Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b16080-1813-492b-a7c2-98d4ffea210c/1/Pyg68g_mzzkQAWnXdrr6eCQfRO0.mft
File:                     Pyg68g_mzzkQAWnXdrr6eCQfRO0.mft (raw, json)
Hash identifier:          qYPxYuMBcWHwYRkDl1jJjXZCQIvFhcNCnuNc37bnqh0=
Subject key identifier:   83:B6:94:59:06:65:BE:AD:5C:DF:DC:5F:A2:AD:77:8A:2B:7D:A3:D3
Authority key identifier: 3F:28:3A:F2:0F:E6:CF:39:10:01:69:D7:76:BA:FA:78:24:1F:44:ED
Certificate issuer:       /CN=3f283af20fe6cf39100169d776bafa78241f44ed
Certificate serial:       0193478361D1F1A72120DF146E029109B4A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pyg68g_mzzkQAWnXdrr6eCQfRO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/b16080-1813-492b-a7c2-98d4ffea210c/1/Pyg68g_mzzkQAWnXdrr6eCQfRO0.mft
Manifest number:          09ED
Signing time:             Wed 20 Nov 2024 03:00:12 +0000
Manifest this update:     Wed 20 Nov 2024 03:00:12 +0000
Manifest next update:     Thu 21 Nov 2024 03:00:12 +0000
Files and hashes:         1: Pyg68g_mzzkQAWnXdrr6eCQfRO0.crl (hash: tQJo5vXVlAJyRFqTcg93NhBnzus2VvPy1KuxIy//0DQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:47:83:61:d1:f1:a7:21:20:df:14:6e:02:91:09:b4:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f283af20fe6cf39100169d776bafa78241f44ed
        Validity
            Not Before: Nov 20 03:00:12 2024 GMT
            Not After : Nov 21 03:00:12 2024 GMT
        Subject: CN=83b694590665bead5cdfdc5fa2ad778a2b7da3d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f3:4f:83:7f:c7:1a:91:18:99:df:83:9f:c5:
                    c0:a4:24:92:d3:ea:ec:6b:dc:3e:b5:fd:d2:7c:15:
                    c1:bb:c5:e2:d0:ee:86:6f:f9:f3:7e:b5:95:20:a5:
                    77:c6:0a:d5:65:ea:dd:d2:0f:dd:c3:97:a3:3b:24:
                    59:f8:93:20:17:92:c5:a1:d5:9f:6c:21:5a:0f:07:
                    00:24:62:c7:de:ab:d0:c0:e4:a3:76:d4:b8:9e:c6:
                    aa:13:19:e7:d0:a9:5a:96:a8:56:bc:34:eb:eb:1b:
                    f6:88:a2:d2:8d:ea:f5:b6:79:9e:bd:dc:ac:20:e6:
                    fe:78:b7:b6:9e:ed:29:24:a0:0e:c5:bb:10:cb:59:
                    30:01:01:44:79:e0:ea:94:8b:c0:75:c2:63:38:8e:
                    d4:40:31:44:b7:2b:e7:ba:bc:82:fc:d1:24:7a:a6:
                    8c:c7:49:81:23:99:3a:ba:93:f7:a8:22:6b:fd:2e:
                    1e:04:5b:3e:34:ea:bc:8f:b0:8a:bf:fc:fc:b5:e7:
                    48:ed:e2:06:08:d3:d2:dc:68:f4:b6:42:88:e2:54:
                    ca:c1:d3:74:49:9c:e0:81:9c:fc:15:c8:f2:a8:19:
                    cf:ff:34:ea:da:46:25:8b:05:2a:03:37:bd:76:94:
                    07:96:74:bb:00:03:df:28:cb:e5:82:de:66:17:98:
                    e9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B6:94:59:06:65:BE:AD:5C:DF:DC:5F:A2:AD:77:8A:2B:7D:A3:D3
            X509v3 Authority Key Identifier:
                keyid:3F:28:3A:F2:0F:E6:CF:39:10:01:69:D7:76:BA:FA:78:24:1F:44:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pyg68g_mzzkQAWnXdrr6eCQfRO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b16080-1813-492b-a7c2-98d4ffea210c/1/Pyg68g_mzzkQAWnXdrr6eCQfRO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b16080-1813-492b-a7c2-98d4ffea210c/1/Pyg68g_mzzkQAWnXdrr6eCQfRO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:6e:78:8a:21:32:1d:4e:00:f5:b8:69:c5:71:69:f1:22:10:
         94:4b:e1:17:4c:b9:d4:a6:a3:aa:8e:47:a1:09:c7:7b:c7:b8:
         47:55:e1:7e:d1:c6:24:a8:9b:e5:c3:75:d0:ef:67:52:b4:77:
         93:fa:55:1b:c7:14:7e:39:3f:b3:b2:c2:27:0b:c8:d5:f4:25:
         78:ea:84:8f:8e:c5:c8:32:4e:9f:1d:f7:25:84:09:c7:2b:94:
         84:82:fc:a9:64:8b:91:03:0c:77:91:86:08:b9:ff:ab:c6:7e:
         1b:ac:90:b8:7a:0e:29:3f:12:a5:c7:00:f9:bf:6c:40:07:6e:
         40:94:af:9e:1d:6c:b1:11:b3:3b:8c:39:d1:79:ff:7f:47:48:
         3f:c5:bb:0b:5b:e3:53:6f:99:39:2c:da:c9:5f:a4:45:e1:1f:
         a4:c3:26:63:b0:9f:b9:15:4e:cd:cb:43:8a:c9:d4:06:6b:d6:
         87:e6:b3:cf:04:ef:bc:1f:50:75:76:1c:c0:a4:c1:31:d7:88:
         63:aa:e6:3b:a0:0f:79:82:f6:be:97:df:3a:d0:e2:b9:9f:fb:
         5a:0b:b0:e5:22:cf:31:ff:ec:8d:bf:bc:06:79:36:d2:69:ee:
         39:c0:b2:45:0c:d9:fe:ba:9f:b9:b3:70:0f:5a:27:b5:0f:2e:
         e8:a8:97:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----