Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft
File:                     PI0Z2SQBkcNql0ti35PCIUNtm90.mft (raw, json)
Hash identifier:          Oka9cZsMnL86M/4hQUDHFE1SUtayL5U8CtWHv4cYvvE=
Subject key identifier:   D9:03:12:BA:1A:26:41:CE:6B:98:B7:E4:A4:8A:81:FF:6A:B8:72:E3
Authority key identifier: 3C:8D:19:D9:24:01:91:C3:6A:97:4B:62:DF:93:C2:21:43:6D:9B:DD
Certificate issuer:       /CN=3c8d19d9240191c36a974b62df93c221436d9bdd
Certificate serial:       01962E98F28FBD48577E741724E1B5A7B978
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft
Manifest number:          0924
Signing time:             Sun 13 Apr 2025 10:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:37 +0000
Files and hashes:         1: PI0Z2SQBkcNql0ti35PCIUNtm90.crl (hash: HVmyVUfm1HCsfrlVJ+6b9XV35F3136qSKuRBwn2iY94=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f2:8f:bd:48:57:7e:74:17:24:e1:b5:a7:b9:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c8d19d9240191c36a974b62df93c221436d9bdd
        Validity
            Not Before: Apr 13 10:01:37 2025 GMT
            Not After : Apr 14 10:01:37 2025 GMT
        Subject: CN=d90312ba1a2641ce6b98b7e4a48a81ff6ab872e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0a:1f:ad:3f:4a:94:14:5a:11:f0:e5:44:b5:
                    65:4f:8b:93:41:86:7d:8e:2e:11:3c:9e:a2:8a:6c:
                    d8:3e:32:ed:aa:13:a1:b3:d5:e0:32:2c:be:bf:ed:
                    68:48:8e:d2:29:39:59:58:01:c2:93:ba:34:cc:03:
                    d5:4a:fb:70:04:31:b0:8d:be:a2:a8:00:3d:39:8a:
                    4e:2c:d2:f9:9c:bd:7a:2e:5a:8d:78:d8:c1:0c:bb:
                    0f:1b:a8:d8:f9:fb:0a:41:9a:d8:df:9f:28:d5:0d:
                    3a:18:3d:94:8d:0e:87:be:5c:4a:95:d7:4f:3d:4e:
                    a4:40:54:49:7d:a4:44:57:1c:e0:d2:92:19:65:91:
                    ae:da:18:96:52:2f:8c:5b:90:24:06:fe:58:5f:25:
                    ec:05:77:c1:f0:8a:97:c2:1c:92:41:aa:2e:fb:aa:
                    60:ae:1b:57:c5:7b:90:02:0f:2a:d2:b2:60:09:7e:
                    00:26:c9:6b:fb:db:4c:01:36:3a:b6:c2:c7:92:f2:
                    1e:a5:bf:3d:de:ef:5b:22:de:56:fa:11:a5:32:e5:
                    82:9f:48:b8:02:2e:32:28:1e:5d:61:d4:ca:61:1e:
                    3a:ff:36:76:6a:5c:fb:e4:a9:4e:11:58:a0:1f:bc:
                    c8:90:cf:ae:dd:8e:74:e6:9d:34:ad:bc:21:89:38:
                    91:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:03:12:BA:1A:26:41:CE:6B:98:B7:E4:A4:8A:81:FF:6A:B8:72:E3
            X509v3 Authority Key Identifier:
                keyid:3C:8D:19:D9:24:01:91:C3:6A:97:4B:62:DF:93:C2:21:43:6D:9B:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PI0Z2SQBkcNql0ti35PCIUNtm90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/800e39-f9b1-4f8d-9c10-10357b87cb23/1/PI0Z2SQBkcNql0ti35PCIUNtm90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:19:a1:23:3f:16:42:31:6f:e5:9c:e1:d6:2d:23:9e:b1:54:
         95:d1:91:6a:f5:29:bf:22:0c:43:0f:29:42:73:fe:29:00:37:
         75:53:91:61:05:3d:69:48:ee:1a:0c:88:58:86:c9:2e:9e:95:
         bf:65:39:25:fd:bc:d6:a4:12:59:70:a1:d7:f0:64:e8:af:bd:
         65:6d:a4:d5:e4:bf:16:a7:c9:9a:67:ff:67:f3:82:b0:2d:30:
         80:e2:5d:41:37:f3:c2:10:c7:30:48:ab:e0:24:e8:c9:67:93:
         33:0b:4e:f5:fd:fb:e7:85:1c:9d:fd:1e:39:38:f9:ec:11:3a:
         b8:9b:ff:3e:e5:5d:ae:22:87:73:37:87:6b:a9:2a:9d:93:84:
         a9:5b:5d:66:61:99:82:53:c7:94:28:f3:9c:30:4f:85:e7:77:
         f6:c6:da:a2:83:06:dc:aa:36:40:c1:0e:8d:3f:dd:76:17:62:
         a6:c6:42:fa:22:0b:bf:20:06:86:9d:eb:92:e4:36:db:47:41:
         d0:5d:de:c4:d4:d9:50:96:f2:99:5d:6a:44:25:07:58:4c:8a:
         44:22:44:b0:ec:f9:d6:e3:27:cc:cd:6b:9d:d8:2c:79:57:a6:
         c3:d5:75:80:78:f8:2e:a0:1b:95:f4:48:d9:a9:a9:ba:fc:0d:
         87:f0:f7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----