Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/840683-519c-4a4d-ae46-069ad3d6e5b0/1/34PMF_Jrxql8RNiiQ2qVxyqUv_E.mft
File:                     34PMF_Jrxql8RNiiQ2qVxyqUv_E.mft (raw, json)
Hash identifier:          FP+C04rd8coGBXhODAy4Md+V7gwz2kQwWsXnDdx6oZc=
Subject key identifier:   D4:AE:E7:84:B7:DA:A5:F3:CB:2B:DE:3C:9A:A5:10:6F:4D:FF:D7:9E
Authority key identifier: DF:83:CC:17:F2:6B:C6:A9:7C:44:D8:A2:43:6A:95:C7:2A:94:BF:F1
Certificate issuer:       /CN=df83cc17f26bc6a97c44d8a2436a95c72a94bff1
Certificate serial:       01905210B041BEF1A4B5CE84403175AE1816
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/34PMF_Jrxql8RNiiQ2qVxyqUv_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/840683-519c-4a4d-ae46-069ad3d6e5b0/1/34PMF_Jrxql8RNiiQ2qVxyqUv_E.mft
Manifest number:          11E2
Signing time:             Wed 26 Jun 2024 01:02:23 +0000
Manifest this update:     Wed 26 Jun 2024 01:02:23 +0000
Manifest next update:     Thu 27 Jun 2024 01:02:23 +0000
Files and hashes:         1: 34PMF_Jrxql8RNiiQ2qVxyqUv_E.crl (hash: V68nOuA0wTo3KfhbZ3o/c5w2Ko2PYNUBFnrg/lPtMJ0=)
                          2: sMoFZ_MXmyugpJ3C5fgHUFZTZ2g.roa (hash: mqMv6famRSZi5kLhp/1qZg4BKRhemDd7fsHQM20c4+g=)
                          3: z2WXrPGFkHSKf2FlhNazZDs_iMQ.roa (hash: 3QipBrY3+2eVHccGm6LaPn9CaSE+gBwHKvE9jYpSROo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:52:10:b0:41:be:f1:a4:b5:ce:84:40:31:75:ae:18:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df83cc17f26bc6a97c44d8a2436a95c72a94bff1
        Validity
            Not Before: Jun 26 01:02:23 2024 GMT
            Not After : Jun 27 01:02:23 2024 GMT
        Subject: CN=d4aee784b7daa5f3cb2bde3c9aa5106f4dffd79e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:72:be:68:eb:cb:e9:43:92:c3:a7:97:f4:3b:
                    78:23:5f:d0:3b:8d:9a:de:e2:04:fe:06:44:99:2d:
                    8b:e3:6d:24:17:fe:0e:d7:0d:2c:0b:f3:f5:5e:8c:
                    8a:f8:19:42:cd:26:e3:95:88:03:99:cb:fa:8e:86:
                    9e:21:a7:3f:3c:e3:23:cf:b3:e8:bb:76:e0:bd:68:
                    34:c5:83:16:8a:4c:a3:06:cd:44:d3:1f:40:aa:c5:
                    0d:73:02:b9:77:be:2e:8d:8c:1f:fd:8d:1b:c0:fd:
                    1a:fe:6a:e2:2b:f5:94:0e:7f:8a:8d:da:04:fe:3a:
                    a1:41:b6:e6:9c:c3:55:97:ad:ec:9d:3e:96:4e:cc:
                    92:a3:46:57:58:97:76:23:d2:29:c4:02:6d:fb:3f:
                    19:5b:63:37:61:10:e7:ec:37:20:27:20:75:e5:61:
                    ba:49:2e:fb:32:78:6c:c0:b8:3e:f3:98:56:25:16:
                    ca:de:75:37:ce:46:6f:81:13:38:a3:e8:8a:39:4f:
                    57:dc:f4:de:2b:54:8a:6e:48:12:76:d1:00:dd:dc:
                    55:9b:7c:54:a4:d3:5d:8f:ce:24:9d:cc:99:e6:6c:
                    82:9b:6c:d8:28:ec:f5:0c:56:ff:25:b1:fc:c4:2e:
                    4b:20:b9:61:02:97:82:19:ef:80:66:57:30:1d:db:
                    7d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AE:E7:84:B7:DA:A5:F3:CB:2B:DE:3C:9A:A5:10:6F:4D:FF:D7:9E
            X509v3 Authority Key Identifier:
                keyid:DF:83:CC:17:F2:6B:C6:A9:7C:44:D8:A2:43:6A:95:C7:2A:94:BF:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34PMF_Jrxql8RNiiQ2qVxyqUv_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/840683-519c-4a4d-ae46-069ad3d6e5b0/1/34PMF_Jrxql8RNiiQ2qVxyqUv_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/840683-519c-4a4d-ae46-069ad3d6e5b0/1/34PMF_Jrxql8RNiiQ2qVxyqUv_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:28:cd:ec:68:a4:70:e1:ef:85:1a:1b:6f:c3:b6:bd:d6:e9:
         69:33:17:6d:27:0a:5c:64:50:85:51:b2:86:f8:a6:24:e4:4d:
         8a:b1:5c:0b:c3:b9:2a:37:1f:96:90:54:59:ae:a3:f0:e5:6b:
         1a:f8:9a:92:b0:5e:b9:34:a4:aa:86:12:f7:65:a8:1b:8c:fc:
         c0:45:55:f6:5b:de:45:9d:75:d7:1e:aa:4b:e0:e2:ba:b8:86:
         ff:92:ea:0d:9e:2d:0b:0a:f5:cf:8d:4d:86:27:33:a9:ad:73:
         97:d5:69:b6:c1:29:3c:89:28:00:eb:e1:df:cc:f6:f8:ae:a7:
         ad:b9:03:b0:4d:aa:95:39:ea:9c:88:77:0a:c7:70:08:51:f8:
         49:87:9e:82:29:ab:78:1f:50:30:af:12:da:c0:37:e2:28:69:
         4d:70:3a:59:fe:1b:4a:0d:44:f6:6e:44:e0:e5:e0:b1:8a:46:
         5b:dd:ac:82:d8:02:12:63:88:e9:9d:38:97:96:48:fa:8c:1a:
         b7:bc:b7:0b:76:92:c9:f1:d9:f0:1a:27:25:43:8d:d0:2b:83:
         1a:8b:34:cf:89:fe:72:6c:bc:cf:57:ce:b0:d5:a1:35:99:d9:
         5c:32:25:64:19:8e:cc:94:f3:45:b0:24:f0:53:24:b8:73:06:
         df:a3:12:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----