Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9c50e5-b1d0-4c78-8de6-e716c98ca5f7/1/PbZurh7_N8XOflhyiwFuSR2sJqo.mft
File:                     PbZurh7_N8XOflhyiwFuSR2sJqo.mft (raw, json)
Hash identifier:          WpnRM9zJrCMLWNG97NDvvUN2NrGelP9XnT6TPj47HJU=
Subject key identifier:   C1:E6:1C:ED:F5:91:EF:20:17:B4:88:F7:C1:86:2E:3B:F2:99:24:31
Authority key identifier: 3D:B6:6E:AE:1E:FF:37:C5:CE:7E:58:72:8B:01:6E:49:1D:AC:26:AA
Certificate issuer:       /CN=3db66eae1eff37c5ce7e58728b016e491dac26aa
Certificate serial:       01962E98897B2189B5CE70BBE2EC8FB745BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PbZurh7_N8XOflhyiwFuSR2sJqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/9c50e5-b1d0-4c78-8de6-e716c98ca5f7/1/PbZurh7_N8XOflhyiwFuSR2sJqo.mft
Manifest number:          092D
Signing time:             Sun 13 Apr 2025 10:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:10 +0000
Files and hashes:         1: PbZurh7_N8XOflhyiwFuSR2sJqo.crl (hash: QrfQlSpMI56lB31/ttDRw/Y3m53BLm3VT9ikTKP7v44=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:89:7b:21:89:b5:ce:70:bb:e2:ec:8f:b7:45:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3db66eae1eff37c5ce7e58728b016e491dac26aa
        Validity
            Not Before: Apr 13 10:01:10 2025 GMT
            Not After : Apr 14 10:01:10 2025 GMT
        Subject: CN=c1e61cedf591ef2017b488f7c1862e3bf2992431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:05:db:41:6a:51:9e:95:e0:49:03:cc:bc:3c:
                    83:3e:25:8a:a9:2c:5d:4b:0d:f2:d9:b4:81:58:f6:
                    0d:90:33:5b:14:ea:ed:13:0e:17:bb:44:d6:b7:50:
                    c0:c2:2a:c9:66:72:93:21:c4:2b:1f:86:c9:d7:e7:
                    93:cc:b9:ba:72:b2:9c:a1:92:0f:79:02:b2:ef:58:
                    40:0d:83:20:44:ad:36:98:a1:b5:21:7c:1f:64:a9:
                    b5:ef:70:2f:1b:ff:c9:f6:6f:a4:d8:92:e4:7a:db:
                    a9:d7:d5:d5:b2:9a:1f:a5:df:5f:62:13:92:4f:42:
                    e3:b4:e4:9e:d4:b5:6d:99:45:7f:65:e2:8e:c2:36:
                    68:b7:9b:35:de:b2:1d:4c:98:c9:e4:fb:b7:e5:91:
                    ea:1b:d6:b6:ea:ee:bf:99:1c:d7:22:e5:82:46:3e:
                    d8:3c:8f:cb:ef:8b:6a:77:43:b3:8a:54:93:46:16:
                    02:9a:48:e1:0a:15:60:2c:c3:e1:0a:dc:52:5e:05:
                    4e:b3:78:13:0c:fe:ac:cb:7c:d7:b8:e0:14:1e:44:
                    21:99:84:49:98:77:4a:01:a4:e4:69:2a:04:0e:d3:
                    85:91:9e:4c:b1:1a:05:f8:e8:75:29:cd:c0:de:ed:
                    e6:e1:26:94:c1:25:90:49:2b:02:2d:97:fa:a8:9d:
                    87:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E6:1C:ED:F5:91:EF:20:17:B4:88:F7:C1:86:2E:3B:F2:99:24:31
            X509v3 Authority Key Identifier:
                keyid:3D:B6:6E:AE:1E:FF:37:C5:CE:7E:58:72:8B:01:6E:49:1D:AC:26:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PbZurh7_N8XOflhyiwFuSR2sJqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9c50e5-b1d0-4c78-8de6-e716c98ca5f7/1/PbZurh7_N8XOflhyiwFuSR2sJqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9c50e5-b1d0-4c78-8de6-e716c98ca5f7/1/PbZurh7_N8XOflhyiwFuSR2sJqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:7f:70:57:86:7e:c7:bb:b2:62:e7:f2:ce:27:ec:7d:be:23:
         4e:7a:84:1b:39:47:1d:5e:b5:ca:7c:10:73:22:3f:a9:94:a1:
         11:58:2a:6a:24:b1:e7:b6:c3:24:e9:1e:4e:eb:de:ed:8a:e7:
         d7:8a:dd:f6:60:72:db:3b:7d:3d:93:9c:c4:9c:0e:87:27:3a:
         7a:cc:e2:f3:28:38:12:45:80:1b:ec:01:63:1a:69:3b:86:fc:
         93:b4:31:85:49:4c:74:59:18:d8:3e:e8:70:89:2c:f1:de:af:
         4b:72:03:e9:3c:b1:b1:8b:f3:ca:2b:c7:03:ac:63:56:ab:20:
         9d:c9:f4:8f:0f:20:5a:22:7d:85:23:4e:c1:51:43:b5:6a:bd:
         02:c1:2e:a3:98:e4:d4:8f:f4:01:4b:1e:54:39:ab:c1:31:33:
         77:c2:7a:90:c4:4c:46:e7:0c:6b:6a:29:5d:46:88:f0:9a:fc:
         60:b2:ab:b0:b6:7b:68:23:c0:ad:c8:56:97:eb:d8:09:f9:23:
         32:07:40:0c:83:7b:f4:20:1b:7c:e6:6f:64:bd:80:c2:e4:e5:
         07:f8:43:7e:8c:01:2e:b6:28:47:a7:4f:6a:e3:1b:39:34:0b:
         9f:9c:5e:6e:ec:3b:5f:bc:63:cb:e7:9d:05:aa:65:72:b4:0a:
         6e:a3:5f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----