Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
File:                     pgkmXYlPp5_NZUL6zAujiXOMhFk.mft (raw, json)
Hash identifier:          Xr/LTaP9TJ9tOMQiTFza5maM1rqBf3GnnybM0u0qTgA=
Subject key identifier:   57:24:92:B9:14:BB:21:F2:05:3F:08:49:1B:9C:05:9F:90:71:9D:CE
Authority key identifier: A6:09:26:5D:89:4F:A7:9F:CD:65:42:FA:CC:0B:A3:89:73:8C:84:59
Certificate issuer:       /CN=a609265d894fa79fcd6542facc0ba389738c8459
Certificate serial:       01962E993D5DFA78546BAFF5F7016B6A6C9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft
Manifest number:          0802
Signing time:             Sun 13 Apr 2025 10:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:56 +0000
Files and hashes:         1: pgkmXYlPp5_NZUL6zAujiXOMhFk.crl (hash: oN50qzE9tsiSX2sn4vKUwqzqzYEgWwPNuHt71JyOngU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3d:5d:fa:78:54:6b:af:f5:f7:01:6b:6a:6c:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a609265d894fa79fcd6542facc0ba389738c8459
        Validity
            Not Before: Apr 13 10:01:56 2025 GMT
            Not After : Apr 14 10:01:56 2025 GMT
        Subject: CN=572492b914bb21f2053f08491b9c059f90719dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ed:9d:81:e6:b6:6c:94:20:ec:87:c1:a5:f6:
                    28:c4:86:e9:f0:d4:66:9c:9d:f3:bc:34:19:8b:ad:
                    98:62:69:ad:49:31:3e:4c:6f:d2:d2:ab:0b:8a:e5:
                    a1:28:dc:5f:6b:e9:5c:7c:91:2c:c8:9b:46:48:95:
                    b0:1f:88:87:e3:4d:3b:59:18:3e:ae:67:90:40:c1:
                    5c:34:06:a2:75:68:26:65:1a:5f:71:cd:65:4a:c2:
                    5c:3c:71:75:9f:f8:d5:9f:8c:c3:03:a7:b6:12:2c:
                    0f:f2:3b:00:2a:2e:28:a9:cf:fc:1b:01:90:36:8a:
                    00:fa:ef:3f:95:f5:74:4f:ad:72:a7:42:54:c3:fa:
                    9c:5c:76:e8:a3:a3:6e:e7:b0:03:2e:8e:5b:77:cf:
                    dd:a7:69:45:99:56:9e:42:89:d6:e4:d3:ad:b4:ff:
                    46:9a:f5:98:42:a7:f8:56:a9:f4:6d:d4:46:93:9e:
                    12:d2:5b:0a:50:4c:29:97:e4:d8:28:6c:65:5c:c9:
                    6e:b9:e5:33:eb:0f:f8:61:34:45:b3:bd:f3:ba:d9:
                    ee:99:a2:33:ec:61:e1:ad:b0:5e:30:95:20:0d:32:
                    df:54:21:2b:73:0c:19:d1:9a:a3:a3:23:cb:21:21:
                    ce:eb:7b:bb:a1:ee:ec:1e:25:db:27:85:03:d2:ae:
                    73:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:24:92:B9:14:BB:21:F2:05:3F:08:49:1B:9C:05:9F:90:71:9D:CE
            X509v3 Authority Key Identifier:
                keyid:A6:09:26:5D:89:4F:A7:9F:CD:65:42:FA:CC:0B:A3:89:73:8C:84:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgkmXYlPp5_NZUL6zAujiXOMhFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/730d4d-d4ab-4279-b225-6dc0da1f5dee/1/pgkmXYlPp5_NZUL6zAujiXOMhFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:2c:7b:4e:c8:8c:57:1c:9a:a3:32:25:df:1f:5b:f1:00:93:
         6e:61:3a:5c:6e:9c:d6:45:8a:1c:4b:46:b5:a4:72:c5:e6:88:
         ce:b0:4b:5c:13:c4:a0:7b:20:f9:97:fc:9e:72:d6:3d:7c:69:
         e7:09:fb:7c:d7:89:5f:c4:d3:ca:76:73:53:3d:f5:b0:c2:af:
         4f:ac:88:83:74:f5:af:04:b3:6a:3f:ea:62:5d:7a:8c:ad:28:
         d3:7b:f1:90:c1:89:39:54:8c:5b:fb:64:30:b8:a1:f3:09:68:
         19:6f:a0:33:50:bc:ff:28:94:c8:53:f7:cc:ed:68:2e:fc:03:
         ef:8c:60:5a:38:9a:7b:3e:79:71:77:ca:02:74:58:82:3d:7d:
         f7:84:15:63:54:1b:8d:42:93:af:67:70:de:d5:bc:e3:80:7c:
         f6:02:10:a6:d9:1b:83:58:b3:07:17:89:ce:ba:c2:4a:b8:b0:
         e4:fa:91:5e:bc:eb:35:96:07:dc:a8:a2:cb:eb:58:4c:ff:44:
         65:12:dd:94:2d:5d:d8:40:cd:07:31:c3:98:41:6d:2b:71:68:
         79:af:cb:a6:fc:fd:ed:29:9e:03:32:67:03:39:e2:d6:61:05:
         3e:aa:8f:63:06:a7:8e:fa:f9:eb:4a:0f:d2:9e:f1:8a:1d:08:
         e1:e3:cd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----