Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/5ef3e2-0603-46fd-ad9f-8d8b6e116219/1/PgmlTMIkrXs8oMV1MXuBhOKs4hY.mft
File:                     PgmlTMIkrXs8oMV1MXuBhOKs4hY.mft (raw, json)
Hash identifier:          8YFe7mktgwzGfnHs7YsL2z6qmNDD7EeoJIULx/PaVZA=
Subject key identifier:   9E:1A:69:84:E7:FD:56:51:2F:55:D2:97:8E:BC:52:46:D8:0E:F5:44
Authority key identifier: 3E:09:A5:4C:C2:24:AD:7B:3C:A0:C5:75:31:7B:81:84:E2:AC:E2:16
Certificate issuer:       /CN=3e09a54cc224ad7b3ca0c575317b8184e2ace216
Certificate serial:       01948E50D8E157CD4DDCE7ACEB8D94C2FD0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PgmlTMIkrXs8oMV1MXuBhOKs4hY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/5ef3e2-0603-46fd-ad9f-8d8b6e116219/1/PgmlTMIkrXs8oMV1MXuBhOKs4hY.mft
Manifest number:          12EA
Signing time:             Wed 22 Jan 2025 14:00:50 +0000
Manifest this update:     Wed 22 Jan 2025 14:00:50 +0000
Manifest next update:     Thu 23 Jan 2025 14:00:50 +0000
Files and hashes:         1: 4aKaPeuKkFGP9DkxcB8DOClWpKg.roa (hash: m9nL9aDr5NjXaEfCOc4RkIAjrxKiWL1MukDMMkDw9YE=)
                          2: PgmlTMIkrXs8oMV1MXuBhOKs4hY.crl (hash: rFq2+4OthWu6WZ0E4+sLNjPNFUg4sTdXx0nfsHQfTV4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:8e:50:d8:e1:57:cd:4d:dc:e7:ac:eb:8d:94:c2:fd:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e09a54cc224ad7b3ca0c575317b8184e2ace216
        Validity
            Not Before: Jan 22 14:00:50 2025 GMT
            Not After : Jan 23 14:00:50 2025 GMT
        Subject: CN=9e1a6984e7fd56512f55d2978ebc5246d80ef544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b2:bb:43:3e:87:ea:4e:05:45:6c:c1:75:b0:
                    cb:39:39:97:91:8f:50:a5:dc:26:a7:35:4d:17:02:
                    8e:bf:36:47:9f:2a:7c:d7:c9:fa:db:03:50:8e:43:
                    47:bb:c6:28:b9:30:af:aa:eb:f7:11:38:91:ff:f9:
                    1b:a9:a4:64:f1:56:2b:d1:fa:7a:79:6b:d3:d2:6a:
                    58:77:41:2e:8c:a0:83:26:21:4b:16:b6:fb:28:7c:
                    58:b3:d0:00:49:74:f8:08:90:a5:64:17:c2:46:dc:
                    e9:92:cc:02:41:c4:a2:1d:f4:aa:e2:00:56:fe:e3:
                    dd:c5:9a:06:08:d6:a2:73:12:a7:52:7f:3e:27:22:
                    8a:b3:4d:6f:5c:27:0a:60:c9:92:18:53:66:e4:3c:
                    71:8b:78:48:72:93:ca:3a:58:7a:c5:f5:92:cb:5b:
                    9b:45:d7:1c:51:82:48:52:3b:de:5a:35:26:6c:8f:
                    3e:8a:c5:41:52:f5:83:59:ad:ff:b2:e1:7a:ec:c2:
                    94:30:96:a1:3f:a2:36:9b:a3:d5:08:73:8c:ee:f3:
                    c7:8d:fa:1e:b4:2d:35:9c:81:12:74:b9:10:5e:d2:
                    68:94:b9:e0:a5:72:83:49:1e:bc:76:90:aa:1f:15:
                    f4:96:1c:ed:f2:f2:07:a9:e6:8c:87:60:ff:fd:3c:
                    9f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:1A:69:84:E7:FD:56:51:2F:55:D2:97:8E:BC:52:46:D8:0E:F5:44
            X509v3 Authority Key Identifier:
                keyid:3E:09:A5:4C:C2:24:AD:7B:3C:A0:C5:75:31:7B:81:84:E2:AC:E2:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PgmlTMIkrXs8oMV1MXuBhOKs4hY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5ef3e2-0603-46fd-ad9f-8d8b6e116219/1/PgmlTMIkrXs8oMV1MXuBhOKs4hY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5ef3e2-0603-46fd-ad9f-8d8b6e116219/1/PgmlTMIkrXs8oMV1MXuBhOKs4hY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:0c:fe:3a:e8:33:3e:ce:16:59:46:5e:fa:d8:3b:84:81:aa:
         ff:ad:6b:87:fa:6f:ef:47:70:30:98:3f:01:05:31:35:67:74:
         02:43:dd:91:ef:45:a7:63:d4:18:53:77:e7:e1:ce:0e:d0:f4:
         72:2c:dc:8e:1f:d3:40:16:02:9f:05:60:98:4c:77:12:e2:ce:
         55:3f:fb:c4:e2:83:9a:5a:9a:f9:3d:49:43:22:dc:ec:fb:f2:
         14:bb:b3:d0:cc:65:45:eb:c9:8a:d6:e3:bc:07:0a:fe:e1:27:
         6c:5a:19:03:2c:f6:5a:d3:ca:99:2b:79:04:ff:62:dc:e6:ab:
         ca:9f:6f:80:8a:67:7b:9a:6c:60:9d:37:1a:0d:5a:f4:b6:f1:
         74:74:37:0b:dd:2e:9a:85:c7:58:e1:ae:90:ab:dc:c4:37:8f:
         19:95:21:b9:53:e3:0d:d4:11:5d:1c:3d:58:d8:95:86:bc:5c:
         c6:5d:71:be:bf:6b:e7:22:59:a1:27:1d:58:b2:b6:d4:42:b7:
         3b:ed:6a:e3:3f:7f:0d:e5:e6:c1:22:8e:0e:98:af:e4:fc:f1:
         90:4b:bf:78:f4:4f:69:b8:39:1d:92:36:3c:cb:ce:48:33:d9:
         6c:73:a3:c1:b7:b5:39:2e:bc:1a:2b:b8:9f:d9:d4:e9:4f:10:
         db:46:5a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----