Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
File:                     PnDBS_JvrwGY8eeyRynNcbM1GN4.mft (raw, json)
Hash identifier:          XSzeGN3R9eHLyI8BGDdudqGerGDrvsstEJELRS2Ozs8=
Subject key identifier:   9B:0D:BB:6D:2B:BC:C2:A1:D3:23:31:33:8A:72:D2:45:36:B9:04:22
Authority key identifier: 3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
Certificate issuer:       /CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Certificate serial:       01962E618CA3882DBFB0EA704B482D1FD9EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
Manifest number:          01E0
Signing time:             Sun 13 Apr 2025 09:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:06 +0000
Files and hashes:         1: 4d9jncgFcD3LQEVJLbIB2I3M9lo.roa (hash: seBbCSSGlRgW36OWqyme1v3t3KHDAPOFROvpxV8jwzE=)
                          2: 4uaLh2b-bHV2NsxIJY_pK9e3698.roa (hash: sMeMy3i5FoQg0v9xzPREgO0rI8VqgJmcA0uZMgg0uts=)
                          3: PnDBS_JvrwGY8eeyRynNcbM1GN4.crl (hash: 5XvBwgZVmP80l9n8bI4VTo0UJFtscldEWK2PheYVxAU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8c:a3:88:2d:bf:b0:ea:70:4b:48:2d:1f:d9:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
        Validity
            Not Before: Apr 13 09:01:06 2025 GMT
            Not After : Apr 14 09:01:06 2025 GMT
        Subject: CN=9b0dbb6d2bbcc2a1d32331338a72d24536b90422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:77:4c:61:0a:fa:bf:94:49:2f:5f:72:76:8d:
                    d5:7c:ae:36:cd:72:93:53:0b:08:9b:71:b1:32:ed:
                    90:b2:e6:a3:f4:94:cf:71:c7:8b:c8:92:bf:c2:3b:
                    60:5a:c9:ca:66:f0:7a:5c:eb:a1:1e:d6:92:da:71:
                    d8:b3:43:25:57:d0:cb:4d:86:56:04:26:be:c6:cc:
                    f9:ce:e3:1e:6a:f5:a8:37:71:28:b2:36:d7:39:66:
                    e8:c1:29:83:49:43:32:e3:f3:5f:fc:73:d8:34:3f:
                    93:dc:34:90:7a:d9:20:d7:08:91:7d:8d:6e:f4:6a:
                    3b:31:bd:8f:5b:d3:56:7c:61:87:5a:ff:ef:d2:f5:
                    a0:5a:b7:67:3c:8a:e2:e5:5a:91:0a:f7:47:05:e0:
                    63:cb:9b:b1:91:d5:4a:c7:fb:38:b6:07:b5:25:00:
                    01:52:59:bc:39:d9:fa:3b:e1:05:a6:a0:a3:b0:91:
                    14:b4:dc:eb:67:33:79:b9:fc:fd:22:86:08:7c:e9:
                    46:79:da:b8:ed:ac:38:5f:c8:80:83:53:0a:4f:9b:
                    94:62:4b:61:19:40:b6:1e:bd:73:37:48:6a:e5:c3:
                    de:0c:43:80:c3:76:f8:90:85:3f:e0:40:6c:03:94:
                    12:1f:d6:1b:87:6f:ce:2e:09:cd:c2:71:ae:f6:e0:
                    c8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0D:BB:6D:2B:BC:C2:A1:D3:23:31:33:8A:72:D2:45:36:B9:04:22
            X509v3 Authority Key Identifier:
                keyid:3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ef:47:7e:8c:7b:7f:f7:53:3d:5e:dc:c6:d3:cf:40:b7:c1:
         5d:9b:65:5d:fc:0f:bd:ba:a7:cb:c8:ce:c0:89:62:56:fb:ea:
         f0:be:40:10:74:6b:4d:35:eb:e2:8e:2f:a1:7f:6c:59:87:3a:
         8a:49:85:8c:0f:22:5c:51:f8:0c:ff:af:dd:4b:12:18:d2:fb:
         07:c2:d0:92:6c:04:4f:98:32:66:2a:21:f7:34:4c:6d:a6:7e:
         57:52:7a:8d:81:75:91:bd:6f:0b:cd:48:6e:5d:96:3a:57:ba:
         78:da:a4:ac:d2:04:1f:5c:da:e4:a5:db:6e:fd:dd:4e:30:2a:
         57:fd:26:50:93:84:ee:ab:a5:3d:b3:ca:43:8a:1d:f0:f4:98:
         b1:bc:c6:de:aa:6c:23:ed:82:b4:81:5f:6f:a3:94:71:e3:08:
         89:54:95:4f:a4:1d:b3:b3:b6:ee:4e:69:16:6c:b8:fc:7d:51:
         78:dd:16:14:cc:7b:f3:a6:6a:7f:5b:58:97:57:8e:2e:33:6d:
         45:f2:47:c4:70:08:26:68:34:da:07:f2:c2:df:a6:09:04:2d:
         45:bf:b9:54:d3:67:72:53:80:75:00:89:dc:9d:f6:7c:88:69:
         c5:22:d9:df:65:54:f1:b5:55:64:0a:48:9c:37:52:09:80:fe:
         67:ce:8f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----