Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.mft
File:                     PJUbD8U6RlditFJfyY3_AskMHpc.mft (raw, json)
Hash identifier:          4HU2zFM5pOnfLF9HT7GdwY58yqiWXqkSFbJOtRnlCjU=
Subject key identifier:   CD:C0:72:45:CC:7A:76:3C:FB:08:06:89:8B:4F:53:44:78:C4:69:22
Authority key identifier: 3C:95:1B:0F:C5:3A:46:57:62:B4:52:5F:C9:8D:FF:02:C9:0C:1E:97
Certificate issuer:       /CN=3c951b0fc53a465762b4525fc98dff02c90c1e97
Certificate serial:       01962F071D187CD768B7EDE952E91988BEC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PJUbD8U6RlditFJfyY3_AskMHpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.mft
Manifest number:          0B78
Signing time:             Sun 13 Apr 2025 12:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:57 +0000
Files and hashes:         1: PJUbD8U6RlditFJfyY3_AskMHpc.crl (hash: 6DBhuQ/FZZzzYd5/xhUpsaQqguwPPyXiZAytk5DRfDY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1d:18:7c:d7:68:b7:ed:e9:52:e9:19:88:be:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c951b0fc53a465762b4525fc98dff02c90c1e97
        Validity
            Not Before: Apr 13 12:01:57 2025 GMT
            Not After : Apr 14 12:01:57 2025 GMT
        Subject: CN=cdc07245cc7a763cfb0806898b4f534478c46922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c6:63:08:85:bb:9f:9a:16:d7:76:9c:3f:6a:
                    84:8a:d6:30:1c:8a:ad:68:38:d6:55:df:3b:5d:cc:
                    77:e2:c5:d3:9d:0b:1e:8b:92:82:2e:2e:e7:38:60:
                    8a:ec:e1:2d:2a:87:51:20:31:20:f8:60:91:3d:0d:
                    0a:25:98:26:4a:80:76:e8:0a:f4:d7:47:af:05:43:
                    04:ad:e4:f2:7b:ac:04:73:6f:05:81:9f:de:45:2a:
                    e6:ef:16:72:41:6b:46:9d:0c:1a:8d:83:1f:02:14:
                    19:59:cf:1d:42:a7:2e:c8:c3:07:04:38:08:fa:db:
                    2a:dc:ce:c6:0f:f6:b1:9a:de:6e:ab:6f:5e:2c:95:
                    38:1d:23:66:da:9d:3d:7b:f9:66:2a:0d:92:fb:55:
                    6d:9f:1b:53:95:1b:b2:9e:8c:0d:68:0f:81:88:c7:
                    88:f3:c1:80:e9:a1:56:77:39:38:ee:c1:52:49:8c:
                    05:25:e2:1c:7e:ba:8d:e6:c3:8e:ad:49:16:de:97:
                    d5:9e:c7:46:95:0e:d0:95:80:39:55:be:6b:76:92:
                    e0:91:ef:fe:e6:e4:36:a7:b7:f3:58:b0:6f:cf:42:
                    86:35:03:b7:69:3c:2a:cd:40:ac:03:00:1a:46:c9:
                    d6:80:62:b4:44:be:62:8b:de:6b:ff:34:b0:f4:c7:
                    22:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C0:72:45:CC:7A:76:3C:FB:08:06:89:8B:4F:53:44:78:C4:69:22
            X509v3 Authority Key Identifier:
                keyid:3C:95:1B:0F:C5:3A:46:57:62:B4:52:5F:C9:8D:FF:02:C9:0C:1E:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJUbD8U6RlditFJfyY3_AskMHpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/94090a-bb4b-499a-90e0-64e771980262/1/PJUbD8U6RlditFJfyY3_AskMHpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:ee:a1:28:6f:93:46:7d:c2:8b:ca:d3:6a:2d:61:37:fd:c0:
         8e:ca:68:72:58:df:c7:43:ba:f4:fb:77:09:20:bd:48:e6:f0:
         2d:8e:ee:a7:dd:74:be:ef:5d:71:df:4f:03:7e:6a:2a:8c:fc:
         5e:37:ba:fb:19:12:ce:6d:ee:f9:3a:ac:d9:f2:c9:49:0d:44:
         4e:de:de:fe:01:4a:0f:9d:3e:a1:68:fd:61:06:58:1e:57:04:
         0c:8b:1c:3b:bf:e5:0a:47:69:78:f4:c6:19:c1:e7:24:84:ce:
         fa:93:8f:7c:6e:9b:93:cb:1b:a8:17:a3:4a:48:9b:60:7b:89:
         a7:f3:15:38:fc:00:36:97:84:2c:2e:90:ad:4e:8d:c4:0b:47:
         71:1f:f6:95:b4:85:e9:2b:97:af:6e:54:99:5b:1e:93:79:a6:
         52:ac:d9:b4:2a:71:46:4f:66:d2:24:25:19:2a:5b:21:98:34:
         34:76:c4:70:c6:a5:a9:66:36:f7:86:ac:71:67:a0:b0:f1:38:
         61:72:28:19:a5:6b:91:04:cf:98:78:20:12:db:74:94:10:ac:
         2c:d2:63:af:f7:14:af:2d:64:2d:7c:3a:f4:b0:87:23:7d:50:
         24:e1:00:a4:04:fc:28:cb:f7:ec:ff:e7:8c:04:be:f5:b5:fa:
         38:0f:2c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----