Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0d2819-7c42-4a9a-8c8b-18055d2c44be/1/pxTGIdV85C4lCT7OhXvbh146zqo.mft
File:                     pxTGIdV85C4lCT7OhXvbh146zqo.mft (raw, json)
Hash identifier:          r7mi6VDXmoFwoHfV2zxN9Qx6EhHDUd4Wol51UWzNayI=
Subject key identifier:   3B:A1:59:08:E4:03:C2:33:DD:BA:30:B3:2B:5C:8E:5D:A5:84:8F:45
Authority key identifier: A7:14:C6:21:D5:7C:E4:2E:25:09:3E:CE:85:7B:DB:87:5E:3A:CE:AA
Certificate issuer:       /CN=a714c621d57ce42e25093ece857bdb875e3aceaa
Certificate serial:       01962F3D47B683C72A825E23C7F5212686D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pxTGIdV85C4lCT7OhXvbh146zqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/0d2819-7c42-4a9a-8c8b-18055d2c44be/1/pxTGIdV85C4lCT7OhXvbh146zqo.mft
Manifest number:          01B7
Signing time:             Sun 13 Apr 2025 13:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:07 +0000
Files and hashes:         1: pxTGIdV85C4lCT7OhXvbh146zqo.crl (hash: kNkEZ/7ZILLM73MXkMh7h/Pjrm+/UzUPIMGn5W66wU8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:47:b6:83:c7:2a:82:5e:23:c7:f5:21:26:86:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a714c621d57ce42e25093ece857bdb875e3aceaa
        Validity
            Not Before: Apr 13 13:01:07 2025 GMT
            Not After : Apr 14 13:01:07 2025 GMT
        Subject: CN=3ba15908e403c233ddba30b32b5c8e5da5848f45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:68:19:26:f3:77:17:60:98:e0:33:b4:01:63:
                    f3:e2:af:3a:70:0c:ca:55:cb:af:f5:79:10:94:84:
                    41:56:bd:4f:00:06:56:47:6b:3d:57:7b:cf:54:60:
                    f1:f8:79:63:a3:4f:ab:0a:a6:96:10:c9:f6:dc:f6:
                    87:11:78:f0:a7:12:44:95:3f:f6:14:fb:69:01:32:
                    52:ff:64:e8:59:d6:aa:f0:9d:04:d6:e3:97:ce:ae:
                    cf:4c:eb:03:29:64:50:2b:3e:b0:7a:d3:ef:74:a7:
                    15:f5:8e:01:8c:52:23:f5:f1:ea:8a:57:06:75:c1:
                    9f:36:b7:13:71:88:16:36:53:b6:b7:2c:d8:72:94:
                    bd:f7:0d:1b:62:3f:ab:2c:f0:3b:a3:96:fb:6f:5a:
                    7b:5e:72:a9:4e:45:54:c4:bf:91:74:da:71:c4:cc:
                    2f:35:33:29:85:5b:17:31:19:e4:af:90:e4:78:cf:
                    0a:4f:58:70:58:d2:f1:df:a6:3a:04:3a:b2:90:88:
                    c3:a3:3c:32:84:7e:7e:58:4b:31:60:fe:72:8c:72:
                    1b:c2:fe:e2:08:66:ec:09:b5:14:8d:76:ee:d9:e8:
                    99:8f:6f:a7:97:fb:cf:c2:7b:6f:de:ad:c7:68:35:
                    25:83:0e:0b:d5:ef:78:25:e4:56:c9:25:c4:78:f9:
                    48:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A1:59:08:E4:03:C2:33:DD:BA:30:B3:2B:5C:8E:5D:A5:84:8F:45
            X509v3 Authority Key Identifier:
                keyid:A7:14:C6:21:D5:7C:E4:2E:25:09:3E:CE:85:7B:DB:87:5E:3A:CE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxTGIdV85C4lCT7OhXvbh146zqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0d2819-7c42-4a9a-8c8b-18055d2c44be/1/pxTGIdV85C4lCT7OhXvbh146zqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0d2819-7c42-4a9a-8c8b-18055d2c44be/1/pxTGIdV85C4lCT7OhXvbh146zqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:1b:87:78:2a:d9:69:6b:1b:33:3a:bc:1e:74:d4:d3:d4:08:
         8f:e6:4f:37:13:58:b0:55:48:30:2d:2e:0a:7b:71:92:a7:94:
         ac:69:d1:f5:e5:dd:f7:e7:8a:37:d7:fe:eb:ee:db:c3:84:96:
         e5:fe:6d:21:1f:7a:af:be:26:e6:80:86:26:14:17:50:f0:ab:
         eb:a9:d4:2b:28:2b:8e:c1:83:17:8d:93:41:d5:ea:13:35:74:
         3f:6a:eb:2c:3f:51:fb:23:41:0f:a3:cc:a8:e9:0e:24:e3:e8:
         dc:f9:ca:e9:b7:56:67:3d:e4:e1:2a:fd:5f:3e:c3:6a:da:c1:
         df:60:01:5c:73:d9:73:8c:d8:f3:da:0d:fd:81:35:58:8f:57:
         49:38:55:8d:75:d2:64:4f:9c:22:29:b1:bc:86:48:3f:ce:6f:
         c8:5e:88:08:9d:92:35:09:ff:ac:0d:9e:27:c6:ea:eb:ad:86:
         aa:62:5a:10:60:83:8a:67:e1:67:d7:2b:a7:df:a6:ec:8b:08:
         14:e2:04:43:04:7e:4a:03:96:ad:f8:6b:4c:18:24:54:ec:8b:
         78:77:95:9b:d3:91:86:8f:db:34:dd:0b:94:72:26:25:7a:39:
         2f:56:8a:36:62:c3:e8:64:bd:54:b6:90:f1:33:21:b6:e2:04:
         86:13:a3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----