Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/PNzIvNtsdErN9D3XLWjSBFGhefY.mft
File:                     PNzIvNtsdErN9D3XLWjSBFGhefY.mft (raw, json)
Hash identifier:          A2FFiRUdsSAOm4v9ergB2h9X1eo62WZXtJ22Iut9LT0=
Subject key identifier:   74:11:D3:17:DD:B0:1E:F5:0A:7D:44:74:AB:C9:DD:44:0B:7F:2E:BD
Authority key identifier: 3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
Certificate issuer:       /CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Certificate serial:       018972A4EC98E26242FA7829645CD7264B51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/PNzIvNtsdErN9D3XLWjSBFGhefY.mft
Manifest number:          0A5B
Signing time:             Thu 20 Jul 2023 09:32:38 +0000
Manifest this update:     Thu 20 Jul 2023 09:32:38 +0000
Manifest next update:     Fri 21 Jul 2023 09:32:38 +0000
Files and hashes:         1: 6HxT_T5zAP6O1x0ZM_RlVVt6sqE.roa (hash: 55RyFpV7pY1HegC7ur2DUQIONcQMXmcw+fk99lS5GhY=)
                          2: C-jJtRFijfd3PISFshbIX23pVfM.roa (hash: 6vI45JMfjzSDVi04P2TgJmacygiV3dhLVTHfC8N0Nk4=)
                          3: PNzIvNtsdErN9D3XLWjSBFGhefY.crl (hash: AJHXmTRYrf3H1IIx3vvVjT154LkFQLLPGvrY9oizeYg=)
                          4: YKQLAjDKWWNtqPhTqpdmU04YMGw.roa (hash: IUDy1X8DPoJcyCk0Wk3tvhrFBPak/DwR90wtgoKKs7g=)
                          5: YUXvAUMLfDYEsO-mf2Fnfwekj78.roa (hash: FvbAM+pEUWANNyyoEcvfpEdYkrwJOKDGffRYmPOOtAI=)
                          6: fltEACClrRyRXj4cb-LT68jDZiE.roa (hash: dV4Syzx9jeQU4zbCXwEHCYj2RApEKW2Eg9h79I9FRV0=)
                          7: jjOAHruR5AiB2HSkMRStIafRgmM.roa (hash: gnm1zPattMhaBWnN0gJjg1/7LK7yrQx+zIYVMXyH+uo=)
                          8: k1w45lkMhIi-c6uJYB_GPpigD2w.roa (hash: hfklQ9Co1R7s8oL+vBzPRK/0myP3y967huut6aIIUpc=)
                          9: o9pFQWflRdfGSlX4C4-926U-hgM.roa (hash: +7VAOeTDW8E4gfoJj+YyD8WC8kCRNUyRNRoUMaXnvVE=)
                          10: uQ0YuCmhyvfKUWG_6UaSHCJ5ObU.roa (hash: QoAv2eO3wK4RBtUjHkhOhoYEqce9TWTqElkad7GU1Hs=)
                          11: vNPvDSgAGfzT8mS1AsN3mrZWpzY.roa (hash: fz6YnOhqOPHUP5w4eHrajJ5DR6geTomLC8RX5JI5fBc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:72:a4:ec:98:e2:62:42:fa:78:29:64:5c:d7:26:4b:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
        Validity
            Not Before: Jul 20 09:32:38 2023 GMT
            Not After : Jul 21 09:32:38 2023 GMT
        Subject: CN=7411d317ddb01ef50a7d4474abc9dd440b7f2ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:77:ac:aa:9f:3e:06:ff:b1:68:80:98:18:e0:
                    52:36:b7:3d:b0:68:61:12:70:64:d9:dc:a9:97:62:
                    20:29:b9:cd:0f:26:1f:4b:e9:bb:29:c3:8a:1b:e5:
                    64:02:dc:e5:ff:33:b7:ec:81:e9:b2:25:99:f3:66:
                    74:50:d7:78:df:35:d6:c1:b8:2a:9e:8a:c9:9d:e9:
                    2b:b3:0a:ea:b5:46:99:af:7e:3f:7a:ec:b9:da:94:
                    01:49:d7:96:74:c6:20:fc:a1:57:fc:90:df:83:f4:
                    ee:93:95:00:17:ed:b5:bc:90:da:e7:1b:8b:3c:42:
                    17:57:04:be:3e:41:b3:c0:ad:0b:b1:df:1a:d3:31:
                    1f:02:3d:a6:c3:41:f2:71:b1:f0:b6:27:2d:14:73:
                    14:e5:9e:6f:6f:46:6c:a3:c0:11:03:90:0f:25:3c:
                    df:0b:87:f6:50:c6:34:01:5a:f4:c4:d7:16:8b:8a:
                    c6:ea:04:f8:d1:57:57:09:b2:ed:c7:e6:24:3a:22:
                    a3:0f:8c:72:8b:ce:6b:83:b0:a0:bf:1d:4b:c4:22:
                    6b:9d:7e:fb:56:c2:17:78:8c:56:38:a4:be:f6:b0:
                    d0:37:b7:09:5f:fa:92:1a:cd:c2:6d:4b:f8:63:9d:
                    5d:b4:3a:8c:87:e7:7a:f8:7b:91:ce:65:00:b5:0a:
                    51:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:11:D3:17:DD:B0:1E:F5:0A:7D:44:74:AB:C9:DD:44:0B:7F:2E:BD
            X509v3 Authority Key Identifier:
                keyid:3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/PNzIvNtsdErN9D3XLWjSBFGhefY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/PNzIvNtsdErN9D3XLWjSBFGhefY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:6a:ff:f0:0f:e3:15:3f:60:87:36:fa:e3:2e:b6:2b:11:e2:
         80:f7:eb:51:e0:b0:fc:15:81:34:d2:9c:6b:e6:63:d1:a8:05:
         ff:5b:e5:db:e2:ec:ab:43:7a:4b:dc:3e:de:8e:4e:72:9b:25:
         31:bf:b0:25:ed:52:4d:a7:59:06:e7:56:10:da:90:2c:db:06:
         5d:d2:7b:ac:52:65:05:cc:da:ba:6e:40:c7:1c:76:d2:26:8c:
         cd:36:5c:e6:af:de:ad:73:09:54:9f:09:53:b8:1f:4d:dd:c7:
         2d:b9:43:1b:da:f8:ed:3a:76:fd:23:ee:ab:45:bc:b9:a5:44:
         4f:82:55:dc:36:59:9a:b0:dc:4e:9f:f0:79:da:f0:eb:a3:3f:
         14:7d:2c:8e:fe:46:dc:29:f5:b3:63:3b:bd:c5:5a:b0:44:48:
         51:48:f0:13:14:00:b7:7c:49:be:5b:72:97:ca:61:a0:5a:36:
         7a:d3:4b:f3:75:63:60:cb:e6:b9:4e:f4:39:7c:d4:a2:be:02:
         8a:1d:a3:c0:c5:99:59:2d:19:02:e0:98:b9:7d:ea:d5:5b:f4:
         a7:26:ff:17:8e:7a:d9:64:01:e8:3b:ce:51:22:0a:a1:80:a5:
         9c:39:a9:c9:6a:be:d3:83:d3:cf:88:8b:c7:d3:08:72:9e:f8:
         da:ae:ca:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----