Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/e31f78-68bb-4729-bd65-60d255be0479/1/pnUQ3cUswCV-TCVS9b1XVURUxgs.mft
File:                     pnUQ3cUswCV-TCVS9b1XVURUxgs.mft (raw, json)
Hash identifier:          0x8C5Y/4Rqe+71FN8uTjAY7iR+DijcnpUQZf2Lr7NFg=
Subject key identifier:   FF:4B:F9:B2:F0:36:86:D4:20:05:89:56:8F:1A:12:31:D9:DB:CF:5F
Authority key identifier: A6:75:10:DD:C5:2C:C0:25:7E:4C:25:52:F5:BD:57:55:44:54:C6:0B
Certificate issuer:       /CN=a67510ddc52cc0257e4c2552f5bd57554454c60b
Certificate serial:       01962F3D6985B8EF71D9E3F53137D66B157E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pnUQ3cUswCV-TCVS9b1XVURUxgs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/e31f78-68bb-4729-bd65-60d255be0479/1/pnUQ3cUswCV-TCVS9b1XVURUxgs.mft
Manifest number:          0468
Signing time:             Sun 13 Apr 2025 13:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:15 +0000
Files and hashes:         1: pnUQ3cUswCV-TCVS9b1XVURUxgs.crl (hash: F0TsAvU3qSHtzM4Pu0Q33z2mtu5T7t0lZHJP3Kc1LgE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:69:85:b8:ef:71:d9:e3:f5:31:37:d6:6b:15:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a67510ddc52cc0257e4c2552f5bd57554454c60b
        Validity
            Not Before: Apr 13 13:01:15 2025 GMT
            Not After : Apr 14 13:01:15 2025 GMT
        Subject: CN=ff4bf9b2f03686d4200589568f1a1231d9dbcf5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d9:80:bf:97:d6:00:f0:90:c3:c1:23:97:38:
                    3a:88:d2:2d:3c:bb:84:e8:60:63:94:3d:6f:46:1c:
                    06:4d:1b:77:d7:66:4b:ff:f1:32:5a:41:50:eb:a2:
                    82:9c:3a:4f:51:ff:51:47:63:1a:68:09:13:64:83:
                    59:e8:57:5a:f4:7a:7c:15:3b:f5:16:b8:3b:78:e1:
                    9f:ae:e0:c3:78:52:c6:c1:96:9a:18:d3:64:ff:72:
                    44:bf:ec:7d:63:5f:dd:7c:5e:83:64:31:c9:d7:ec:
                    e0:d0:9f:90:38:49:39:7e:3f:cc:d6:ce:13:b1:28:
                    43:be:c6:71:db:03:65:88:e1:c2:17:69:c3:66:66:
                    bb:02:64:47:ed:76:41:5c:7b:98:25:b0:cb:a4:be:
                    96:30:c5:11:e3:27:57:32:aa:de:c7:1d:a4:17:a1:
                    7f:00:0d:54:e8:f6:42:f5:70:ba:d5:d3:2a:e1:42:
                    40:19:66:80:f4:37:54:a5:2d:7a:ba:60:02:cc:e2:
                    07:ab:b3:9d:f0:80:7c:03:02:c7:fe:4d:7e:d6:ec:
                    45:1d:7f:28:6d:83:ff:3a:71:cf:54:44:48:4d:bd:
                    d0:5a:3f:be:aa:86:73:47:84:7b:4f:11:d0:41:0b:
                    5d:91:50:a1:01:8d:9e:1d:3a:d4:0f:ce:48:63:6b:
                    df:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:4B:F9:B2:F0:36:86:D4:20:05:89:56:8F:1A:12:31:D9:DB:CF:5F
            X509v3 Authority Key Identifier:
                keyid:A6:75:10:DD:C5:2C:C0:25:7E:4C:25:52:F5:BD:57:55:44:54:C6:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnUQ3cUswCV-TCVS9b1XVURUxgs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e31f78-68bb-4729-bd65-60d255be0479/1/pnUQ3cUswCV-TCVS9b1XVURUxgs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/e31f78-68bb-4729-bd65-60d255be0479/1/pnUQ3cUswCV-TCVS9b1XVURUxgs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:19:d6:e9:31:bd:ae:c5:ab:53:23:e6:bf:d2:3d:e6:75:07:
         a7:bd:df:62:46:44:f9:77:e0:13:ba:95:e1:b5:7c:69:68:a9:
         4a:0b:2d:e1:04:67:a6:8d:1f:68:6a:05:61:34:b6:cb:ee:d2:
         44:3e:15:be:25:3b:95:fe:50:f9:a8:1c:0d:be:52:de:d0:07:
         d5:c3:33:e5:aa:bf:44:6f:48:a6:91:6e:2e:9a:c9:9b:92:76:
         1d:6f:9d:a6:5e:a0:d4:5a:73:44:f1:c8:75:40:43:1d:cf:c3:
         66:f7:07:f0:7e:e9:6d:b5:f8:9a:66:81:32:6a:d7:84:2d:4c:
         38:b0:57:f0:96:33:56:4d:4a:68:59:33:dd:1a:a8:cf:23:ae:
         67:81:59:81:40:a9:50:13:8e:8d:83:38:7a:d5:87:6c:31:b1:
         f3:f2:0c:15:25:bd:47:52:6e:40:2f:fb:f5:49:25:4a:77:24:
         c7:d8:19:23:b0:5a:33:da:c6:5c:d6:3a:2a:fa:b0:1d:45:cc:
         19:ce:ef:94:5c:b3:0f:85:bd:86:5e:a4:2a:50:66:5d:45:19:
         77:ca:23:12:ab:8a:d0:55:d9:8d:21:50:cb:8d:b7:58:0f:40:
         11:0b:c8:88:54:9a:50:c6:26:f0:ec:ad:69:fb:5d:03:5d:18:
         f4:4c:eb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----