Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.mft
File:                     PKRH_Ql5uKmJNVw1TTBNEU0gcno.mft (raw, json)
Hash identifier:          ky4u+nyVjVWMkk29jTMpWcIJ/uQUAmhttx/0VzWKZng=
Subject key identifier:   29:91:A3:53:7C:B8:53:4D:D4:99:DE:61:9E:5B:DB:37:65:2A:9A:C9
Authority key identifier: 3C:A4:47:FD:09:79:B8:A9:89:35:5C:35:4D:30:4D:11:4D:20:72:7A
Certificate issuer:       /CN=3ca447fd0979b8a989355c354d304d114d20727a
Certificate serial:       01962F3D81B19872C31EB90F3D8E80076F18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PKRH_Ql5uKmJNVw1TTBNEU0gcno.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.mft
Manifest number:          01C8
Signing time:             Sun 13 Apr 2025 13:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:22 +0000
Files and hashes:         1: BcTRmH6BmmlSz8rh3pMxnCQXpBs.roa (hash: xmk+1c+FLynSNXKfYDQ/lfjoeA1RsSdHXQaf1l1+6Ak=)
                          2: PKRH_Ql5uKmJNVw1TTBNEU0gcno.crl (hash: xVsLm6lo8whVhhCgW6O18aVd0Q6j1pGAvHfc5vZwhIE=)
                          3: eP87Vey-9rBbyOrOh4YCvuO3c1M.roa (hash: az6VMbDPubRZM135slIGEREK5WUZUt9MUwTRvHW3psg=)
                          4: wBy33E8gC6zWuMOmD5yzfH0QyIQ.roa (hash: yM84zdMfEYNT7elb1Nq+ZFqPP22ZSrKZWHzVdylcK6U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:81:b1:98:72:c3:1e:b9:0f:3d:8e:80:07:6f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ca447fd0979b8a989355c354d304d114d20727a
        Validity
            Not Before: Apr 13 13:01:22 2025 GMT
            Not After : Apr 14 13:01:22 2025 GMT
        Subject: CN=2991a3537cb8534dd499de619e5bdb37652a9ac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3f:c3:86:d4:4c:ea:85:bc:60:08:da:a4:42:
                    ff:f2:a0:42:74:f8:6b:a9:01:c0:c8:84:ee:f7:ce:
                    81:38:22:82:d4:e5:86:27:fa:ab:f3:72:90:bf:40:
                    e8:3f:a4:c9:4b:c9:ff:47:31:37:c0:77:08:4e:02:
                    95:19:c6:d0:11:02:67:19:87:0d:6a:49:fe:d5:b3:
                    c7:e8:21:f4:98:01:ed:0d:cb:f4:8e:b7:c4:1e:d7:
                    6a:32:7b:9a:1c:82:12:ea:cb:be:74:30:21:a3:f9:
                    a8:7c:0c:e1:97:f2:ef:aa:11:44:6e:4e:d6:ec:33:
                    15:8d:07:17:8c:f0:24:20:a1:08:4f:0d:2d:b6:f5:
                    bd:68:3b:62:9f:81:0b:5f:e4:bf:83:63:6e:a4:72:
                    17:c1:bb:1b:78:ae:82:a2:94:f5:de:3c:17:ad:b2:
                    bc:d7:03:97:ff:44:35:8a:de:bd:c6:3b:b2:01:db:
                    e3:0a:32:69:73:2e:0f:ef:f1:73:4f:0e:78:7f:53:
                    b6:bb:32:07:60:b2:b1:50:8c:29:27:ed:24:76:eb:
                    93:f5:d6:12:60:60:c9:6e:4b:c5:96:a7:1a:70:18:
                    dc:b0:47:f4:c6:21:ea:6f:19:24:86:49:f7:3e:e4:
                    3c:df:92:25:5c:e5:a7:4d:bf:60:3b:d1:e0:c6:b8:
                    4e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:91:A3:53:7C:B8:53:4D:D4:99:DE:61:9E:5B:DB:37:65:2A:9A:C9
            X509v3 Authority Key Identifier:
                keyid:3C:A4:47:FD:09:79:B8:A9:89:35:5C:35:4D:30:4D:11:4D:20:72:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKRH_Ql5uKmJNVw1TTBNEU0gcno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:3b:b7:52:bc:25:58:26:d0:12:bd:dd:9a:ce:a9:de:04:d2:
         8a:18:2d:1f:76:34:eb:c7:b9:b0:82:d4:eb:89:11:1a:e3:bc:
         e0:a8:26:6d:8c:43:78:62:15:5e:2c:ca:1b:3d:1b:5f:3f:97:
         c8:77:40:62:04:e6:9c:09:c3:bb:2e:aa:5f:5d:0d:e3:02:43:
         2c:b8:e4:84:70:ca:91:91:45:60:81:46:ba:44:80:5d:70:ff:
         c5:c3:bc:a0:aa:37:65:ac:61:1f:3b:85:2b:e4:83:71:eb:a7:
         5e:c5:10:0a:76:4f:a8:cd:e1:d1:9d:f6:98:3e:47:ef:d9:04:
         f7:45:cb:26:01:5e:27:b8:dd:85:fb:59:11:59:17:2c:00:fc:
         e0:30:79:95:fb:cb:ee:bd:c7:b4:a1:f5:77:43:f9:3c:75:40:
         fe:dc:a1:9b:5a:06:b4:12:30:7c:a2:69:a0:bd:b7:da:b8:c4:
         38:3b:4d:bf:b9:7f:55:9e:8d:ba:f2:a1:89:08:29:20:32:d1:
         be:96:45:96:12:eb:00:1e:77:e9:8f:8a:17:fb:b6:cc:e2:65:
         28:55:59:63:fb:de:d5:ba:b5:00:eb:87:43:e1:18:f8:22:50:
         c2:62:45:c3:97:1e:86:9a:a9:0f:16:e7:02:d6:17:65:bb:a9:
         70:b6:b5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----