Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.mft
File:                     PYyo-vPO4aXlGlxc2_lIKgACe2U.mft (raw, json)
Hash identifier:          tC3qDiAvKewXtkDGRfmjIVtM0bk+uSpcaUpSZtvqZKU=
Subject key identifier:   1B:E2:B2:87:04:96:0F:14:70:4E:CB:DD:88:B7:62:FC:AB:D3:0E:4F
Authority key identifier: 3D:8C:A8:FA:F3:CE:E1:A5:E5:1A:5C:5C:DB:F9:48:2A:00:02:7B:65
Certificate issuer:       /CN=3d8ca8faf3cee1a5e51a5c5cdbf9482a00027b65
Certificate serial:       01962E999E8C233B41543186AED5FB20D060
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PYyo-vPO4aXlGlxc2_lIKgACe2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.mft
Manifest number:          0A57
Signing time:             Sun 13 Apr 2025 10:02:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:21 +0000
Files and hashes:         1: PYyo-vPO4aXlGlxc2_lIKgACe2U.crl (hash: JPQmk7Ml/mnPXi2SM2qTEk0QnD4xUq+foKtWvyr/ZjE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:9e:8c:23:3b:41:54:31:86:ae:d5:fb:20:d0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d8ca8faf3cee1a5e51a5c5cdbf9482a00027b65
        Validity
            Not Before: Apr 13 10:02:21 2025 GMT
            Not After : Apr 14 10:02:21 2025 GMT
        Subject: CN=1be2b28704960f14704ecbdd88b762fcabd30e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8c:3b:43:e8:33:cc:71:31:e0:5f:3d:6a:0e:
                    ab:fd:12:eb:ec:96:ab:e2:34:29:4f:9a:98:f6:47:
                    98:77:05:73:3d:2c:e2:d4:fc:e7:9e:27:27:cc:b3:
                    fa:52:93:fd:1a:74:64:c8:ef:26:fa:fe:f0:a0:84:
                    fb:9c:e8:c2:07:b4:89:6d:ea:58:3b:ac:3e:bd:12:
                    bf:c8:c5:92:c6:50:84:6c:39:ca:f7:90:4d:0b:b5:
                    73:46:78:fa:ef:cd:67:dd:4a:c8:62:2b:56:ed:fd:
                    c3:08:ac:b0:70:1f:39:3d:13:28:12:fe:ec:a6:17:
                    17:1b:26:e4:50:71:40:70:b7:00:d2:b5:0a:88:31:
                    df:bc:b1:27:74:5a:c4:6b:71:86:7d:5b:1c:24:7b:
                    38:fa:88:e2:41:58:5f:84:d5:3c:42:64:b6:2f:7b:
                    0e:d7:99:36:7c:52:7b:60:53:e3:c9:d6:a9:9e:d3:
                    28:c9:5b:45:f4:80:ba:56:62:b9:74:b5:8c:5a:98:
                    8b:08:f3:76:86:c2:f7:31:b9:04:f4:18:2c:c2:44:
                    bf:05:0c:3d:e9:ed:d8:9a:91:c8:b9:3a:f1:78:d3:
                    36:80:b2:f7:59:ae:25:20:ce:38:dd:4d:2e:d3:e8:
                    dd:f0:81:c9:35:72:1b:bc:fc:3f:62:e7:51:a0:fc:
                    91:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E2:B2:87:04:96:0F:14:70:4E:CB:DD:88:B7:62:FC:AB:D3:0E:4F
            X509v3 Authority Key Identifier:
                keyid:3D:8C:A8:FA:F3:CE:E1:A5:E5:1A:5C:5C:DB:F9:48:2A:00:02:7B:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYyo-vPO4aXlGlxc2_lIKgACe2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/11237d-c69d-40d4-b4d7-4e15b84ee706/1/PYyo-vPO4aXlGlxc2_lIKgACe2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:c7:e2:70:9c:e3:75:72:b3:60:dd:b3:7f:5e:31:9c:ed:3f:
         71:8c:18:3f:7e:b1:05:6b:d6:19:77:6a:e9:7b:8f:bd:e0:70:
         71:ac:7e:f6:4e:ab:d4:ce:37:dc:71:14:36:cd:6c:fc:ad:76:
         4f:55:67:15:90:ef:e9:7a:f7:58:be:d3:00:30:38:de:c3:10:
         5a:47:ea:fc:48:35:82:6d:a4:e8:9e:db:76:c3:1a:59:9c:d5:
         57:3c:29:19:5c:1a:69:b3:53:7e:46:c7:5f:f4:fd:fb:9d:9c:
         9d:44:f0:fe:42:71:4d:69:eb:a1:a8:5c:98:0c:bf:74:cd:59:
         c5:8b:3f:20:e3:86:f9:e6:8b:e0:4d:f5:a0:2e:ba:b7:b2:26:
         3b:94:43:ec:12:c2:71:ee:3a:81:ec:25:70:cb:04:24:b4:5d:
         e0:b4:6d:fa:02:05:85:aa:71:dd:5a:7a:8b:6a:61:50:ca:30:
         a2:c8:bd:50:f2:3d:e6:bd:62:14:4e:93:2c:b9:0f:3e:08:aa:
         f7:34:72:06:16:42:bc:84:e7:d7:43:68:24:63:53:70:d1:5b:
         54:76:d4:57:a3:fd:ef:34:5c:2f:7d:fc:51:15:55:28:92:df:
         20:df:5a:3f:42:6c:20:7a:11:70:f5:d7:5e:a1:01:1d:06:5e:
         7f:5a:1b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----