Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.mft
File:                     PE71UtfFcTYTTntE1pfLAs3n2H0.mft (raw, json)
Hash identifier:          f2d61KaQBBo9yBmi9AocWp0DzUU+LI3+MqKzo7+mGRM=
Subject key identifier:   2A:EE:26:B8:86:97:D8:55:D6:ED:EE:BB:06:CA:59:21:6D:A9:84:12
Authority key identifier: 3C:4E:F5:52:D7:C5:71:36:13:4E:7B:44:D6:97:CB:02:CD:E7:D8:7D
Certificate issuer:       /CN=3c4ef552d7c57136134e7b44d697cb02cde7d87d
Certificate serial:       01962F7438FCA7F0FBD8F9DD4EC400125EC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PE71UtfFcTYTTntE1pfLAs3n2H0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.mft
Manifest number:          094F
Signing time:             Sun 13 Apr 2025 14:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:08 +0000
Files and hashes:         1: PE71UtfFcTYTTntE1pfLAs3n2H0.crl (hash: A2l2pirEpYtInHOTjgWzGmWyq+YBb2IQrio2pwgzunA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:38:fc:a7:f0:fb:d8:f9:dd:4e:c4:00:12:5e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4ef552d7c57136134e7b44d697cb02cde7d87d
        Validity
            Not Before: Apr 13 14:01:08 2025 GMT
            Not After : Apr 14 14:01:08 2025 GMT
        Subject: CN=2aee26b88697d855d6edeebb06ca59216da98412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d5:a5:da:21:69:b8:cb:aa:e7:58:5a:e8:20:
                    23:ec:1d:51:aa:dd:aa:c4:bf:7a:2d:ba:a8:24:53:
                    cb:ae:55:08:92:92:ed:c7:f3:9d:ab:69:20:87:41:
                    01:03:a0:9b:bd:31:b4:f7:58:26:24:fd:3d:a9:24:
                    76:40:c9:2d:85:d9:ac:2f:a0:21:43:2f:d0:90:fd:
                    cf:36:35:83:93:60:28:19:95:0c:56:f1:e8:cf:8b:
                    0c:cf:15:b5:57:5a:c8:7e:15:12:12:f8:3d:0d:d6:
                    db:42:2f:0b:1f:18:6c:72:f1:ca:7f:4b:ef:17:3f:
                    9f:48:e9:1b:a1:d0:22:f2:5b:ab:81:b9:db:cc:77:
                    3b:ab:2f:5c:ab:52:e4:29:b3:d3:e4:30:fb:40:6f:
                    07:04:a6:40:b0:f2:c5:8a:d3:86:f3:0f:16:c3:d0:
                    7a:e0:d4:b9:6c:89:f4:78:c0:b0:eb:a4:5f:f7:35:
                    f7:6c:45:b5:ef:96:27:74:b3:54:03:04:ec:d8:57:
                    05:f2:2e:61:61:6e:e0:52:52:f5:f8:8a:42:2a:d6:
                    d6:25:f2:ae:9b:f6:c0:ed:a5:88:11:71:20:67:1f:
                    b4:c1:5f:f8:6f:ad:85:c7:8b:07:03:d3:a9:fd:67:
                    db:ac:5b:82:34:d6:36:33:00:49:eb:20:ac:2b:fc:
                    25:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:EE:26:B8:86:97:D8:55:D6:ED:EE:BB:06:CA:59:21:6D:A9:84:12
            X509v3 Authority Key Identifier:
                keyid:3C:4E:F5:52:D7:C5:71:36:13:4E:7B:44:D6:97:CB:02:CD:E7:D8:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE71UtfFcTYTTntE1pfLAs3n2H0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b321d1-814b-4cf9-9d07-11441e16a137/1/PE71UtfFcTYTTntE1pfLAs3n2H0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:ae:c1:79:fd:7f:0c:42:aa:b2:87:3c:88:98:91:fb:67:94:
         98:a6:af:9f:de:5f:35:ca:90:f9:42:23:9e:a2:f2:9e:83:9e:
         3f:0a:e7:72:e4:e6:e4:03:64:fb:9f:8c:fe:eb:fe:71:e7:f7:
         2a:1e:d4:4b:a3:41:d2:dc:eb:8b:f7:be:45:56:39:36:b8:89:
         f1:98:9c:8e:9b:e1:36:ea:af:c7:a2:52:84:61:9f:e5:90:96:
         3b:cc:49:41:4d:89:ce:ab:67:7c:81:39:93:7f:1b:03:2d:c4:
         ff:36:68:1e:26:72:cf:a4:f9:be:5d:ca:0a:1f:15:6a:0c:b3:
         90:61:8a:6a:4b:2f:fa:d3:02:f3:ef:03:00:c1:0e:f9:93:e7:
         4a:90:7c:43:20:14:f4:f0:d1:0b:91:9d:cf:bc:aa:0a:69:6a:
         0a:a1:b7:bf:f3:18:39:64:00:f6:69:66:f5:a9:4f:4b:92:dd:
         43:18:ad:ad:13:b0:be:0f:d0:6c:70:48:ea:3a:56:aa:67:e9:
         53:6d:80:c6:b8:fa:b6:93:7e:90:f2:e5:fc:00:25:77:48:78:
         36:09:94:a1:46:3f:2d:0c:11:82:7b:ba:e5:67:2f:c5:73:89:
         7f:44:da:40:c6:f1:4a:8c:9a:43:05:af:62:66:1a:be:86:9b:
         f8:ec:93:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----