Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ab4f87-7569-47e1-9006-604378e7173f/1/PzGV9HCEyLDGcNA_fue1Fs-ATFw.mft
File:                     PzGV9HCEyLDGcNA_fue1Fs-ATFw.mft (raw, json)
Hash identifier:          Mb9KF9AcM7p1TFLy1UKJIVkqAeRSSBwdf7IFYap7hIw=
Subject key identifier:   C9:DE:7A:3E:6B:00:57:EE:23:57:4D:E2:83:71:7F:D2:97:61:BF:08
Authority key identifier: 3F:31:95:F4:70:84:C8:B0:C6:70:D0:3F:7E:E7:B5:16:CF:80:4C:5C
Certificate issuer:       /CN=3f3195f47084c8b0c670d03f7ee7b516cf804c5c
Certificate serial:       01930A2511AE89EEB0109FF7B2BD85407885
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PzGV9HCEyLDGcNA_fue1Fs-ATFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/ab4f87-7569-47e1-9006-604378e7173f/1/PzGV9HCEyLDGcNA_fue1Fs-ATFw.mft
Manifest number:          0A16
Signing time:             Fri 08 Nov 2024 05:00:21 +0000
Manifest this update:     Fri 08 Nov 2024 05:00:21 +0000
Manifest next update:     Sat 09 Nov 2024 05:00:21 +0000
Files and hashes:         1: CRrjgNdz-QzKn6RSlKxndJPzTyA.roa (hash: /wQPVT9bYON/0RB0CX4xE/qDTRxXkIr7OwD8gRLr3vY=)
                          2: PzGV9HCEyLDGcNA_fue1Fs-ATFw.crl (hash: xSxDXmts8BhEbrZoAEXKXAOUCntInWIwZmgJEBbKRCk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:0a:25:11:ae:89:ee:b0:10:9f:f7:b2:bd:85:40:78:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f3195f47084c8b0c670d03f7ee7b516cf804c5c
        Validity
            Not Before: Nov  8 05:00:21 2024 GMT
            Not After : Nov  9 05:00:21 2024 GMT
        Subject: CN=c9de7a3e6b0057ee23574de283717fd29761bf08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b2:99:40:04:34:03:2f:6c:b3:ce:5b:fa:cb:
                    ea:0f:9a:11:f9:a4:a6:ed:17:83:c2:0b:48:0c:b6:
                    71:47:0d:7b:74:0a:7b:2c:dd:1d:5b:33:4a:b5:86:
                    7e:08:02:97:b1:bb:0e:02:1c:12:da:ab:f7:e9:cc:
                    63:05:0e:f1:f3:8b:92:3e:db:8b:93:bb:14:7d:b3:
                    00:b5:f7:d7:2f:bc:3a:e7:0e:9f:b3:03:47:b8:46:
                    ca:24:43:8b:4d:66:28:b6:98:75:6e:5b:b3:ee:41:
                    cd:da:f3:07:a9:0e:39:39:a7:c7:32:4a:ef:0b:74:
                    b0:4c:a5:f2:eb:d4:cb:58:34:27:8a:cc:7e:7c:a7:
                    f9:f0:2f:f8:7b:4d:fb:ed:0a:94:ce:fa:ba:05:a4:
                    db:1e:e5:46:93:ce:b4:e6:fb:ce:26:4a:31:60:2b:
                    a5:a0:39:2a:3f:85:74:ce:e0:d2:86:78:1e:6f:1c:
                    f5:52:8b:0b:b8:92:4d:81:41:19:51:72:8a:a9:03:
                    69:86:2d:e5:8e:63:a7:bb:53:87:a3:f3:0f:55:65:
                    37:10:26:0e:53:2a:b3:68:09:af:e3:e4:6e:3e:be:
                    b7:49:84:da:df:27:5f:c2:01:f8:66:cc:25:0e:6c:
                    9a:d6:ad:f2:12:62:6d:5e:4d:af:12:17:fb:3b:e5:
                    5c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:DE:7A:3E:6B:00:57:EE:23:57:4D:E2:83:71:7F:D2:97:61:BF:08
            X509v3 Authority Key Identifier:
                keyid:3F:31:95:F4:70:84:C8:B0:C6:70:D0:3F:7E:E7:B5:16:CF:80:4C:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PzGV9HCEyLDGcNA_fue1Fs-ATFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ab4f87-7569-47e1-9006-604378e7173f/1/PzGV9HCEyLDGcNA_fue1Fs-ATFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ab4f87-7569-47e1-9006-604378e7173f/1/PzGV9HCEyLDGcNA_fue1Fs-ATFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:b1:87:0e:06:5b:c6:60:5a:a7:15:ab:24:c9:62:91:34:a5:
         24:83:c4:b5:e2:d1:15:ed:a0:f2:9f:a2:10:a4:27:a8:8e:d3:
         f6:6d:bc:88:f5:d3:07:86:dc:0d:66:f5:c1:fb:aa:54:72:ed:
         5c:74:5f:64:7c:33:e0:af:75:fa:dc:3a:c4:2c:e5:35:b4:4f:
         56:56:c1:51:14:26:20:a8:fc:a1:99:a6:ce:4f:c8:09:46:25:
         dd:9e:d1:93:5c:83:be:83:2f:cd:26:c9:fd:73:72:b7:e7:cc:
         a6:d9:90:9d:ed:e5:bf:c0:a3:38:f5:f5:76:a4:05:a5:6a:a4:
         f6:d8:d9:15:11:6c:df:10:b7:8d:41:36:64:d4:b5:0f:39:cf:
         33:e3:50:86:c5:8f:48:68:cf:c5:4d:a1:8b:d2:01:e8:38:c3:
         22:75:37:1e:13:76:14:ce:ad:4c:8e:6a:35:09:32:63:fd:3a:
         ef:c5:70:d1:be:9a:b2:5f:6c:dd:75:28:46:f4:1e:9b:2c:a2:
         54:1c:7f:ea:f5:f7:d1:ad:d3:35:7f:ba:ab:fa:89:c6:4d:42:
         dd:bf:23:b7:37:60:4a:52:cc:ab:08:c1:31:fc:f3:dd:e7:4d:
         f7:91:be:77:01:21:55:dc:45:af:61:3f:ea:06:03:94:b0:7e:
         e0:d7:31:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----