Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/2acb71-3c3b-4a66-9700-cd2726114846/1/PNQrfxakRkXr2PObog8ZBxOxs7w.mft
File:                     PNQrfxakRkXr2PObog8ZBxOxs7w.mft (raw, json)
Hash identifier:          XCjRU/KfzH7lIW3AqiEBs5h3w4i2mxcJM/WQRNbD9/I=
Subject key identifier:   6A:EC:18:D7:04:AE:99:53:4C:1F:94:B7:19:42:14:8A:EE:28:7B:F4
Authority key identifier: 3C:D4:2B:7F:16:A4:46:45:EB:D8:F3:9B:A2:0F:19:07:13:B1:B3:BC
Certificate issuer:       /CN=3cd42b7f16a44645ebd8f39ba20f190713b1b3bc
Certificate serial:       01962E9862E7A44BFC267A5EEF39EEACB79F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PNQrfxakRkXr2PObog8ZBxOxs7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/2acb71-3c3b-4a66-9700-cd2726114846/1/PNQrfxakRkXr2PObog8ZBxOxs7w.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 10:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:00 +0000
Files and hashes:         1: PNQrfxakRkXr2PObog8ZBxOxs7w.crl (hash: 2TV2IOtvnEDpI0bwhQXH3sPlI4hL27NIqsaUMdimvz8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:62:e7:a4:4b:fc:26:7a:5e:ef:39:ee:ac:b7:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cd42b7f16a44645ebd8f39ba20f190713b1b3bc
        Validity
            Not Before: Apr 13 10:01:00 2025 GMT
            Not After : Apr 14 10:01:00 2025 GMT
        Subject: CN=6aec18d704ae99534c1f94b71942148aee287bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ea:a0:66:65:11:ca:a8:88:51:0c:db:0b:8b:
                    0c:c2:b1:d8:0d:f8:e5:bb:b9:fd:87:09:1f:5c:31:
                    6c:79:9f:0c:24:ba:52:fe:00:10:55:57:3b:15:bd:
                    f0:93:e1:11:f3:5b:1c:8c:e1:45:13:55:3c:e6:82:
                    2c:e0:aa:a6:30:8f:7a:3c:bc:df:2c:fe:2a:95:fe:
                    c3:a1:d7:f9:1e:fd:f3:ac:f6:31:d0:ef:36:83:42:
                    04:e2:6e:23:88:6a:57:8a:09:90:76:8c:c9:01:e5:
                    48:df:ca:b4:5a:b9:d9:57:8c:eb:bb:11:f2:57:6a:
                    19:7f:3c:16:04:7c:cb:bf:64:28:c7:d6:28:70:ef:
                    46:70:9a:35:0e:b4:9e:e9:15:a7:20:41:3f:08:3a:
                    e3:f0:ee:7a:2a:40:df:9d:e8:5a:30:9b:3b:5e:a8:
                    66:3e:04:60:80:ec:6b:ba:b4:20:86:be:bc:d5:f1:
                    40:ee:21:da:e1:46:70:f2:46:7f:7b:f8:8d:56:8d:
                    28:64:fc:6e:13:41:f9:99:e6:4d:66:5c:23:65:37:
                    67:c5:c5:ea:3b:78:1d:9b:af:04:77:b1:b2:16:7a:
                    ca:31:81:85:98:98:52:79:96:14:d1:84:47:e8:5c:
                    80:ab:c6:de:7a:2f:85:c9:bf:42:12:c5:ab:ba:b9:
                    1d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:EC:18:D7:04:AE:99:53:4C:1F:94:B7:19:42:14:8A:EE:28:7B:F4
            X509v3 Authority Key Identifier:
                keyid:3C:D4:2B:7F:16:A4:46:45:EB:D8:F3:9B:A2:0F:19:07:13:B1:B3:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNQrfxakRkXr2PObog8ZBxOxs7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2acb71-3c3b-4a66-9700-cd2726114846/1/PNQrfxakRkXr2PObog8ZBxOxs7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2acb71-3c3b-4a66-9700-cd2726114846/1/PNQrfxakRkXr2PObog8ZBxOxs7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:4f:e3:a2:b2:76:6f:4a:0b:e7:be:ad:5d:51:72:c7:94:44:
         dd:af:18:83:b3:6f:41:a8:b3:5c:f8:25:9c:2a:cf:3c:82:5b:
         95:00:88:bd:35:9f:52:8b:17:1c:ec:1b:50:97:dd:45:b2:58:
         25:8b:00:a1:91:b9:ac:74:db:b4:1e:d7:b3:65:56:fe:ea:64:
         55:68:c6:23:30:d7:e5:07:2f:a4:36:81:36:08:65:ea:f3:c9:
         69:2b:2b:c7:4a:0a:0f:3f:1a:43:80:d2:8a:b4:c9:12:87:e8:
         8c:68:57:d3:d2:53:e7:cf:f7:36:8d:19:72:c9:5f:70:6b:14:
         eb:f5:0b:0a:b5:32:55:3c:da:69:30:b9:e9:e4:b3:0c:24:46:
         5b:24:df:e3:01:40:a2:6c:08:f0:0d:e5:b3:ea:07:8f:96:b6:
         e5:fa:e5:5f:c7:51:2c:ce:39:cd:fb:82:f1:25:f0:7d:e6:97:
         e1:5b:d0:bb:8d:55:3a:6a:b5:41:d5:af:15:9f:ea:69:67:99:
         d3:93:06:72:bb:9c:97:f2:85:b9:a1:c5:e0:a8:e1:13:cd:82:
         25:e2:7c:a1:2c:9a:3d:06:ef:08:ab:3f:8b:81:0c:51:2e:23:
         d0:91:a6:2e:fc:70:46:6e:94:09:bc:1d:ca:68:fb:c3:32:80:
         9b:d3:61:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----