Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
File:                     PnDBS_JvrwGY8eeyRynNcbM1GN4.mft (raw, json)
Hash identifier:          bhvVA+zjDw8DKz5TcfrOAwIj0m+SA+MDNzpzgM3kKAk=
Subject key identifier:   38:8C:E1:61:10:45:B2:05:AB:4C:E5:CB:66:94:D1:23:6D:0F:08:DD
Authority key identifier: 3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
Certificate issuer:       /CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Certificate serial:       0195E1220C7100C8E610262BF37609B2D006
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
Manifest number:          01B8
Signing time:             Sat 29 Mar 2025 09:00:59 +0000
Manifest this update:     Sat 29 Mar 2025 09:00:59 +0000
Manifest next update:     Sun 30 Mar 2025 09:00:59 +0000
Files and hashes:         1: 4d9jncgFcD3LQEVJLbIB2I3M9lo.roa (hash: seBbCSSGlRgW36OWqyme1v3t3KHDAPOFROvpxV8jwzE=)
                          2: 4uaLh2b-bHV2NsxIJY_pK9e3698.roa (hash: sMeMy3i5FoQg0v9xzPREgO0rI8VqgJmcA0uZMgg0uts=)
                          3: PnDBS_JvrwGY8eeyRynNcbM1GN4.crl (hash: TBV0CM9nK7nB+fSTghX5nBSrTNlT7Fz45glU3mheANI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:22:0c:71:00:c8:e6:10:26:2b:f3:76:09:b2:d0:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
        Validity
            Not Before: Mar 29 09:00:59 2025 GMT
            Not After : Mar 30 09:00:59 2025 GMT
        Subject: CN=388ce1611045b205ab4ce5cb6694d1236d0f08dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c3:8c:13:95:7f:ee:03:00:fc:12:92:13:ab:
                    de:5e:a6:4e:fb:f0:70:3e:7c:bd:51:1f:0d:9b:9d:
                    c8:c5:be:cf:0c:4a:2d:1d:8c:f8:14:1f:76:b1:68:
                    b9:3c:04:0f:54:5d:f4:49:50:e6:d0:00:8e:7a:3a:
                    25:28:49:8f:68:5b:d8:0f:06:43:90:5b:14:16:e9:
                    c6:96:3f:5a:25:9e:a3:fa:3e:df:b0:66:3e:08:5d:
                    57:01:72:d9:19:e4:2d:f5:3d:96:07:05:62:56:32:
                    33:5c:6f:71:3a:3c:e6:45:55:97:b4:00:fb:6d:e4:
                    d4:58:75:1c:e9:4f:57:94:d6:30:14:3f:a8:04:36:
                    37:20:7e:93:f1:3c:5a:4d:e4:fc:71:d2:9d:70:cd:
                    45:a2:7d:2e:ca:b8:b2:fa:49:a7:c3:de:6b:7b:f8:
                    88:5c:c8:d1:a2:38:dd:e1:50:b5:38:af:d2:39:17:
                    b6:85:c0:88:43:18:fc:02:7e:61:8f:18:51:8e:ca:
                    b3:11:76:b1:76:24:0f:f4:0b:21:fd:24:47:4b:97:
                    84:25:09:bc:a0:67:65:8e:40:05:e0:b2:a7:82:55:
                    94:fd:b6:c9:6e:ce:c0:01:b8:de:08:eb:91:33:ff:
                    09:d7:ed:a5:c2:46:5a:2e:ad:f5:05:7d:56:01:df:
                    fd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:8C:E1:61:10:45:B2:05:AB:4C:E5:CB:66:94:D1:23:6D:0F:08:DD
            X509v3 Authority Key Identifier:
                keyid:3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:60:42:00:e0:42:fe:48:9a:9a:54:a3:e8:0e:99:6f:e7:3b:
         34:39:75:41:a8:52:93:0d:b3:8e:45:47:ed:3e:c2:35:79:ee:
         ca:c0:aa:1e:6b:16:58:8c:5f:6b:f8:8b:99:70:96:f1:f4:27:
         94:78:3b:dd:71:24:6a:ea:ea:50:3c:86:e7:cf:8f:9e:7b:1a:
         55:91:82:7d:2f:a0:23:2c:f2:a9:56:68:19:06:d7:f6:3d:7b:
         80:d3:b9:2e:9f:ad:e2:21:6a:a0:72:fc:13:4a:8d:67:44:ca:
         70:57:db:26:73:8b:f6:17:d1:b6:60:94:3c:87:0d:0e:22:3b:
         5a:fa:7f:28:cc:2f:48:db:df:5e:87:5c:b0:2f:46:be:00:b2:
         23:35:37:7e:95:ff:57:76:93:66:8d:a3:65:f5:84:27:03:09:
         8f:01:1d:9c:28:08:af:9c:30:9f:ab:e6:72:fd:d9:59:bb:6d:
         d7:17:e9:ce:78:67:06:cd:53:43:16:54:24:e1:84:c8:ae:6d:
         1b:3f:78:17:0c:ba:cb:7c:53:4c:f1:b1:59:56:71:16:ca:f4:
         94:24:4c:ba:ef:c5:03:d1:af:01:8b:6f:19:46:88:e5:77:c6:
         e2:9c:6c:c4:01:0b:3c:bd:a8:6c:1c:f3:d0:10:c6:87:78:37:
         f2:cf:20:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----