Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
File:                     PLxNr2DH1E6V1suSB6nd7FmkS_c.mft (raw, json)
Hash identifier:          c2JQt8booKYAykjGIP6DrdDJ3PF+XyAvM9yNLyD1lUk=
Subject key identifier:   49:DC:12:93:01:A5:29:07:1A:E2:A3:AA:1B:35:05:27:3D:05:60:7C
Authority key identifier: 3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7
Certificate issuer:       /CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
Certificate serial:       01962DF43A9C25C201F3907C89ADA2C8948E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft
Manifest number:          0433
Signing time:             Sun 13 Apr 2025 07:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:42 +0000
Files and hashes:         1: PLxNr2DH1E6V1suSB6nd7FmkS_c.crl (hash: 1A7MH3IXiEL1twP7GmjlpeYkAx3EaYgTQl9QiJGYewk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3a:9c:25:c2:01:f3:90:7c:89:ad:a2:c8:94:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cbc4daf60c7d44e95d6cb9207a9ddec59a44bf7
        Validity
            Not Before: Apr 13 07:01:42 2025 GMT
            Not After : Apr 14 07:01:42 2025 GMT
        Subject: CN=49dc129301a529071ae2a3aa1b3505273d05607c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b7:6d:4e:13:95:84:c9:94:e8:f4:75:65:49:
                    25:a3:84:a4:eb:2d:1d:13:51:f2:66:1d:7c:07:b0:
                    16:4e:d9:fb:c7:a0:75:bb:d6:fd:20:d9:a0:a9:ba:
                    ae:e1:ca:94:3d:45:e4:94:5b:e6:fe:75:04:86:5d:
                    c9:20:06:f6:d7:4e:33:fe:01:e6:76:ef:bd:41:c0:
                    15:d8:50:8b:75:13:0d:3d:0f:ff:cb:3e:97:23:37:
                    47:21:55:41:54:90:03:f4:ce:91:79:aa:22:15:62:
                    bf:91:2d:ea:ef:e6:e3:61:f9:3b:d7:bc:1c:9d:b6:
                    e4:1f:f8:39:c4:83:c0:26:03:7f:86:52:cc:1e:07:
                    55:45:ec:0e:75:32:4c:11:4b:91:01:2b:77:15:5d:
                    fc:29:46:b7:8f:b6:a8:84:d9:38:e7:61:f0:45:4c:
                    2d:a8:1a:5b:77:5c:c2:2c:c3:3f:03:65:5b:a0:59:
                    d9:49:60:a0:a0:0f:2f:23:6c:74:5c:e4:b9:d2:fe:
                    eb:33:d3:1d:c3:d4:a0:c0:97:ea:66:7e:9d:f5:65:
                    d0:f9:0d:3f:05:d9:f6:3c:61:b8:4c:35:d2:bd:3e:
                    c6:6c:0a:15:40:6b:63:69:48:64:14:20:51:97:85:
                    ff:f3:0e:25:6b:be:0a:61:4e:68:a5:9d:07:e2:4c:
                    46:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:DC:12:93:01:A5:29:07:1A:E2:A3:AA:1B:35:05:27:3D:05:60:7C
            X509v3 Authority Key Identifier:
                keyid:3C:BC:4D:AF:60:C7:D4:4E:95:D6:CB:92:07:A9:DD:EC:59:A4:4B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLxNr2DH1E6V1suSB6nd7FmkS_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8afd4b-df62-4ba4-ad76-bf49a6d7be7c/1/PLxNr2DH1E6V1suSB6nd7FmkS_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:20:c2:aa:96:b5:37:2d:c3:7b:e5:1d:6c:52:a5:42:5e:11:
         09:f1:ce:c0:f3:af:9f:43:f4:e3:e6:06:c3:91:53:9c:ba:53:
         27:e2:fb:5b:1a:28:18:0b:cb:ee:3c:02:6e:e7:a6:5b:50:7f:
         48:8e:ff:e5:5b:17:02:d4:8c:26:af:30:88:dc:e0:b2:5a:86:
         b8:92:04:c6:64:7a:68:4c:22:6d:5b:d1:de:cf:0a:83:37:d2:
         7e:0e:7d:c0:be:c6:6c:56:55:83:10:64:e9:5a:54:96:95:ed:
         b6:2c:c5:4c:2f:c4:e7:f2:d9:1b:b6:fb:f8:f2:de:01:e5:f1:
         8d:c9:05:e2:e4:75:c8:43:22:6b:6c:06:d4:1d:7c:01:26:e4:
         13:27:a8:c2:27:0e:53:37:20:12:b5:87:53:47:57:3e:9e:5b:
         8b:f2:55:d6:df:1b:f1:21:1b:8c:24:cf:4c:5b:08:9e:8f:ed:
         a4:c2:16:bd:52:93:8b:7f:43:95:7e:90:e7:4f:67:2f:8a:bb:
         4a:64:39:9f:89:2f:18:54:62:84:40:08:8a:2c:b1:22:c2:3a:
         b4:9c:16:16:18:5d:8b:15:ab:cf:23:f0:3e:a8:ea:ed:40:4d:
         0c:6c:e0:c1:47:8b:6e:24:74:9f:e1:00:69:b5:a7:bf:44:58:
         82:91:31:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----