Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
File:                     PQSDU4c3RT4vV_-1dJnDki6DY20.mft (raw, json)
Hash identifier:          Bkx80tKoQHQq4qma3UhqUMSN+LejB8ExvUNFu9HfZ98=
Subject key identifier:   4E:E9:54:5E:93:27:92:EC:0A:37:93:77:09:18:6C:DA:2B:AF:5B:1B
Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
Certificate issuer:       /CN=3d0483538737453e2f57ffb57499c3922e83636d
Certificate serial:       01962E9907489E104E9209C497E63F880882
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
Manifest number:          1416
Signing time:             Sun 13 Apr 2025 10:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:42 +0000
Files and hashes:         1: 2kjnNcqey0OLGfySAKowHBG5Guo.roa (hash: 9jemYzIQoMUwDIBYN/+zDuFoechTYsBGwQpOaXYxFKk=)
                          2: 8jdJFfwz0f1bOSecP72_M36iRRI.roa (hash: 82Bf1Auf8nRCamjssfldTKSxot7XSbfVdi0kTqeYaRU=)
                          3: DYfn4v-d9LSJeRa5vvT-XfYyk70.roa (hash: 8mWNIGwTXO4I48gUsi1UHbc5uoPvj6DJfzAi/IGU5v8=)
                          4: PQSDU4c3RT4vV_-1dJnDki6DY20.crl (hash: 8NPWU1y7Ba89rPH7nKsawH+fQH93qKG2BfecmjT1kmM=)
                          5: lSP4K3mfoxcgowofKtKedL6Fcrk.roa (hash: ejPoRQTQJw87tbzyuSoPJnPZJPT0D2gWvsWUm5z3CsU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:07:48:9e:10:4e:92:09:c4:97:e6:3f:88:08:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d
        Validity
            Not Before: Apr 13 10:01:42 2025 GMT
            Not After : Apr 14 10:01:42 2025 GMT
        Subject: CN=4ee9545e932792ec0a37937709186cda2baf5b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:79:27:9d:b4:c5:9c:4f:17:0b:89:55:29:26:
                    4f:e9:da:dd:18:1a:86:71:fb:49:36:b7:e0:95:c6:
                    90:c9:86:63:d3:47:03:f2:b0:cd:53:f2:ea:43:6d:
                    0f:66:5f:b5:db:5a:4c:77:a9:85:54:63:16:c6:71:
                    ea:9e:1a:4e:c4:4c:24:ba:09:cd:4c:f9:98:36:d7:
                    b6:97:cc:a3:7a:7c:ad:5c:64:28:05:92:fd:d6:4b:
                    b1:75:af:b0:b3:86:f9:3b:d7:0d:4c:65:23:9e:58:
                    79:08:66:25:38:86:ac:f3:2d:67:5f:6b:7d:c3:90:
                    4b:fe:60:47:86:b0:ad:a8:37:a1:58:7d:ca:ce:18:
                    ec:04:27:d1:b9:84:97:3f:25:a5:41:d6:87:54:0b:
                    14:75:f4:b9:0d:b5:6d:0a:1e:09:ce:0a:28:a8:af:
                    fc:b6:1d:33:9a:a8:01:73:24:98:bf:55:10:97:24:
                    bf:b5:91:a0:66:12:fa:9d:97:73:50:09:d8:8a:f2:
                    19:04:c9:8c:d3:4a:15:45:9b:b4:58:a5:37:11:e2:
                    65:f9:62:cd:0f:42:f9:75:04:e0:cf:46:dd:77:a7:
                    41:9c:e0:b6:4f:b2:07:2b:b9:53:74:f0:b8:39:4d:
                    3b:f3:49:fa:bc:a5:89:2e:46:b5:24:ca:b2:5a:79:
                    d9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E9:54:5E:93:27:92:EC:0A:37:93:77:09:18:6C:DA:2B:AF:5B:1B
            X509v3 Authority Key Identifier:
                keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:e9:95:b2:7a:03:7d:a6:d0:64:03:7a:75:a9:66:00:2f:e5:
         54:ee:82:77:cd:f4:b7:2a:63:08:cf:d9:89:df:44:7b:58:30:
         b8:44:01:7c:fe:ae:04:d0:75:69:45:57:7c:21:2f:7b:72:a1:
         66:91:ee:99:e0:5a:c8:f7:7c:10:c0:f5:17:8e:d8:77:f6:31:
         19:3c:f0:c6:60:61:a0:3f:5c:34:8d:7c:0c:62:bd:b1:26:15:
         56:cc:79:5d:04:9e:55:5e:06:8f:98:39:e0:ce:78:78:c7:60:
         fd:4b:21:0d:fc:7b:75:91:36:82:64:ba:dd:78:4f:e8:6e:b1:
         2e:09:12:65:19:7d:35:ef:92:09:0d:4d:b2:95:0b:1c:aa:d5:
         95:fb:1f:ea:0a:5a:0e:04:53:21:b1:e3:76:32:0e:5b:76:15:
         6c:2f:1d:2b:5f:5a:5d:fe:6b:c5:2f:a7:02:4a:e5:2b:f8:27:
         22:4e:54:79:01:23:7e:c2:44:5c:bf:1b:4a:3c:90:2a:76:68:
         10:8a:06:90:4f:23:bd:2f:53:cf:c7:a1:7d:c5:a0:01:b2:39:
         d0:f5:d8:9d:ab:b6:3b:28:9e:b2:1b:ea:da:04:a5:de:43:08:
         cb:fd:c9:4c:d7:8e:56:48:39:cc:15:a2:60:e7:ef:0c:c9:db:
         5e:f4:31:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----