Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
File:                     PGu5kW2QqkR3ctA_Ce37or3PN5I.mft (raw, json)
Hash identifier:          uWRe/DVeJY7mkv6d2vLtVMyrVAjHjJY0bP1bd5YNd2E=
Subject key identifier:   8C:75:37:00:39:4E:E6:C1:73:37:E7:C4:92:3F:95:F1:7E:62:EE:82
Authority key identifier: 3C:6B:B9:91:6D:90:AA:44:77:72:D0:3F:09:ED:FB:A2:BD:CF:37:92
Certificate issuer:       /CN=3c6bb9916d90aa447772d03f09edfba2bdcf3792
Certificate serial:       01962F74B71EFFB05781469EF4B585AA7FDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft
Manifest number:          05CF
Signing time:             Sun 13 Apr 2025 14:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:39 +0000
Files and hashes:         1: PGu5kW2QqkR3ctA_Ce37or3PN5I.crl (hash: ExjfYOriT6xXPZMdPktZQpJ3a6LS2mJwgQR2nEo+BJ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b7:1e:ff:b0:57:81:46:9e:f4:b5:85:aa:7f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c6bb9916d90aa447772d03f09edfba2bdcf3792
        Validity
            Not Before: Apr 13 14:01:39 2025 GMT
            Not After : Apr 14 14:01:39 2025 GMT
        Subject: CN=8c753700394ee6c17337e7c4923f95f17e62ee82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f6:3f:e1:d8:2f:52:a4:9d:55:32:8c:f7:95:
                    13:b2:f6:42:6c:bc:de:e5:80:7d:14:b4:f2:87:79:
                    9d:5e:ba:ab:a0:c4:ba:6b:49:1b:15:d1:cd:45:dd:
                    b5:bd:1e:0c:06:de:cc:96:a9:d1:9b:0f:58:2c:b4:
                    d0:11:9d:a4:d2:59:fd:e4:b8:19:ec:57:3b:89:c5:
                    ce:4e:7a:2d:54:1e:33:0b:7d:62:c9:23:b3:61:2a:
                    7d:1c:fc:de:9f:e0:81:05:c8:a2:f3:ef:4f:b8:c2:
                    48:66:1c:2e:f7:aa:e2:ba:2f:a3:79:54:47:76:56:
                    5b:8b:50:ef:0d:db:aa:1d:10:12:89:69:de:f5:8f:
                    b3:5e:50:44:a4:27:d7:72:b7:9e:f0:39:23:c6:3c:
                    b3:6c:29:2b:a0:af:23:71:5b:d4:d3:38:c4:e9:cf:
                    60:e1:ba:df:84:8e:c4:cd:ea:62:3f:20:b8:8f:46:
                    94:1f:d2:c1:2c:98:b1:fa:64:68:af:ea:ad:15:df:
                    3a:ea:f1:48:35:f4:5a:92:f7:44:01:8a:9e:c3:57:
                    ae:39:d7:0b:b8:24:19:af:91:e7:84:23:1d:54:ea:
                    2f:af:d3:7c:b7:69:9d:f7:8a:02:85:90:4d:ce:f2:
                    75:16:f0:84:4e:a8:28:32:17:a1:7a:7b:c0:b9:48:
                    6c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:75:37:00:39:4E:E6:C1:73:37:E7:C4:92:3F:95:F1:7E:62:EE:82
            X509v3 Authority Key Identifier:
                keyid:3C:6B:B9:91:6D:90:AA:44:77:72:D0:3F:09:ED:FB:A2:BD:CF:37:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGu5kW2QqkR3ctA_Ce37or3PN5I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3cf9ee-867f-4214-a394-cbe9207cf54e/1/PGu5kW2QqkR3ctA_Ce37or3PN5I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:7a:bf:ef:83:fd:46:23:05:74:40:51:d5:1e:ec:34:6a:fc:
         ab:75:a2:ee:b5:70:56:e2:35:46:8f:da:f4:02:5d:37:9e:02:
         62:ac:ec:22:22:3c:a1:4d:39:9e:3b:84:e5:65:95:71:20:c3:
         e5:bb:20:d5:e9:5a:8e:28:e0:0b:1d:77:79:55:93:66:be:38:
         43:15:39:d9:40:76:eb:55:43:d5:f9:11:b8:f3:ab:93:4e:0a:
         77:1c:7e:5e:5b:72:d9:e6:dd:8b:e3:a3:1a:9a:92:8e:68:cd:
         1d:33:5a:44:85:aa:23:f2:83:71:10:a8:ec:2b:3d:44:b3:fb:
         05:b9:75:25:56:3a:e1:6c:15:c0:db:cc:1f:50:76:32:37:23:
         65:19:69:3f:28:91:9b:32:1c:49:72:aa:f7:42:7f:54:a9:bd:
         3e:8e:8c:54:d5:aa:77:5f:12:ab:a7:29:5a:4d:91:2c:74:8c:
         7f:d2:a6:34:8f:18:ce:e2:df:1a:b4:16:cc:a6:21:ce:4b:40:
         43:7c:20:12:31:34:4d:15:dd:45:0b:cf:0f:98:70:f4:d0:b2:
         75:6f:32:28:b8:98:23:5b:bf:aa:03:37:35:24:e9:ba:a0:a7:
         17:f9:6e:d5:b9:91:b2:f2:87:df:2d:1a:e8:09:57:61:8c:ba:
         7a:ca:cc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----