Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
File:                     PnXUne0gVmynRcKPgM_ZqS9LfUc.mft (raw, json)
Hash identifier:          Z3AsobjaHuhg0vjhYC/tu2USEq9GlZA54mOrUHD4Zzo=
Subject key identifier:   00:82:51:44:24:B1:99:6B:E3:93:2F:00:D3:65:33:34:DF:92:85:A4
Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
Certificate issuer:       /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Certificate serial:       0195E0B485AEFC55607DCBC30E9E138D9660
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
Manifest number:          14C1
Signing time:             Sat 29 Mar 2025 07:01:21 +0000
Manifest this update:     Sat 29 Mar 2025 07:01:21 +0000
Manifest next update:     Sun 30 Mar 2025 07:01:21 +0000
Files and hashes:         1: PnXUne0gVmynRcKPgM_ZqS9LfUc.crl (hash: bi0O+d7X5yZm81e9hhPqASFPPj9CmKdLkENQpZjwheE=)
                          2: pXJDsaj0ZUCw_GiSDcUZAr3Eqys.roa (hash: jxE0YH1Sz5qp4TF2g6NLi4CtXpHMgBECSGalZs0qi4A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:b4:85:ae:fc:55:60:7d:cb:c3:0e:9e:13:8d:96:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
        Validity
            Not Before: Mar 29 07:01:21 2025 GMT
            Not After : Mar 30 07:01:21 2025 GMT
        Subject: CN=0082514424b1996be3932f00d3653334df9285a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8b:bc:24:e6:ca:c6:ee:66:12:59:fa:f4:17:
                    b0:11:c2:84:f0:2a:11:70:11:28:0c:b0:9b:3f:71:
                    a4:69:9f:da:8f:06:c9:44:62:bb:1f:a0:46:f7:d1:
                    ea:ed:09:b4:d9:20:21:e0:76:73:f8:9f:83:0c:4d:
                    77:7d:69:f9:ec:95:e7:97:2b:6e:14:e3:72:c9:1d:
                    eb:71:ae:da:96:d4:ef:0b:35:23:06:46:ec:1c:d3:
                    b7:36:13:fa:33:6b:51:bb:d0:49:95:67:6d:59:73:
                    12:74:db:af:5c:97:ba:b9:8c:7a:f6:41:84:1d:b5:
                    86:9b:b2:50:f3:b9:64:2d:74:10:a6:b6:ba:48:53:
                    b2:a1:16:31:09:f3:10:eb:d7:20:f5:de:51:66:cc:
                    a3:bb:34:6c:21:04:82:6a:4a:e2:17:1a:e8:b2:07:
                    70:b4:d2:ca:69:e7:50:5d:12:3c:13:1c:e5:e7:de:
                    34:c2:95:1c:93:b9:f6:f9:28:8b:9b:f4:59:87:a3:
                    7b:80:b2:63:b4:27:61:28:c2:e3:64:61:26:e0:e1:
                    76:31:13:fa:86:cc:73:df:b7:3a:a9:53:a8:81:d4:
                    07:e4:cc:77:d1:e6:22:d7:3d:73:48:e5:f3:32:5e:
                    cc:0f:94:2b:29:64:a7:e3:e6:c3:30:64:69:61:e2:
                    13:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:82:51:44:24:B1:99:6B:E3:93:2F:00:D3:65:33:34:DF:92:85:A4
            X509v3 Authority Key Identifier:
                keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:69:90:f2:4d:8d:a1:3e:c0:ec:a5:97:6d:21:7b:a5:89:0b:
         f7:cd:e2:f2:0e:70:e5:47:f0:65:44:28:36:82:b0:31:5e:a8:
         aa:a5:a2:db:7e:5a:3a:5b:b1:02:a0:41:c1:58:e9:80:33:b5:
         c7:cb:27:14:3e:78:11:b2:fa:54:28:82:a2:0f:b2:07:39:58:
         cb:1e:3d:95:8d:07:e7:35:0f:26:f9:0b:7d:81:0b:45:a2:2d:
         0c:5e:5f:bf:cb:8f:23:3d:4f:53:41:ed:a1:3a:fe:6e:76:76:
         27:86:1e:b0:da:68:6f:8c:fe:5f:a6:0c:29:71:30:8a:e5:86:
         70:26:52:64:76:32:70:68:d3:cd:76:c9:b7:06:57:ac:f3:37:
         43:84:b1:39:ad:44:08:57:5a:34:c0:52:36:fd:ae:b9:f4:54:
         1b:f3:bc:dd:49:55:82:9b:a8:69:43:a6:74:01:ea:62:1c:c3:
         50:ab:d6:ea:41:c5:8a:7a:25:55:64:47:66:80:51:a5:b7:0e:
         39:df:c0:b9:d7:41:e4:9f:2a:56:55:ea:0d:ba:0d:d8:6d:42:
         87:a2:7a:5b:4e:ce:6c:cc:e3:7c:5a:94:d4:e6:1e:e5:a6:fe:
         89:a8:77:96:bc:2a:62:8e:56:ad:e7:d3:1e:22:9f:52:0a:37:
         b0:56:63:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----