Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
File:                     PQJjyVdcvQESY66Ig5p4iLdPoHY.mft (raw, json)
Hash identifier:          02Ha4wIe7MPn8wnUbnQqsSPiYDnLsmvonQEQjD0aq/s=
Subject key identifier:   45:7F:3A:37:A6:1C:DA:8B:30:22:33:5C:BE:B7:4A:AD:90:E9:50:23
Authority key identifier: 3D:02:63:C9:57:5C:BD:01:12:63:AE:88:83:9A:78:88:B7:4F:A0:76
Certificate issuer:       /CN=3d0263c9575cbd011263ae88839a7888b74fa076
Certificate serial:       01962E98C89A1AEBA95F2944BA5656CCE81A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PQJjyVdcvQESY66Ig5p4iLdPoHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft
Manifest number:          1015
Signing time:             Sun 13 Apr 2025 10:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:26 +0000
Files and hashes:         1: PQJjyVdcvQESY66Ig5p4iLdPoHY.crl (hash: Y0m8DHljQ+z8otAN3ge5DM0NTV3ETq6NAIAVdGTSSUQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c8:9a:1a:eb:a9:5f:29:44:ba:56:56:cc:e8:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d0263c9575cbd011263ae88839a7888b74fa076
        Validity
            Not Before: Apr 13 10:01:26 2025 GMT
            Not After : Apr 14 10:01:26 2025 GMT
        Subject: CN=457f3a37a61cda8b3022335cbeb74aad90e95023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:31:7e:a6:7c:25:cc:54:86:7c:fb:13:58:65:
                    a4:12:13:8f:22:b7:fe:84:7c:ba:f8:d1:25:10:8b:
                    18:c6:7c:04:d0:fd:9c:48:3a:79:58:05:88:c6:c4:
                    94:20:3a:82:d0:c3:a1:2c:05:97:53:db:c6:84:04:
                    48:3f:1f:b5:72:37:8a:ee:f0:53:44:9b:2e:aa:67:
                    43:5a:76:4c:07:1c:43:ce:f2:36:4e:f1:cf:3d:2b:
                    b6:c2:03:3f:9c:85:ee:92:8a:0d:b9:c6:3e:0f:2a:
                    c0:a1:3c:1a:be:a1:e0:03:61:06:af:38:56:fc:09:
                    55:80:ef:0b:a0:ab:d8:cf:44:de:d5:f2:80:34:59:
                    09:d5:41:97:c5:c3:12:03:ff:2c:a0:70:2c:6e:a6:
                    b0:61:a8:0e:7c:53:9b:bf:54:71:3d:0b:1e:1c:d7:
                    4d:7b:66:fb:23:37:08:c7:6f:87:e3:47:04:2d:d6:
                    7b:76:ca:ab:9f:fb:d6:99:c7:8d:7c:e2:aa:0e:89:
                    61:42:e2:51:1a:58:9c:87:13:40:01:f1:71:df:f6:
                    58:39:25:88:88:33:58:38:fb:60:b2:6f:10:e9:6c:
                    c4:1f:61:4c:a6:95:82:b2:4b:a9:b6:0f:9d:dc:41:
                    a6:b4:f7:cc:6c:2c:12:9a:6e:be:5e:22:de:d0:5c:
                    df:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:7F:3A:37:A6:1C:DA:8B:30:22:33:5C:BE:B7:4A:AD:90:E9:50:23
            X509v3 Authority Key Identifier:
                keyid:3D:02:63:C9:57:5C:BD:01:12:63:AE:88:83:9A:78:88:B7:4F:A0:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQJjyVdcvQESY66Ig5p4iLdPoHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/37423a-0537-45f4-9915-12f4e6273877/1/PQJjyVdcvQESY66Ig5p4iLdPoHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:42:a1:c7:29:6c:1a:73:3b:16:99:67:ca:38:47:4d:24:8f:
         4e:dc:56:86:da:0e:4a:e7:90:92:e7:8a:8f:e4:99:4f:4b:2f:
         2e:80:f7:13:6d:a0:fe:7a:32:7d:de:00:b9:de:64:2b:95:a5:
         dc:23:51:3a:c2:d2:25:5a:0b:18:12:1f:14:e9:f7:97:d2:68:
         00:ef:ff:6f:52:df:02:dc:81:3f:af:cd:c4:0e:ad:29:05:3e:
         ce:24:56:21:70:67:ed:9e:55:13:45:a9:f1:54:f9:d1:af:4c:
         7a:c4:f6:4f:4c:9b:a6:07:bc:28:86:cf:6c:d7:e0:02:cf:5c:
         fa:07:cc:1b:42:90:9f:9f:66:df:1e:5a:91:4c:a5:ec:1c:38:
         aa:c2:c5:7e:b5:e9:ae:49:15:ee:1b:e7:91:86:c6:0d:80:97:
         0e:eb:cd:86:f4:87:b7:54:ef:70:3d:76:f5:84:39:95:20:84:
         65:2e:61:f6:60:a2:56:14:86:0b:31:a9:09:02:91:73:ed:28:
         40:e9:d1:94:a9:ca:9a:80:2b:82:06:f4:3a:1d:7c:5b:ef:a6:
         5d:0b:40:98:47:d5:ba:a4:62:7e:f8:ce:dc:3b:6c:c9:9f:38:
         69:48:32:dc:a4:53:6b:75:e0:de:4b:c5:38:d1:47:fb:25:52:
         4f:76:db:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----