Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
File:                     PlfO-uaTAP31A15pfFrsLenIXa0.mft (raw, json)
Hash identifier:          ix0AnsS7DwnCW1DVmGHZCVkMD2k/buPlr6S2JN69IV8=
Subject key identifier:   0C:6C:F0:F2:06:DA:D7:2A:0B:EA:EF:45:54:29:59:7A:2F:D2:26:92
Authority key identifier: 3E:57:CE:FA:E6:93:00:FD:F5:03:5E:69:7C:5A:EC:2D:E9:C8:5D:AD
Certificate issuer:       /CN=3e57cefae69300fdf5035e697c5aec2de9c85dad
Certificate serial:       01962F74A2FA35C3314599C43B9DC50A4AFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft
Manifest number:          0441
Signing time:             Sun 13 Apr 2025 14:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:35 +0000
Files and hashes:         1: PlfO-uaTAP31A15pfFrsLenIXa0.crl (hash: cZdBfLTt1H/hzKcs1qA/k9812ZiCFM2vpetdnM2s8ps=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a2:fa:35:c3:31:45:99:c4:3b:9d:c5:0a:4a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e57cefae69300fdf5035e697c5aec2de9c85dad
        Validity
            Not Before: Apr 13 14:01:35 2025 GMT
            Not After : Apr 14 14:01:35 2025 GMT
        Subject: CN=0c6cf0f206dad72a0beaef455429597a2fd22692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:cb:05:59:e6:1e:31:38:52:25:ec:86:6e:f7:
                    eb:25:9a:2a:5c:c3:9d:6f:74:ce:0b:28:65:0d:a6:
                    4e:94:28:32:67:84:50:2e:aa:ed:01:8f:4f:90:71:
                    cc:0f:1b:9c:ca:43:93:36:52:e6:1b:90:5d:cf:fe:
                    cd:0c:fe:b1:d6:77:06:3d:fd:b3:3f:59:c4:c9:d8:
                    58:e3:56:b4:e7:93:0b:0c:dc:7b:97:c2:dc:5e:95:
                    c8:ec:c8:0b:e7:a7:33:dc:6e:f1:53:29:64:aa:5a:
                    a6:78:8b:bf:31:ec:4c:dc:53:a9:a9:1c:bc:30:78:
                    1a:8e:dd:09:a7:9f:8c:0f:29:0a:a5:b7:3b:3a:07:
                    d8:78:a8:65:c9:c2:ed:be:cb:c6:ce:8f:30:ac:4a:
                    c7:ce:11:7d:7f:de:de:c0:79:23:1a:69:c1:ce:55:
                    b1:ed:44:9f:70:d3:13:93:1d:8b:10:61:7c:0b:d8:
                    16:2f:a0:08:e7:a8:9f:7e:ff:14:02:cd:03:a5:6c:
                    e1:a0:75:be:19:25:ef:d4:c1:7a:0a:34:01:e8:50:
                    d9:5f:bf:7c:61:93:cf:87:f5:e1:d3:3d:60:c9:b4:
                    99:36:37:95:26:c9:80:b9:1a:ec:77:97:c8:d4:7f:
                    be:dd:21:a7:ab:6c:c8:6a:0b:9a:ef:60:91:c3:68:
                    a3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:6C:F0:F2:06:DA:D7:2A:0B:EA:EF:45:54:29:59:7A:2F:D2:26:92
            X509v3 Authority Key Identifier:
                keyid:3E:57:CE:FA:E6:93:00:FD:F5:03:5E:69:7C:5A:EC:2D:E9:C8:5D:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PlfO-uaTAP31A15pfFrsLenIXa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/54efdb-0c8d-49b3-8b99-3649bb6a4831/1/PlfO-uaTAP31A15pfFrsLenIXa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:f3:d0:22:d3:ca:cb:fa:7c:bd:70:12:e3:48:cc:e2:5f:d5:
         9f:2a:6d:e3:86:ee:03:f0:80:23:e3:af:43:02:b8:a8:35:27:
         56:0e:41:94:c3:f9:65:28:4b:a1:3b:cc:1e:c1:88:fa:39:15:
         92:30:dc:31:f2:64:ec:db:a9:ec:13:2a:b7:41:15:9d:49:15:
         b5:63:c8:f5:3e:36:1b:36:db:22:8b:9b:c8:ec:f4:00:11:a8:
         d0:73:21:8e:bc:ba:52:27:e1:b2:7e:f1:b9:53:dd:09:19:f8:
         d9:0f:e0:01:d9:5e:b5:d7:ca:00:fd:e1:7c:33:87:0d:38:62:
         e6:84:8b:a9:c9:2e:23:61:0b:00:93:bc:ce:a1:9f:49:d7:61:
         e8:85:95:7d:ed:ec:4b:9a:4a:7f:a5:c6:27:f6:05:6b:63:62:
         b5:ec:18:c5:87:75:4f:d6:f8:b7:7d:b9:91:53:fa:d6:1d:0b:
         0f:f1:b9:b5:64:e8:4b:91:58:31:68:f4:3b:00:5a:3c:33:8d:
         87:27:79:f4:27:ec:c9:c5:e5:ff:60:01:61:8d:d2:b8:7c:cc:
         81:92:4f:25:10:20:3d:35:da:c9:b6:53:23:18:14:9b:a3:8d:
         bb:42:f6:1b:27:11:97:1f:ad:b9:ed:90:47:88:e1:b6:7b:57:
         43:5b:eb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----