Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/bda9d2-2228-4806-85d0-ee06b6612ce4/1/PVRg-FZ-6Y-BxW-k-NsDzlzdrZw.mft
File:                     PVRg-FZ-6Y-BxW-k-NsDzlzdrZw.mft (raw, json)
Hash identifier:          HQ9FS+zdWfAKu5R1+ZDxzLKp54xWvADphUlqnRqUP1I=
Subject key identifier:   95:51:58:72:90:79:C5:51:04:B2:B7:F4:B3:F6:E7:FF:2E:C6:8F:49
Authority key identifier: 3D:54:60:F8:56:7E:E9:8F:81:C5:6F:A4:F8:DB:03:CE:5C:DD:AD:9C
Certificate issuer:       /CN=3d5460f8567ee98f81c56fa4f8db03ce5cddad9c
Certificate serial:       018F27CC3A9ACF111C2FE8E387ADA6B437CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PVRg-FZ-6Y-BxW-k-NsDzlzdrZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/bda9d2-2228-4806-85d0-ee06b6612ce4/1/PVRg-FZ-6Y-BxW-k-NsDzlzdrZw.mft
Manifest number:          0199
Signing time:             Mon 29 Apr 2024 03:00:46 +0000
Manifest this update:     Mon 29 Apr 2024 03:00:46 +0000
Manifest next update:     Tue 30 Apr 2024 03:00:46 +0000
Files and hashes:         1: PVRg-FZ-6Y-BxW-k-NsDzlzdrZw.crl (hash: gk/B92l7AYSXAKHCGRhl8oNAIcddkgRhPE6NhlU0oJY=)
                          2: iZApycXNPz9vxgT5eEvKW98LDqg.roa (hash: ExUgP2Z7Z9IJtGwzJro9UmsLakOf/TAs087UopR5KzM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:27:cc:3a:9a:cf:11:1c:2f:e8:e3:87:ad:a6:b4:37:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d5460f8567ee98f81c56fa4f8db03ce5cddad9c
        Validity
            Not Before: Apr 29 03:00:46 2024 GMT
            Not After : Apr 30 03:00:46 2024 GMT
        Subject: CN=955158729079c55104b2b7f4b3f6e7ff2ec68f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f3:6f:d3:d5:c0:fb:ba:8b:e0:2b:e2:12:8e:
                    ef:7b:0e:5f:3f:ff:36:36:29:5b:25:9e:f5:5d:14:
                    87:00:2a:40:50:4e:c6:b8:70:63:fa:a3:49:1d:d0:
                    a2:78:70:46:7e:ad:df:43:ce:bf:c3:8c:f8:cc:53:
                    9e:95:20:3d:16:98:88:81:45:25:67:35:e1:3d:ca:
                    a2:00:c0:7f:3a:6d:92:f8:1d:a1:15:ae:2f:d4:f6:
                    40:85:2d:7e:9c:a0:87:9c:de:39:1d:9c:68:72:0a:
                    e6:04:d7:2e:29:25:33:16:a8:03:ee:1c:70:f7:66:
                    2b:ef:69:99:60:95:8f:78:23:ed:0b:23:ac:16:52:
                    d1:78:03:7e:47:2d:17:60:e6:8d:2a:bb:67:78:26:
                    c0:0f:04:10:47:7c:6b:aa:b9:dd:c4:dc:06:14:91:
                    af:b8:cb:d5:e7:14:92:40:7e:d8:29:a1:b4:f3:e1:
                    46:88:f0:b1:71:85:7d:5e:1b:0e:f6:88:ed:53:6d:
                    45:e3:92:20:d7:6d:d8:96:2d:1c:05:ac:7f:f8:f8:
                    f7:d0:18:6e:80:e0:0b:76:10:2d:04:cd:f5:a7:d5:
                    b5:2d:b4:ba:1f:60:74:ac:dd:c3:ae:24:2c:2b:f9:
                    32:12:2e:25:ea:c1:e1:fe:5c:61:f3:97:53:13:87:
                    aa:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:51:58:72:90:79:C5:51:04:B2:B7:F4:B3:F6:E7:FF:2E:C6:8F:49
            X509v3 Authority Key Identifier:
                keyid:3D:54:60:F8:56:7E:E9:8F:81:C5:6F:A4:F8:DB:03:CE:5C:DD:AD:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PVRg-FZ-6Y-BxW-k-NsDzlzdrZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bda9d2-2228-4806-85d0-ee06b6612ce4/1/PVRg-FZ-6Y-BxW-k-NsDzlzdrZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bda9d2-2228-4806-85d0-ee06b6612ce4/1/PVRg-FZ-6Y-BxW-k-NsDzlzdrZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:af:53:cc:f8:10:72:78:3e:34:40:12:54:86:66:63:dd:5b:
         29:43:31:19:d7:86:af:ab:58:3e:91:6d:4f:bd:71:94:b4:ce:
         71:02:6a:13:55:e2:3c:58:b2:cd:a1:b5:b6:bb:17:88:70:1e:
         e7:03:07:2a:7c:78:37:a6:4c:92:83:c9:bf:95:df:db:83:91:
         db:db:84:ed:46:73:e0:71:a3:f5:d0:87:4d:73:fb:52:7b:26:
         30:c3:c0:ba:6a:2e:46:e6:ac:8e:64:6a:f8:c4:6f:9a:d0:2e:
         e0:39:b9:c5:f6:37:33:c3:0e:b7:17:7b:86:b7:0b:b3:48:73:
         46:28:ed:55:e9:ba:02:f0:ae:09:c5:f4:72:92:83:80:68:67:
         00:e1:1a:e4:61:8f:74:1a:f5:d6:dd:92:40:7f:d8:8f:c8:26:
         db:a1:7b:0b:58:c6:c2:05:87:da:ae:e0:84:b8:f2:f4:e9:86:
         53:74:ed:ed:9e:ab:1b:6c:51:9a:23:36:c8:eb:f2:fd:09:66:
         03:95:ea:f9:8e:b7:02:97:8d:ef:3e:e3:61:75:38:49:4f:36:
         ab:97:93:a4:41:be:16:17:ab:07:f8:1b:49:e2:e4:5c:7b:67:
         14:29:61:4e:c6:9f:8d:48:bd:f4:32:da:5e:fd:65:7c:96:50:
         fb:54:94:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----