d:4e:70:a6:99:ce:a9:11:2e:89:f8:47:
                    e7:ca:bf:d7:eb:e7:7a:6a:f8:bb:4f:dd:d0:55:16:
                    51:eb:a3:2d:2e:a8:37:b7:d7:21:93:55:d5:6f:de:
                    8a:d1:33:f2:18:c2:d8:51:c1:be:9d:eb:24:e1:4e:
                    1b:fd:83:44:91:30:d1:38:86:f2:53:81:79:24:19:
                    86:16:f1:b6:85:d9:75:95:48:e7:12:b6:98:d4:af:
                    09:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F5:60:A0:49:70:EA:25:62:D7:7D:AE:D7:A4:87:73:E9:21:3B:6D
            X509v3 Authority Key Identifier:
                keyid:3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ac:39:50:8d:e3:54:5f:72:4a:1b:89:aa:df:c8:00:2e:68:
         07:5c:fa:66:98:bb:07:48:e5:f3:31:ff:50:df:e5:3d:4f:ff:
         b0:32:71:32:36:a1:f2:02:43:b2:98:38:62:16:88:c9:7e:b3:
         ba:bd:b1:ef:1d:7c:04:a2:70:15:e8:e8:e7:41:b4:66:96:e6:
         a5:47:14:41:d9:b7:3e:2c:9f:d3:cd:6d:d8:f5:98:88:f1:b5:
         49:13:81:82:5c:10:6c:cb:2b:fa:ec:6a:9f:1d:0a:70:8f:8e:
         35:0c:94:b6:c8:11:9a:83:55:5f:c4:7a:f4:83:49:77:2e:04:
         f4:e7:2b:d5:57:f9:a1:93:48:5a:7f:ed:a2:fe:3e:74:e3:07:
         ac:41:ca:0d:81:5d:74:18:0e:4d:c8:ee:72:ba:d6:b9:a7:4c:
         ca:cf:35:a6:f7:c7:e9:99:e8:8b:db:9c:30:4c:a6:2b:cd:90:
         a6:98:6b:4a:eb:df:d0:95:b2:6a:46:fe:32:a6:aa:1c:22:6b:
         56:cf:8c:ab:c6:6d:e3:76:23:4a:74:0f:3f:f1:58:74:dd:0a:
         6c:c9:16:bb:63:5c:d7:6a:41:9e:76:df:d0:f0:57:5f:a8:f2:
         26:4b:dd:60:09:70:f3:9b:a8:85:94:ae:36:4e:de:dc:dd:66:
         7e:54:a0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----