Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
File:                     PqlK-DEYyT_-izYnXtU0mU1not0.mft (raw, json)
Hash identifier:          UsIXupeouyraoX2TYYRryatPqUdhGhsNEoTp72QPx5o=
Subject key identifier:   F0:FB:05:8A:DA:D1:37:B2:F3:62:FE:5D:DF:CB:0C:49:81:02:55:85
Authority key identifier: 3E:A9:4A:F8:31:18:C9:3F:FE:8B:36:27:5E:D5:34:99:4D:67:A2:DD
Certificate issuer:       /CN=3ea94af83118c93ffe8b36275ed534994d67a2dd
Certificate serial:       01962FAB7E79B1369603681906367A377DAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft
Manifest number:          10DB
Signing time:             Sun 13 Apr 2025 15:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:30 +0000
Files and hashes:         1: PqlK-DEYyT_-izYnXtU0mU1not0.crl (hash: j5QdaqCW+eCC4xsJR/fcQ2tfz1JRW7gskS0OqS6fIOo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7e:79:b1:36:96:03:68:19:06:36:7a:37:7d:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ea94af83118c93ffe8b36275ed534994d67a2dd
        Validity
            Not Before: Apr 13 15:01:30 2025 GMT
            Not After : Apr 14 15:01:30 2025 GMT
        Subject: CN=f0fb058adad137b2f362fe5ddfcb0c4981025585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:24:ab:27:c8:19:65:0b:5d:f7:4f:02:97:26:
                    ab:15:26:69:11:79:e2:e8:6a:8d:fa:a7:a7:59:66:
                    40:4a:01:9e:98:57:a1:49:98:87:11:15:67:52:25:
                    08:80:2f:ea:6d:16:f1:b5:cf:18:d6:eb:92:12:37:
                    69:70:31:25:9e:86:d4:7e:4c:30:b4:de:6a:0a:41:
                    57:ff:88:7e:5a:d2:f7:a7:0f:2c:ff:ac:8c:46:a5:
                    79:50:7d:e9:81:b8:6f:84:26:71:bd:6c:7b:2e:05:
                    1e:91:87:4e:bb:f6:7c:92:c1:b8:c5:3b:8e:e6:b0:
                    68:f6:c1:8a:6e:24:da:56:27:b3:1a:30:2a:0e:2b:
                    89:d5:66:aa:5a:d2:05:2c:4f:26:bd:40:c6:64:b4:
                    41:df:7c:f2:cf:fe:8e:25:01:f9:68:6c:b2:9c:2a:
                    53:3e:37:c7:11:96:80:81:2e:f0:cb:ab:7f:6e:10:
                    53:48:1b:b7:63:0a:95:e3:e1:5c:8a:07:28:91:de:
                    3e:56:99:be:c2:0c:7e:9c:26:d6:9b:68:90:a0:de:
                    c4:cd:b0:1b:2a:70:79:42:c0:c2:6b:d7:91:e9:92:
                    50:85:7a:b9:a1:8c:67:dc:12:7c:58:3f:bd:dd:b0:
                    d1:5b:4e:e2:93:10:85:b8:3e:a1:16:7e:09:c1:93:
                    f7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:FB:05:8A:DA:D1:37:B2:F3:62:FE:5D:DF:CB:0C:49:81:02:55:85
            X509v3 Authority Key Identifier:
                keyid:3E:A9:4A:F8:31:18:C9:3F:FE:8B:36:27:5E:D5:34:99:4D:67:A2:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqlK-DEYyT_-izYnXtU0mU1not0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/ff4191-b9f3-4382-bee1-2957afb14794/1/PqlK-DEYyT_-izYnXtU0mU1not0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:c1:85:7d:fa:eb:d3:67:be:38:c1:07:f0:30:36:d9:2c:8e:
         0c:16:16:59:2e:23:a7:15:ae:30:bb:3b:00:e2:47:1d:7c:ea:
         4a:a4:98:3b:1c:29:d7:2d:e2:3d:b8:64:c5:05:92:36:b5:32:
         b6:33:8d:13:28:c5:cf:17:e2:4e:36:2f:b3:7a:76:de:2e:4f:
         15:90:8c:63:a6:44:8a:93:c7:3b:53:9d:f6:c0:ae:cb:09:9b:
         82:ce:7c:25:25:49:4f:15:39:ea:30:f7:42:b4:d2:df:93:3f:
         2f:b9:cd:c3:d2:33:8f:ee:2b:ce:bb:59:3d:be:da:6e:66:ba:
         b8:de:b8:46:9c:50:a6:2f:cb:f7:02:07:7b:0e:d7:3b:84:36:
         60:a3:ad:86:1d:37:23:7d:af:d9:c9:08:67:10:a5:36:17:44:
         c4:a9:cb:7e:99:af:d9:bd:7e:bc:10:4d:96:e5:37:80:a8:df:
         66:15:8f:2b:42:ad:ed:53:79:fb:17:ec:81:37:98:9e:66:06:
         63:9e:96:5f:a7:10:93:b2:9c:98:6b:03:10:eb:e0:7c:ea:05:
         05:c1:a0:f0:eb:b6:0d:9d:96:38:e4:bb:3f:05:a7:c1:9a:63:
         8e:74:9c:ee:aa:2f:24:27:3f:76:92:c1:ec:c4:f4:a4:64:b0:
         7d:10:fd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----