Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
File:                     PgzNJQR7nLi28Bhnze3oJW9zSiM.mft (raw, json)
Hash identifier:          /PnAGcgO+qivHqr4MH1aOjsY3wRojxJpmEwKuWybICw=
Subject key identifier:   12:73:3C:09:22:06:4B:00:41:CD:5A:05:80:FC:DE:96:28:48:BF:FD
Authority key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
Certificate issuer:       /CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Certificate serial:       01962F74DE3F0ED22D74094950D50EA026B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
Manifest number:          07A1
Signing time:             Sun 13 Apr 2025 14:01:50 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:50 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:50 +0000
Files and hashes:         1: PgzNJQR7nLi28Bhnze3oJW9zSiM.crl (hash: 0VWtCftnaiqHyBO+55IBpihRP777uMe55dLQPMkSoHs=)
                          2: tNlE-RsS8yP8q3aEd77vtdKV4ao.roa (hash: 0s1wr6faxjcsfPekqZ/FFwhO5dh5LLtuhFGeIZLAT0s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:de:3f:0e:d2:2d:74:09:49:50:d5:0e:a0:26:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
        Validity
            Not Before: Apr 13 14:01:50 2025 GMT
            Not After : Apr 14 14:01:50 2025 GMT
        Subject: CN=12733c0922064b0041cd5a0580fcde962848bffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:19:d3:4d:08:a2:f6:c0:81:dd:60:65:50:a9:
                    1f:8e:8c:c5:a0:a1:72:ca:d5:af:a9:fc:85:aa:db:
                    ad:3e:3c:be:8f:d4:e9:f8:d0:49:e8:2b:d3:cb:48:
                    00:fc:15:84:77:a2:bf:55:17:45:71:94:50:12:9e:
                    e8:bc:5d:2c:54:5f:fb:e6:24:34:f5:b1:c6:5e:17:
                    9b:56:f4:36:f5:2f:dc:ff:3c:19:fe:15:51:38:64:
                    be:92:6f:73:96:1a:54:4b:f3:4e:ac:a0:ee:57:2c:
                    f3:c1:b5:3d:26:5c:88:db:55:f9:83:d3:92:5c:be:
                    d0:e8:b5:94:7c:5d:81:40:74:8a:43:d2:0f:76:b2:
                    c7:da:7f:5f:51:f4:ed:4b:a0:ef:f4:73:19:be:8a:
                    9b:cc:2e:d7:2f:51:59:63:b6:f7:cb:51:d2:a8:df:
                    a6:03:0c:c8:44:74:60:57:9b:b4:d4:c2:db:6b:e8:
                    1c:78:2a:64:d0:8b:50:02:d4:8b:d8:92:d2:c1:07:
                    77:6f:d1:3f:bb:23:2c:4c:a8:bd:b6:0c:9c:f6:41:
                    5e:04:bf:c0:8b:50:5f:39:12:62:98:61:15:2c:fd:
                    2d:7c:a9:f3:aa:4b:8f:6b:f9:15:96:33:4c:42:a8:
                    7e:d9:50:86:cb:9b:2b:b8:70:2b:15:a4:ab:a9:b7:
                    6e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:73:3C:09:22:06:4B:00:41:CD:5A:05:80:FC:DE:96:28:48:BF:FD
            X509v3 Authority Key Identifier:
                keyid:3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:5f:37:a1:0a:15:7e:36:99:39:5c:71:ce:80:86:aa:93:66:
         17:81:10:b4:eb:88:be:32:3d:70:13:91:f6:a5:99:0b:72:8f:
         e7:86:ca:80:04:77:d0:70:88:44:40:e3:0b:de:19:4e:0f:5e:
         2c:e8:aa:d1:2d:f0:0b:15:75:38:7b:de:5c:08:df:0f:99:4e:
         87:b8:28:54:45:85:bc:b6:ef:20:8a:bb:ca:ab:c2:e6:ee:e5:
         22:5c:00:8a:95:94:f0:e2:5a:2e:67:a0:23:09:23:4e:42:33:
         96:bf:8a:ea:69:b3:31:cd:77:eb:b6:9e:3f:e4:32:9a:1a:65:
         3f:de:58:9c:c3:29:bc:5c:df:69:12:4e:bd:35:d8:b5:95:4b:
         1a:c3:77:73:d2:47:70:ac:7c:49:8d:27:00:cd:52:db:ff:aa:
         93:fb:55:3d:a6:1f:f8:76:97:17:2d:7f:77:58:77:b1:3d:b5:
         36:5c:b6:b2:c1:ea:96:69:75:c8:64:b8:91:ec:8f:df:fd:08:
         5b:b6:b7:d6:0b:fc:89:dc:1d:49:5f:a3:77:7b:d8:c3:0f:c0:
         69:a4:48:1d:11:d0:c7:b0:3c:af:d0:ba:3e:36:7f:0a:dd:75:
         a5:40:bb:11:a1:18:fe:85:6b:9c:65:36:08:64:f2:31:9a:66:
         86:1c:62:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----