Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
File:                     PflufaVJi3Djuxe24YoxE3EtMrY.mft (raw, json)
Hash identifier:          +wVI1ATbtAx+5U0L6WHB6K1GZxWoOJjofKeOU7fvru8=
Subject key identifier:   11:A6:9D:82:30:F4:03:08:B3:51:D4:E3:A2:48:D5:56:BF:23:21:DB
Authority key identifier: 3D:F9:6E:7D:A5:49:8B:70:E3:BB:17:B6:E1:8A:31:13:71:2D:32:B6
Certificate issuer:       /CN=3df96e7da5498b70e3bb17b6e18a3113712d32b6
Certificate serial:       01962E99B94E75026B20694FC267D288A050
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft
Manifest number:          0ED0
Signing time:             Sun 13 Apr 2025 10:02:28 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:28 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:28 +0000
Files and hashes:         1: PflufaVJi3Djuxe24YoxE3EtMrY.crl (hash: z4UTmKST1YfiDY+zzXhAR+fpaQrLYKHkWVq3+A2yCVw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b9:4e:75:02:6b:20:69:4f:c2:67:d2:88:a0:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3df96e7da5498b70e3bb17b6e18a3113712d32b6
        Validity
            Not Before: Apr 13 10:02:28 2025 GMT
            Not After : Apr 14 10:02:28 2025 GMT
        Subject: CN=11a69d8230f40308b351d4e3a248d556bf2321db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f3:90:97:19:5c:7e:9d:77:43:31:79:5c:25:
                    97:6a:17:7b:75:30:9c:41:01:ba:b3:8d:d2:f8:e4:
                    c1:94:8a:10:c0:43:15:f9:f3:5b:b8:ea:59:24:bc:
                    3d:81:36:a5:71:bc:da:53:94:76:d6:34:23:40:7d:
                    d3:0b:eb:f2:2b:89:fb:4f:1b:04:05:94:6a:65:b3:
                    83:87:11:4d:d2:e8:7d:fb:d8:d8:1a:c5:45:cf:bc:
                    c9:65:f9:ef:ac:b6:89:18:cf:b5:e6:3b:cf:72:d3:
                    1c:cb:f4:f1:e8:1a:18:35:e6:45:3a:6d:c0:db:46:
                    ab:ea:12:81:87:f8:14:d5:7e:c4:37:70:24:ea:1d:
                    5a:2c:1e:07:9f:38:a2:5e:be:ef:a4:7d:35:58:01:
                    2e:1d:54:19:a5:61:23:84:82:7a:60:50:4e:d7:bb:
                    21:84:a1:9e:b7:c4:a9:cc:e7:8e:55:38:5d:09:c0:
                    46:84:65:0b:69:99:e1:88:79:dd:58:40:5d:6b:93:
                    a7:fc:6c:a5:a3:68:ed:16:b9:4b:d7:a9:f9:49:cd:
                    5c:49:36:e4:ff:76:1c:b8:9a:3b:34:b0:89:47:07:
                    6b:4c:ff:c2:71:98:12:37:8c:08:7b:2a:84:6b:95:
                    d2:83:1e:66:25:21:a6:31:4c:07:2f:3a:d8:1d:c8:
                    68:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A6:9D:82:30:F4:03:08:B3:51:D4:E3:A2:48:D5:56:BF:23:21:DB
            X509v3 Authority Key Identifier:
                keyid:3D:F9:6E:7D:A5:49:8B:70:E3:BB:17:B6:E1:8A:31:13:71:2D:32:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PflufaVJi3Djuxe24YoxE3EtMrY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8831d9-3933-483a-b9af-36e88506680e/1/PflufaVJi3Djuxe24YoxE3EtMrY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:b9:49:52:b4:d1:8f:2f:4c:10:2e:eb:ac:26:43:e9:61:54:
         73:44:2f:57:a7:0a:f2:9a:ba:9f:7e:2a:54:1f:1c:81:0c:13:
         71:38:c3:8d:ef:a2:bc:83:96:8f:f0:35:d9:35:3f:e0:0d:3b:
         2a:94:09:1c:10:24:67:d3:31:f8:3b:47:8b:b7:22:80:11:5c:
         b2:4a:29:93:fa:43:86:08:c6:3c:49:4a:b2:21:bb:18:5f:44:
         a1:2c:a6:d2:ec:d3:9e:3e:57:77:83:43:dd:93:38:f0:e0:e9:
         55:a6:7d:a6:be:71:02:6d:1e:ce:97:51:16:48:b4:55:a0:47:
         66:00:a3:3c:3d:b9:a3:1a:ad:20:5c:6e:0e:e0:18:82:d4:b9:
         0f:77:56:7d:0f:d6:19:45:3c:3b:d0:49:e8:32:a6:b9:39:d6:
         70:68:e8:6f:42:6d:33:c7:6c:e0:76:e0:06:5f:47:05:0c:e8:
         e5:64:57:32:eb:3f:04:30:53:8d:ba:0f:b2:01:66:47:7d:63:
         05:b0:3e:ea:e6:d5:c2:d0:0e:96:0d:34:25:f3:1f:ac:4a:f0:
         19:a0:ad:e9:15:4a:21:63:17:ff:73:9b:f8:5e:b2:b1:36:c8:
         0d:68:03:79:e0:cb:01:ed:39:0c:4b:1c:19:cf:04:15:34:8c:
         e9:bb:b2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----