Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
File:                     PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft (raw, json)
Hash identifier:          G9Xkso4atIHJWLokDO9anX9hU7etlEA4C4dbLIa7kLM=
Subject key identifier:   59:4B:D4:23:24:2D:BD:06:6A:93:E3:A1:C4:2F:6F:5D:98:F8:FE:2C
Authority key identifier: 3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D
Certificate issuer:       /CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
Certificate serial:       01962F3D799DD9A60EB181C77D096ABC7753
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft
Manifest number:          0702
Signing time:             Sun 13 Apr 2025 13:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:20 +0000
Files and hashes:         1: LN9Y4VYuBPHcqnOfi1whRTolirA.roa (hash: oKsBnnzz1/szS+noOPKG/sq6k5F0SOG+hrVgu4395L0=)
                          2: PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl (hash: Liipq5aOqiqGoZxIqGGyE2gJleb7WGEjPo2RP2ovNdU=)
                          3: aOjeQ_LFlj3ColO7fwm2y03noI8.roa (hash: ZPkI6QIM1mrIPNFFrmXcy/CvfmDUl8kYYI0d126tg6Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:79:9d:d9:a6:0e:b1:81:c7:7d:09:6a:bc:77:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e34b02edc7c2878f94c5104cafa8978afb6752d
        Validity
            Not Before: Apr 13 13:01:20 2025 GMT
            Not After : Apr 14 13:01:20 2025 GMT
        Subject: CN=594bd423242dbd066a93e3a1c42f6f5d98f8fe2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:95:3d:77:39:75:fc:1d:07:82:84:b8:40:76:
                    b2:c7:b7:00:8a:fb:b2:7f:4d:e6:67:84:d5:b3:c7:
                    3c:f9:45:80:96:d5:80:56:9d:ab:55:f2:9c:bf:f2:
                    82:98:a3:07:a0:8a:2b:f5:32:c9:df:69:03:8e:f3:
                    1b:07:dd:a1:47:6c:09:6b:5e:28:09:d8:0a:71:9c:
                    0c:fe:47:6e:5a:cc:ce:d3:86:2a:ed:05:9f:64:c9:
                    d5:7a:e4:5e:89:c0:3a:56:46:9e:da:0e:88:47:1e:
                    c5:df:69:4e:c0:59:b2:18:a3:32:57:8c:0f:1e:b1:
                    06:ea:a7:98:a5:39:ed:10:1b:d5:a2:f7:c3:19:72:
                    93:6e:de:4e:2f:06:79:1a:80:0d:56:33:50:a0:b7:
                    bd:55:78:06:17:9e:96:2f:82:88:f0:df:15:70:84:
                    19:86:80:75:92:ac:a5:f3:80:77:e4:b0:8a:4f:06:
                    53:50:0f:55:c3:c9:74:20:2f:65:dc:c0:65:35:3e:
                    49:14:9d:5a:32:86:95:62:73:81:5a:13:17:db:a6:
                    57:94:9f:a2:c2:99:cb:ff:6f:42:a5:68:0e:e5:cf:
                    1a:41:a7:bd:30:57:94:cc:c0:83:e7:fc:f8:9b:f2:
                    fc:64:6c:79:1f:49:fb:b4:6b:07:60:cb:df:0f:ec:
                    b9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4B:D4:23:24:2D:BD:06:6A:93:E3:A1:C4:2F:6F:5D:98:F8:FE:2C
            X509v3 Authority Key Identifier:
                keyid:3E:34:B0:2E:DC:7C:28:78:F9:4C:51:04:CA:FA:89:78:AF:B6:75:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PjSwLtx8KHj5TFEEyvqJeK-2dS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/42252e-0321-4da2-92f4-35a0241a4301/1/PjSwLtx8KHj5TFEEyvqJeK-2dS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:2b:2a:9a:4e:12:5d:66:56:e1:e5:28:71:c0:43:3f:da:89:
         5d:f0:67:c9:c1:be:39:ed:10:88:3b:c2:2f:aa:b4:c9:5b:7f:
         8a:14:a5:71:fe:96:aa:57:27:99:bc:89:ef:c7:01:68:48:f1:
         66:73:c4:75:1a:d3:f2:d3:93:c4:0a:a1:e4:6a:de:af:d5:ef:
         7f:78:fc:56:d2:20:7d:a3:7f:8f:7e:cf:01:a5:72:99:d8:da:
         b3:fd:e4:6a:79:17:3b:7d:55:01:d8:a3:a6:30:1b:a7:de:96:
         79:95:85:a4:21:40:96:3e:e1:ea:1d:52:ed:6c:01:88:c4:40:
         56:41:2c:b8:bf:30:c1:84:8d:ed:50:ef:d0:01:d9:82:36:71:
         18:bd:28:76:90:85:f8:af:ac:f9:22:9a:ca:96:f7:b8:b4:72:
         e6:96:87:11:12:06:c3:c1:7b:e7:a5:fe:03:4e:c0:d1:16:54:
         87:6e:08:7f:c4:69:d7:83:76:53:75:a1:e7:f8:b1:d8:72:ba:
         e2:18:d8:a4:d9:0a:6b:10:72:e1:48:bf:74:f1:cb:b2:6d:d1:
         e5:34:f0:b8:5e:50:6a:8b:5e:f5:d8:56:79:de:6d:44:59:8c:
         af:a4:c7:7c:a8:11:98:b2:34:80:5c:ec:95:97:b2:fb:f0:ed:
         8f:ba:3e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----