Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.mft
File:                     Pq9YPXwbe09XMQE8iymLpQVGTlI.mft (raw, json)
Hash identifier:          2NS97/M/CfbvIXw6BBzqL/JSuEjlgxFVlO9kknD7JMM=
Subject key identifier:   F2:A5:2E:E9:5B:40:86:51:88:1D:10:55:60:98:8C:B1:DA:C1:71:0F
Authority key identifier: 3E:AF:58:3D:7C:1B:7B:4F:57:31:01:3C:8B:29:8B:A5:05:46:4E:52
Certificate issuer:       /CN=3eaf583d7c1b7b4f5731013c8b298ba505464e52
Certificate serial:       01962DF41BD1DD0017695D17537E56623C09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pq9YPXwbe09XMQE8iymLpQVGTlI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.mft
Manifest number:          1103
Signing time:             Sun 13 Apr 2025 07:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:34 +0000
Files and hashes:         1: Pq9YPXwbe09XMQE8iymLpQVGTlI.crl (hash: nxekUpoXORAmvrZuvSAGy5G87ZVpT9KnsC9Ww+035ik=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1b:d1:dd:00:17:69:5d:17:53:7e:56:62:3c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eaf583d7c1b7b4f5731013c8b298ba505464e52
        Validity
            Not Before: Apr 13 07:01:34 2025 GMT
            Not After : Apr 14 07:01:34 2025 GMT
        Subject: CN=f2a52ee95b408651881d105560988cb1dac1710f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:86:3a:20:01:bb:5c:36:d4:71:38:99:c1:50:
                    93:18:65:8f:0b:d0:44:7e:62:1b:87:1c:08:05:35:
                    74:25:d0:57:ad:6b:d7:c4:57:ab:b4:e2:fa:14:c3:
                    dd:a4:3c:b9:93:0a:a2:5a:fd:73:ff:3f:a2:63:f1:
                    d8:64:d4:d7:0e:ad:a9:12:d9:0f:c3:7b:14:4f:3e:
                    db:48:08:e1:d3:63:88:34:a0:68:a4:cf:54:92:c6:
                    ed:9a:ce:60:98:81:65:9a:66:56:55:0e:4d:8e:58:
                    55:d1:49:55:7d:86:fc:0a:ce:02:01:0d:84:36:c4:
                    e9:38:06:d7:2a:cd:65:21:8e:5a:e7:54:65:27:0f:
                    b3:3d:d3:c5:de:1c:80:fc:f4:ea:78:ef:7e:07:21:
                    fe:eb:af:f2:05:b3:20:8b:72:46:b7:d2:4a:50:22:
                    a2:09:a6:64:ba:71:b0:fd:cc:51:ed:7c:d3:d4:97:
                    64:63:94:58:b4:db:59:28:a9:82:f5:a0:57:92:79:
                    96:23:58:cd:91:60:cc:ae:47:db:9e:a9:ba:40:a3:
                    6e:9b:4d:2b:90:c9:bb:bd:74:1a:ff:9d:e2:52:81:
                    4a:ac:96:05:90:24:25:41:ac:45:23:d0:10:01:2b:
                    59:6a:bf:b8:93:dd:10:54:89:8f:45:56:25:4a:10:
                    7d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A5:2E:E9:5B:40:86:51:88:1D:10:55:60:98:8C:B1:DA:C1:71:0F
            X509v3 Authority Key Identifier:
                keyid:3E:AF:58:3D:7C:1B:7B:4F:57:31:01:3C:8B:29:8B:A5:05:46:4E:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pq9YPXwbe09XMQE8iymLpQVGTlI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d98e86-e41c-45e1-bbe7-8e19c4da8798/1/Pq9YPXwbe09XMQE8iymLpQVGTlI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:90:4e:ad:3d:77:26:8b:d1:af:5b:73:36:60:03:0d:6c:af:
         40:3f:8e:71:86:9c:b8:b0:a9:bb:21:ff:fe:cc:de:38:38:2c:
         66:a8:26:d9:b3:5f:53:94:05:1a:a2:bd:63:3c:bf:73:35:0b:
         15:cd:a4:b0:52:b4:39:b8:35:e5:f8:08:22:cc:25:b9:85:6b:
         3c:a2:21:09:a2:d8:19:fa:bd:6f:ed:0b:3d:ca:4f:7a:a6:c0:
         26:36:77:6c:3b:c9:19:0d:b4:5a:e2:16:a4:d2:c6:fa:1d:13:
         f1:60:54:87:1f:58:8f:05:37:5d:38:3d:d6:2e:e8:78:5e:44:
         7e:6b:b8:0f:3f:76:27:bc:61:3c:47:63:80:38:f4:b9:21:33:
         70:40:0d:1a:82:5c:93:e7:ea:e5:28:58:a4:8e:f9:a9:4d:dd:
         10:40:8f:51:17:13:78:9e:bc:bb:f7:98:92:0e:3f:76:3f:31:
         de:22:7b:9c:34:9d:e4:83:38:59:f8:af:0f:fd:b7:da:1f:c3:
         99:ec:f6:c1:10:0b:72:fc:ba:72:c9:76:71:a5:31:bf:63:dc:
         19:e5:a3:6b:0f:56:78:f2:70:d1:23:b8:3c:2b:b0:5e:29:8c:
         26:7e:eb:da:41:d6:26:06:ca:d1:53:50:42:54:74:d0:ea:a0:
         98:72:5d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----