Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.mft
File:                     PFlVXsIygmx91tmpJrU2AoN5SfY.mft (raw, json)
Hash identifier:          enlffmCNLg9kRVoYKZbGYrFXWrBJ9w8klj6l+B5yxjU=
Subject key identifier:   76:7E:34:9A:77:EC:7E:65:25:9B:7B:CF:60:B5:2D:AC:21:8F:19:3B
Authority key identifier: 3C:59:55:5E:C2:32:82:6C:7D:D6:D9:A9:26:B5:36:02:83:79:49:F6
Certificate issuer:       /CN=3c59555ec232826c7dd6d9a926b53602837949f6
Certificate serial:       01962E2ACF42672C7BCDEEE18F649CE934AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PFlVXsIygmx91tmpJrU2AoN5SfY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.mft
Manifest number:          9E
Signing time:             Sun 13 Apr 2025 08:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:19 +0000
Files and hashes:         1: PFlVXsIygmx91tmpJrU2AoN5SfY.crl (hash: b7TRKymXYuVoZG+sbTgCTcQRZkUYBUuS0MVJzRdzbKc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:cf:42:67:2c:7b:cd:ee:e1:8f:64:9c:e9:34:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c59555ec232826c7dd6d9a926b53602837949f6
        Validity
            Not Before: Apr 13 08:01:19 2025 GMT
            Not After : Apr 14 08:01:19 2025 GMT
        Subject: CN=767e349a77ec7e65259b7bcf60b52dac218f193b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:12:cf:8a:20:9f:21:f5:18:61:2e:52:7f:e4:
                    c8:bf:f6:62:2d:f7:19:eb:f0:d4:04:df:6a:b1:cd:
                    23:46:78:09:70:0a:20:76:cc:29:35:c1:23:21:d2:
                    af:48:8d:06:10:20:4a:97:21:92:fb:d9:9f:f0:af:
                    0c:92:4a:65:12:c9:3a:0c:7e:aa:e9:eb:63:65:cd:
                    3b:7c:81:c1:36:7f:89:ef:a3:69:5a:67:00:88:de:
                    26:4c:f8:00:ba:b9:6a:b7:cf:28:ec:81:a6:f2:c5:
                    96:fd:29:64:af:22:09:a9:99:b2:7c:bc:32:69:bc:
                    e6:42:99:c5:26:e1:22:88:92:4a:85:01:08:1b:85:
                    3d:3d:e7:5a:15:fd:4c:92:ed:3f:be:35:b8:3d:ca:
                    d6:d1:53:e9:f8:d2:92:ba:13:84:1d:b2:99:1c:53:
                    72:ba:e2:61:c7:2c:cc:01:0f:52:f6:12:11:72:19:
                    71:1c:97:10:64:94:4d:25:3b:6d:61:0d:97:fa:66:
                    a7:9e:94:c6:4d:35:dc:33:09:4c:6d:7a:e4:d6:53:
                    66:01:55:f5:a7:44:8d:69:ff:97:d8:05:01:c8:53:
                    e0:8f:ab:25:42:f9:c3:6e:01:d4:af:93:58:3a:5c:
                    ea:8e:6e:4e:7a:e4:ff:12:d8:29:8d:5d:49:d0:0c:
                    db:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7E:34:9A:77:EC:7E:65:25:9B:7B:CF:60:B5:2D:AC:21:8F:19:3B
            X509v3 Authority Key Identifier:
                keyid:3C:59:55:5E:C2:32:82:6C:7D:D6:D9:A9:26:B5:36:02:83:79:49:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFlVXsIygmx91tmpJrU2AoN5SfY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ba9404-78f3-4935-9e2e-95b1373c5399/1/PFlVXsIygmx91tmpJrU2AoN5SfY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:72:d3:4b:f3:4b:40:63:1a:5b:68:ed:db:9e:9e:47:ee:39:
         4d:19:3b:e4:b7:87:25:66:82:7b:6a:b3:04:3b:83:68:ed:66:
         27:90:8b:10:9a:a1:06:1d:be:35:a6:77:7b:f0:b6:38:ea:e8:
         85:13:17:44:cb:cc:4c:97:c8:45:e1:18:64:b8:c3:cd:05:f6:
         d9:0b:c4:34:6a:50:bb:7b:b8:e0:06:fb:2c:87:78:69:bd:f1:
         0e:91:9e:2c:17:4d:35:51:5c:8e:da:a2:ca:e5:dd:44:d5:e8:
         e7:22:15:55:29:af:91:01:a3:da:1b:1e:26:d7:0e:b6:34:bc:
         88:27:53:7e:f3:56:d6:d6:f9:9d:26:4f:61:8b:a4:8e:36:42:
         4c:e8:20:fa:17:74:e6:60:70:fa:0e:15:84:55:9f:af:8c:75:
         00:88:a1:19:35:94:6a:53:f3:6b:f6:e3:2b:23:fb:d2:4e:03:
         9a:9b:c4:08:00:82:0d:8c:ca:77:91:f0:a4:7e:a9:16:08:41:
         fe:21:e9:1b:8f:7d:f1:7f:0f:f6:ea:bf:12:1e:2d:39:e1:bb:
         33:2a:d5:cd:ce:0b:6a:9e:6e:f4:63:9c:da:d6:c3:00:b8:5d:
         ce:83:d5:c0:7f:01:52:60:b2:5e:aa:f3:b2:b9:a0:25:75:f1:
         9a:58:d8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----