Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/75bba8-57d8-42c2-8aaf-45e954271ab8/1/PqHYsv0nYm97SWZL8Fu95tWb2tM.mft
File:                     PqHYsv0nYm97SWZL8Fu95tWb2tM.mft (raw, json)
Hash identifier:          ECyFVfGgas+r6uv34i9EZKTkqNUIL4qjk9KYHT7wSd4=
Subject key identifier:   53:36:C6:C4:CE:A2:3A:AA:09:DC:5D:68:A3:EB:AD:7F:A4:A9:D9:53
Authority key identifier: 3E:A1:D8:B2:FD:27:62:6F:7B:49:66:4B:F0:5B:BD:E6:D5:9B:DA:D3
Certificate issuer:       /CN=3ea1d8b2fd27626f7b49664bf05bbde6d59bdad3
Certificate serial:       018F7AD6B6AE3C4348F60D2485B34250C591
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PqHYsv0nYm97SWZL8Fu95tWb2tM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/75bba8-57d8-42c2-8aaf-45e954271ab8/1/PqHYsv0nYm97SWZL8Fu95tWb2tM.mft
Manifest number:          104A
Signing time:             Wed 15 May 2024 06:00:42 +0000
Manifest this update:     Wed 15 May 2024 06:00:42 +0000
Manifest next update:     Thu 16 May 2024 06:00:42 +0000
Files and hashes:         1: 0kkD1rTzOSKmMsYvgfx4mj3-Abs.roa (hash: gPb7hVk8HjQG4Hs5FqyXDjeEzpUQUZ0558tyVeRvv1s=)
                          2: PqHYsv0nYm97SWZL8Fu95tWb2tM.crl (hash: cUqGQiZ9i7opGvzXk9mAUDsN3oozKEzMBApguOIgGsk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:7a:d6:b6:ae:3c:43:48:f6:0d:24:85:b3:42:50:c5:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ea1d8b2fd27626f7b49664bf05bbde6d59bdad3
        Validity
            Not Before: May 15 06:00:42 2024 GMT
            Not After : May 16 06:00:42 2024 GMT
        Subject: CN=5336c6c4cea23aaa09dc5d68a3ebad7fa4a9d953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1c:9f:ca:d0:fc:be:9e:fa:e1:48:a3:bf:ed:
                    cc:e8:01:c4:d8:14:b2:d8:5f:54:f3:80:6f:6a:56:
                    08:6f:05:9f:39:b6:b1:45:47:0f:52:77:1b:3f:87:
                    92:8a:b2:27:7a:68:34:48:16:11:d3:50:0e:7a:ff:
                    f9:ef:c5:62:e5:f2:4d:f0:b0:64:80:52:d9:ba:ab:
                    64:f7:05:c5:1b:cb:45:42:0a:13:e6:4c:c5:e2:9f:
                    a1:34:7b:b5:b6:6a:b5:8b:df:40:c6:8a:fc:73:4e:
                    36:52:e1:14:f5:fe:c4:cc:90:fb:64:07:66:a5:4c:
                    be:1f:8a:88:a4:81:3f:80:b9:2e:67:ec:a5:24:10:
                    97:60:7d:e4:15:cf:c5:40:08:9e:a3:b2:0f:3d:37:
                    d5:c4:21:fa:0a:0e:6f:ab:f7:16:be:1c:91:d9:a9:
                    d1:0c:36:ba:d1:23:0a:b2:07:6c:c5:7f:ad:6a:a0:
                    06:38:4a:22:e3:f7:19:4e:22:92:dc:3a:2c:6a:58:
                    2a:59:69:23:36:24:6a:e7:42:a0:83:cb:16:e3:9c:
                    73:da:a6:2c:d0:17:49:98:61:31:a5:68:bb:f5:2c:
                    d5:e4:c4:35:5a:2d:be:0e:f7:02:99:d7:1f:fc:2a:
                    a1:0b:c1:1e:3b:3b:da:2e:f0:4f:ae:7b:67:b0:b6:
                    8f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:36:C6:C4:CE:A2:3A:AA:09:DC:5D:68:A3:EB:AD:7F:A4:A9:D9:53
            X509v3 Authority Key Identifier:
                keyid:3E:A1:D8:B2:FD:27:62:6F:7B:49:66:4B:F0:5B:BD:E6:D5:9B:DA:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqHYsv0nYm97SWZL8Fu95tWb2tM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/75bba8-57d8-42c2-8aaf-45e954271ab8/1/PqHYsv0nYm97SWZL8Fu95tWb2tM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/75bba8-57d8-42c2-8aaf-45e954271ab8/1/PqHYsv0nYm97SWZL8Fu95tWb2tM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:73:bf:25:c3:1a:25:57:13:f0:63:b3:d8:44:fd:7e:1f:63:
         91:d0:56:c4:72:d3:12:1b:6a:71:13:dd:93:36:5b:17:5b:3a:
         4c:01:64:75:74:79:ea:ae:fa:3a:3e:73:53:41:71:bd:e2:9c:
         a4:37:bf:78:fd:0c:15:4c:75:41:e3:94:f8:18:e4:4a:8b:02:
         9d:a2:8a:39:e7:68:e4:0a:a4:ae:ea:c2:ad:b0:3b:a8:04:54:
         f4:ce:9d:ae:da:49:82:4d:11:ca:b1:d7:60:76:c4:8a:7c:1c:
         24:07:15:d7:70:b8:e7:b7:e0:13:88:64:07:ba:cc:63:bd:6b:
         75:f9:22:93:8d:22:93:15:e0:e3:7f:45:a0:e4:90:72:d7:41:
         7c:7d:fe:0c:f3:f3:71:fe:3c:c1:cb:bb:08:71:50:c3:83:52:
         1f:09:2e:ac:d9:90:8f:91:9f:b0:af:af:5e:4b:46:fc:95:27:
         1b:20:49:6f:36:b3:c1:78:f9:0e:f3:ce:ef:f4:7e:16:38:96:
         a3:7d:dd:00:c3:da:4f:2e:63:03:05:e2:76:61:94:ee:b8:fb:
         33:0e:62:3a:a9:d7:66:f6:3a:05:d7:f1:f5:9a:b5:5a:2c:5e:
         ae:21:dd:50:41:89:53:84:0a:a5:08:9e:01:07:aa:5f:4c:e6:
         b4:59:24:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----