Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
File:                     PCr6XHBtPrCpLaibXUG5NutJzLg.mft (raw, json)
Hash identifier:          U9zoVl5p0qZVXf9suepHjRNCTeqARgQQKR5Dd6wrzzE=
Subject key identifier:   C4:69:D9:04:E6:4D:07:14:9A:EA:22:FB:32:48:E8:BF:2F:33:B1:87
Authority key identifier: 3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8
Certificate issuer:       /CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8
Certificate serial:       01962F072DBF731AAC4B99CCDEE5C9E09B3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft
Manifest number:          0FA2
Signing time:             Sun 13 Apr 2025 12:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:01 +0000
Files and hashes:         1: PCr6XHBtPrCpLaibXUG5NutJzLg.crl (hash: 6YQXJQ+j+gLJj4LonbRiTELAPPbYboy7UIo7B9E4CMo=)
                          2: gS9qTUkzusPVnwIVsvZEcIJfkGw.roa (hash: vAfS5SaRlx1aspB2qU2R3kxZGRQKFuwGAmKIB/uyw98=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:2d:bf:73:1a:ac:4b:99:cc:de:e5:c9:e0:9b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c2afa5c706d3eb0a92da89b5d41b936eb49ccb8
        Validity
            Not Before: Apr 13 12:02:01 2025 GMT
            Not After : Apr 14 12:02:01 2025 GMT
        Subject: CN=c469d904e64d07149aea22fb3248e8bf2f33b187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e7:66:e7:ef:9a:72:2a:82:76:c2:a7:70:f7:
                    c2:5d:2b:e0:63:2a:89:56:d2:60:94:63:36:0e:88:
                    09:ec:4c:19:57:6d:b2:90:ff:6b:5b:81:75:32:d6:
                    7b:8f:fe:ac:87:d1:72:94:a4:51:9e:78:76:cf:12:
                    d4:ad:d6:aa:e4:04:34:68:47:77:1a:8f:e0:06:f7:
                    3e:0e:a7:c1:50:f9:a0:bd:fa:ef:12:48:55:d1:8a:
                    a9:27:2f:c0:ae:98:0b:b3:87:b5:41:8a:c4:66:11:
                    71:07:88:54:af:11:2f:81:1b:95:6a:da:54:9e:01:
                    ab:a7:29:f1:d4:0e:36:5b:9b:9f:ec:f0:52:fa:22:
                    6e:51:2a:62:0a:97:84:0c:a1:32:b8:5b:40:32:12:
                    6e:49:db:d8:81:09:e5:13:9f:17:a7:29:15:47:b4:
                    9f:ee:9f:32:6d:9a:a7:80:f3:f5:1a:58:f1:b2:2a:
                    13:4a:52:54:09:3a:04:27:54:f9:02:09:5f:51:c7:
                    c0:3d:1c:58:cb:00:05:58:3a:54:6a:1b:a0:2c:9b:
                    01:36:8b:f8:80:2e:70:1c:b1:28:25:22:97:a3:64:
                    ba:c8:ee:f7:0c:fe:02:30:a9:40:65:36:fb:1e:e7:
                    17:e1:69:59:f6:49:3f:5a:d6:6e:ac:1f:3f:32:b4:
                    07:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:69:D9:04:E6:4D:07:14:9A:EA:22:FB:32:48:E8:BF:2F:33:B1:87
            X509v3 Authority Key Identifier:
                keyid:3C:2A:FA:5C:70:6D:3E:B0:A9:2D:A8:9B:5D:41:B9:36:EB:49:CC:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PCr6XHBtPrCpLaibXUG5NutJzLg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/eb1c4f-fd80-4919-b185-f7833a3f2485/1/PCr6XHBtPrCpLaibXUG5NutJzLg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:d6:06:d1:6b:f9:03:45:44:fc:91:db:20:da:d4:d4:9e:fe:
         fb:00:a4:57:e9:12:eb:9e:37:51:e3:da:69:ab:e9:55:24:ce:
         bf:f6:c8:13:d1:6e:16:4e:d5:39:8f:4e:04:f7:58:7f:5c:9e:
         ea:ba:1b:3f:f6:ef:9a:c9:d9:fd:c3:41:1e:e2:52:35:f9:ce:
         15:29:b8:ea:b5:96:c2:dc:74:1b:aa:10:45:24:fc:fa:53:cf:
         8f:35:60:1c:01:0f:6b:13:d7:e0:7d:fa:87:61:6e:91:43:e6:
         1e:09:a2:83:98:9b:15:61:d8:c0:2a:32:19:53:96:fe:ea:39:
         72:14:13:ee:a2:da:0d:94:87:57:2e:41:9f:ec:57:51:41:1c:
         8b:c4:ec:8c:4d:0e:77:19:e1:ad:9a:d9:3e:72:40:6f:83:e5:
         49:30:44:cd:a6:0d:94:41:44:2e:a4:2b:03:be:a8:a3:97:88:
         00:a9:dc:54:ca:c5:b6:2b:c2:a7:3a:fa:94:2e:98:ee:d6:2a:
         00:cf:58:75:a8:ea:17:ac:8e:19:fb:66:1e:10:c7:07:3b:88:
         b2:9b:1c:e3:17:27:8f:00:c3:cf:77:f2:6b:e6:6c:b6:b8:fd:
         13:29:2e:a8:81:89:d0:a9:70:01:77:3a:dd:f7:45:d2:68:16:
         b2:64:45:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----