Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/767555-cc38-4df3-bcf7-2b1e342b2b24/1/PJiu68LWwGwWm6wwMGpem2hCbFk.mft
File:                     PJiu68LWwGwWm6wwMGpem2hCbFk.mft (raw, json)
Hash identifier:          mgPtmuKqpInJdQ1dCzKgu+QwRE5D144TGmvGNxwmn0g=
Subject key identifier:   5B:91:E5:98:D5:12:7C:67:DF:10:5B:F0:A6:7C:F2:A7:C7:64:73:35
Authority key identifier: 3C:98:AE:EB:C2:D6:C0:6C:16:9B:AC:30:30:6A:5E:9B:68:42:6C:59
Certificate issuer:       /CN=3c98aeebc2d6c06c169bac30306a5e9b68426c59
Certificate serial:       0191B2D535749E250D825509923A66393B00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PJiu68LWwGwWm6wwMGpem2hCbFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/767555-cc38-4df3-bcf7-2b1e342b2b24/1/PJiu68LWwGwWm6wwMGpem2hCbFk.mft
Manifest number:          03
Signing time:             Mon 02 Sep 2024 13:03:22 +0000
Manifest this update:     Mon 02 Sep 2024 13:03:22 +0000
Manifest next update:     Tue 03 Sep 2024 13:03:22 +0000
Files and hashes:         1: CF_4fI5DFQfyR3NH39briaccWsE.roa (hash: x1knXDAEV+9RkZUG8ii2jk6coRrblKvokilSTR7AJAc=)
                          2: PJiu68LWwGwWm6wwMGpem2hCbFk.crl (hash: LB5Z2BdNtZqSeKwLs1yxE9OR6gOYCSFp5wX3w6n9BFU=)
                          3: upfecyqbrgZcVLz594piPyry5pE.roa (hash: OxgcUsjwI7tTMEjmoHN9xHei67rz+LeAdLfKMs/p8ro=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:b2:d5:35:74:9e:25:0d:82:55:09:92:3a:66:39:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c98aeebc2d6c06c169bac30306a5e9b68426c59
        Validity
            Not Before: Sep  2 13:03:22 2024 GMT
            Not After : Sep  3 13:03:22 2024 GMT
        Subject: CN=5b91e598d5127c67df105bf0a67cf2a7c7647335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:41:d7:99:fd:b8:7b:eb:85:f5:ce:b3:a8:14:
                    67:96:cc:ad:d6:89:6d:49:d8:0f:f8:df:e8:11:6e:
                    8d:55:76:01:30:95:11:31:3d:fa:86:2b:47:03:ef:
                    4b:15:86:b7:30:e1:8b:f4:68:90:6b:72:f6:18:3d:
                    a9:7d:1b:74:cc:75:43:5c:ee:ee:86:78:87:0f:42:
                    36:04:27:e1:5a:24:d9:ab:d8:06:3f:12:27:71:87:
                    2c:12:37:b5:a1:3c:81:24:06:10:39:e5:bc:70:67:
                    aa:78:02:af:97:99:dc:0d:52:70:80:08:1c:ee:52:
                    fe:f4:ca:c8:4b:52:6a:d4:f5:3c:e1:99:3c:f7:00:
                    06:1b:91:9f:f3:ca:09:61:2d:aa:a3:2f:ac:a2:92:
                    71:ff:45:d4:44:fe:8d:11:02:81:df:bf:f5:a4:65:
                    b8:cd:74:f9:ad:75:02:d6:8d:fa:a3:f8:39:16:c1:
                    34:52:47:d6:31:d1:2d:0e:3e:01:f0:da:4f:22:c7:
                    7d:de:03:2b:fe:a5:8c:e5:a1:49:7c:ae:09:4e:43:
                    d4:78:a7:42:66:33:18:1c:b7:63:8c:7c:e9:01:ef:
                    3b:c8:33:ec:71:1a:97:31:f0:84:52:19:8c:4d:9e:
                    d8:66:40:a5:6b:ce:64:44:09:1b:f5:94:cb:75:2b:
                    ec:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:91:E5:98:D5:12:7C:67:DF:10:5B:F0:A6:7C:F2:A7:C7:64:73:35
            X509v3 Authority Key Identifier:
                keyid:3C:98:AE:EB:C2:D6:C0:6C:16:9B:AC:30:30:6A:5E:9B:68:42:6C:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJiu68LWwGwWm6wwMGpem2hCbFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/767555-cc38-4df3-bcf7-2b1e342b2b24/1/PJiu68LWwGwWm6wwMGpem2hCbFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/767555-cc38-4df3-bcf7-2b1e342b2b24/1/PJiu68LWwGwWm6wwMGpem2hCbFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:b9:83:bc:4c:66:29:dc:a6:02:76:ef:dd:f7:9f:c1:eb:0a:
         a3:aa:d9:b0:3c:a9:fb:2c:85:65:86:fd:ca:11:79:45:8e:f3:
         99:86:a3:42:98:6c:2e:1f:73:54:a4:8f:88:46:69:5c:b6:81:
         59:af:3e:7f:65:2e:05:2d:f8:e7:ba:c2:24:60:7e:1b:8c:96:
         74:b2:84:55:ef:7a:1a:c0:b6:14:a0:be:04:46:77:9c:35:ac:
         2a:c5:dd:d7:ba:2a:ea:31:b4:ac:3c:59:7f:9c:ed:9b:ec:2d:
         97:3e:37:f0:73:c8:a6:3d:03:ad:8b:8a:27:55:7d:6f:22:7d:
         eb:cf:16:a1:2c:9c:a5:64:b5:5d:25:8c:60:50:ee:6b:fe:4e:
         f1:19:1b:93:09:73:3d:1f:86:5e:c7:36:02:70:30:5f:a6:a9:
         a0:11:ed:07:83:c7:d8:d1:af:01:d1:6d:9c:4e:9a:bc:95:c0:
         52:dc:d4:6c:60:18:c6:48:bf:72:f3:46:35:97:ba:61:30:5c:
         fc:08:67:ed:5b:cb:02:5f:1f:8f:d5:5a:61:ba:96:3c:e8:1b:
         1e:8e:89:4b:22:56:31:41:d9:dd:71:bd:cc:c9:c6:d6:58:8a:
         d9:fc:7f:bf:c2:03:35:8e:e1:ee:c5:19:92:12:58:bd:79:7e:
         23:bb:13:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZGy1TV0niUNglUJkjpmOTsAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjOThhZWViYzJkNmMwNmMxNjliYWMzMDMwNmE1ZTliNjg0
MjZjNTkwHhcNMjQwOTAyMTMwMzIyWhcNMjQwOTAzMTMwMzIyWjAzMTEwLwYDVQQD
Eyg1YjkxZTU5OGQ1MTI3YzY3ZGYxMDViZjBhNjdjZjJhN2M3NjQ3MzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEHXmf24e+uF9c6zqBRnlsyt1olt
SdgP+N/oEW6NVXYBMJURMT36hitHA+9LFYa3MOGL9GiQa3L2GD2pfRt0zHVDXO7u
hniHD0I2BCfhWiTZq9gGPxIncYcsEje1oTyBJAYQOeW8cGeqeAKvl5ncDVJwgAgc
7lL+9MrIS1Jq1PU84Zk89wAGG5Gf88oJYS2qoy+sopJx/0XURP6NEQKB37/1pGW4
zXT5rXUC1o36o/g5FsE0UkfWMdEtDj4B8NpPIsd93gMr/qWM5aFJfK4JTkPUeKdC
ZjMYHLdjjHzpAe87yDPscRqXMfCEUhmMTZ7YZkCla85kRAkb9ZTLdSvscQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuR5ZjVEnxn3xBb8KZ88qfHZHM1MB8GA1UdIwQY
MBaAFDyYruvC1sBsFpusMDBqXptoQmxZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEppdTY4TFd3R3dXbTZ3d01HcGVtMmhDYkZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83Njc1NTUtY2MzOC00ZGYzLWJjZjct
MmIxZTM0MmIyYjI0LzEvUEppdTY4TFd3R3dXbTZ3d01HcGVtMmhDYkZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC83Njc1NTUtY2MzOC00ZGYzLWJjZjctMmIxZTM0MmIyYjI0
LzEvUEppdTY4TFd3R3dXbTZ3d01HcGVtMmhDYkZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMbmDvExm
KdymAnbv3fefwesKo6rZsDyp+yyFZYb9yhF5RY7zmYajQphsLh9zVKSPiEZpXLaB
Wa8+f2UuBS3457rCJGB+G4yWdLKEVe96GsC2FKC+BEZ3nDWsKsXd17oq6jG0rDxZ
f5ztm+wtlz438HPIpj0DrYuKJ1V9byJ9688WoSycpWS1XSWMYFDua/5O8Rkbkwlz
PR+GXsc2AnAwX6apoBHtB4PH2NGvAdFtnE6avJXAUtzUbGAYxki/cvNGNZe6YTBc
/Ahn7VvLAl8fj9VaYbqWPOgbHo6JSyJWMUHZ3XG9zMnG1liK2fx/v8IDNY7h7sUZ
khJYvXl+I7sTSw==
-----END CERTIFICATE-----