Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d4e557-0640-48d3-87d6-59029a8b533a/1/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.mft
File:                     Pgq6MPS0BP9N7J_AAWwLvuS2uHc.mft (raw, json)
Hash identifier:          IHCJknAI7Jn0W4WHWQOmj2ptvzgG+m/ojwahEg1xILQ=
Subject key identifier:   83:49:3D:C1:3B:6D:D4:CC:EA:00:B1:DB:56:00:70:C3:EB:EF:F1:05
Authority key identifier: 3E:0A:BA:30:F4:B4:04:FF:4D:EC:9F:C0:01:6C:0B:BE:E4:B6:B8:77
Certificate issuer:       /CN=3e0aba30f4b404ff4dec9fc0016c0bbee4b6b877
Certificate serial:       01962F3D9CAF9D4A0ED743BF7EE2F28A6F2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/d4e557-0640-48d3-87d6-59029a8b533a/1/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.mft
Manifest number:          0369
Signing time:             Sun 13 Apr 2025 13:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:29 +0000
Files and hashes:         1: Pgq6MPS0BP9N7J_AAWwLvuS2uHc.crl (hash: 8qWfqgqeXhRu46jM2Pg36TuyhJdAZEDMj8NIwpxBbhI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9c:af:9d:4a:0e:d7:43:bf:7e:e2:f2:8a:6f:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e0aba30f4b404ff4dec9fc0016c0bbee4b6b877
        Validity
            Not Before: Apr 13 13:01:29 2025 GMT
            Not After : Apr 14 13:01:29 2025 GMT
        Subject: CN=83493dc13b6dd4ccea00b1db560070c3ebeff105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:80:e3:e3:3c:4a:91:da:9b:a5:aa:e7:48:b0:
                    85:f3:a0:40:ae:de:41:d7:3e:1f:a3:e4:b3:25:91:
                    ce:56:89:f8:41:86:4d:8d:37:9b:58:1c:a8:04:cb:
                    34:99:72:8c:59:98:7d:8c:2e:d9:76:a1:73:ed:c9:
                    05:15:80:d6:70:09:91:8b:eb:b1:61:87:f5:81:c4:
                    05:52:4b:41:66:12:ce:bf:9c:fd:b8:a3:0b:1b:b5:
                    c8:7a:5a:e0:fc:6c:f0:5f:f9:03:a0:48:eb:a8:22:
                    0f:24:e4:8b:82:8f:d2:0d:b0:de:cb:52:08:6d:78:
                    0f:54:15:c6:63:ca:7d:a0:c5:2f:17:ca:3f:31:eb:
                    33:53:21:3c:fc:e3:dd:72:40:14:7f:a6:9d:59:f6:
                    ef:44:da:41:26:5e:e9:02:b6:28:f3:07:12:6e:1c:
                    10:88:5a:38:9c:03:b1:7d:dd:4e:78:db:cc:41:ce:
                    70:05:2c:3c:1c:6c:96:6f:02:db:38:c6:65:86:fd:
                    b0:cd:ab:6d:e9:c2:4c:bc:d1:fb:77:ec:e2:6e:21:
                    49:ad:32:84:cb:e4:c4:40:04:0b:2a:95:6a:ec:42:
                    37:7b:7b:c0:b2:62:0b:88:46:5f:d1:e3:65:ca:1e:
                    c2:9d:d8:03:d9:f1:b9:8d:16:79:35:7c:e8:9e:b3:
                    4d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:49:3D:C1:3B:6D:D4:CC:EA:00:B1:DB:56:00:70:C3:EB:EF:F1:05
            X509v3 Authority Key Identifier:
                keyid:3E:0A:BA:30:F4:B4:04:FF:4D:EC:9F:C0:01:6C:0B:BE:E4:B6:B8:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d4e557-0640-48d3-87d6-59029a8b533a/1/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d4e557-0640-48d3-87d6-59029a8b533a/1/Pgq6MPS0BP9N7J_AAWwLvuS2uHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:40:ad:33:c1:bc:95:fc:bb:32:d2:54:98:0d:63:0e:b9:89:
         ed:55:cf:0b:78:0e:83:79:2d:11:8c:45:f5:9b:90:3a:1b:a9:
         51:06:15:0b:f9:c7:e0:9c:15:c2:59:5d:2f:99:5b:ad:da:b6:
         9c:42:ab:f8:4c:fe:59:d1:c9:45:b2:cc:cd:7e:2d:21:dc:66:
         62:e2:b9:3c:a9:73:91:29:be:bf:c0:97:ea:16:ae:a7:26:6c:
         0f:2b:ce:bf:16:e0:94:13:5e:04:d2:92:5c:0a:e7:b1:26:ab:
         1e:b2:35:ba:c9:57:47:63:6f:13:9c:d6:b2:2f:43:c4:f8:87:
         1e:85:ee:09:0e:3b:31:2a:a2:b0:8e:48:3e:e7:db:47:e3:62:
         7b:16:6e:08:2b:51:42:e1:fb:f6:12:6f:9b:35:aa:99:34:2b:
         9b:1e:b4:7b:69:32:d5:50:d4:11:75:bb:a7:8b:ca:a5:b4:be:
         8d:32:9e:46:1f:41:c6:28:e9:a7:95:22:b2:61:fe:11:cf:58:
         29:5f:5a:08:ff:4e:5b:4a:29:52:e0:bf:90:f8:9e:32:76:ee:
         b6:f0:07:a6:1f:b6:3f:b5:72:6c:b8:ca:c5:24:e7:b8:3d:82:
         bd:9d:0d:3e:f3:f1:a5:6b:fe:17:66:56:11:56:bc:75:ed:46:
         25:03:34:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----