Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
File:                     PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft (raw, json)
Hash identifier:          5ejeQgoZfoU2/cu7EEhGQ6iaaZUrOSYQ/TNAzfPSMJo=
Subject key identifier:   60:FC:4E:AF:42:67:79:BB:BF:5E:A0:50:11:66:0C:E5:FE:FD:B7:02
Authority key identifier: 3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4
Certificate issuer:       /CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
Certificate serial:       01962FAB49348BF588045447BE9218694482
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft
Manifest number:          0E86
Signing time:             Sun 13 Apr 2025 15:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:16 +0000
Files and hashes:         1: 9fywOGNsk6OIfuzuy-reOW9V4kc.roa (hash: b/vhaQiKQhhebnkpqZc4spciDDH3KeMp+AUrKHHSWv4=)
                          2: PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl (hash: tNRBNe/Fd4fQyYdG9vLINFxBfCQu04+mSpLb7rpKSwc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:49:34:8b:f5:88:04:54:47:be:92:18:69:44:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ea554098c7a88aa34264b92d8bf2257ec0bcda4
        Validity
            Not Before: Apr 13 15:01:16 2025 GMT
            Not After : Apr 14 15:01:16 2025 GMT
        Subject: CN=60fc4eaf426779bbbf5ea05011660ce5fefdb702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:80:f1:f0:5f:4c:4f:88:d2:69:8d:f3:76:c0:
                    66:36:09:47:54:df:ab:77:9f:47:ec:8c:aa:0b:a9:
                    f5:df:61:17:8b:69:87:5a:05:39:7b:b2:34:c0:72:
                    b3:5a:05:7c:84:c9:6a:b5:ee:02:0e:42:55:4b:dc:
                    36:21:b2:3b:b1:c0:3d:26:20:df:12:89:db:ee:d3:
                    ad:e4:80:d9:9a:d5:95:b9:c7:6f:e2:c9:b2:60:f7:
                    17:e7:50:37:ff:8d:55:ab:c1:f3:d8:69:81:89:c2:
                    ea:22:78:06:cd:af:3d:8c:cb:09:4b:07:7e:eb:a1:
                    25:79:3a:bc:14:3c:cf:bc:bf:16:bb:de:d3:81:81:
                    f5:58:c1:e0:2a:e6:5c:27:49:fb:3e:10:e2:98:35:
                    e8:8d:32:d6:44:63:a9:25:b5:b3:5d:a3:09:0e:83:
                    08:77:67:11:ba:fb:02:2d:97:25:13:dd:c7:11:cf:
                    d0:ac:d9:39:f2:ba:e1:4f:f8:f8:64:3d:97:bf:58:
                    f0:84:6d:95:cf:19:4c:84:92:63:a4:fe:59:f4:a5:
                    7a:f3:7b:6a:0b:52:05:23:b3:ea:8b:2c:b7:19:6d:
                    27:c0:cd:ed:2e:b2:e8:8e:0d:0f:ca:f1:6a:8a:58:
                    75:7b:9b:9d:3a:4c:b5:1f:b9:1e:15:58:67:a8:48:
                    72:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FC:4E:AF:42:67:79:BB:BF:5E:A0:50:11:66:0C:E5:FE:FD:B7:02
            X509v3 Authority Key Identifier:
                keyid:3E:A5:54:09:8C:7A:88:AA:34:26:4B:92:D8:BF:22:57:EC:0B:CD:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4767ce-4448-436b-a910-66de9865dbac/1/PqVUCYx6iKo0JkuS2L8iV-wLzaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:85:88:31:61:48:2b:15:72:d9:8b:7e:d9:ad:77:08:e1:77:
         64:3f:e6:1a:75:95:b7:45:9d:f5:b6:4d:3b:57:50:5f:52:3e:
         cd:16:91:18:6d:9b:d5:6f:bb:ca:13:01:8d:2d:a2:00:43:0b:
         11:0d:b9:6b:33:49:d6:ce:3d:c8:51:e1:d0:62:8d:49:c8:17:
         26:d5:08:72:b4:58:5a:fa:c9:a4:15:66:bc:a9:45:f8:e5:bc:
         24:0d:fc:dd:91:f8:e2:26:eb:5a:23:21:0a:e0:8b:08:41:8f:
         57:39:d4:c5:40:c3:d1:eb:ff:67:df:ea:a2:94:90:5d:a4:df:
         59:9b:34:09:44:1f:9c:17:aa:12:fb:fc:65:d0:9c:ad:14:86:
         ff:df:71:66:94:36:c9:0c:00:20:46:f9:75:e9:63:63:c4:79:
         40:25:39:dc:13:72:22:9c:ba:bd:c9:0e:77:94:20:cc:2b:26:
         24:a1:d0:12:8d:d4:99:65:19:35:78:5d:d2:dc:26:ae:92:27:
         2e:8a:58:32:54:1e:58:32:72:5a:b7:ec:e7:35:0d:d2:8d:6f:
         94:70:ff:ef:9c:34:13:10:fc:c9:8c:7c:b6:8f:a0:3b:c9:de:
         92:1f:40:a8:bd:ba:ae:83:91:57:14:db:c9:db:a3:20:c6:45:
         e1:c0:90:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq0k0i/WIBFRHvpIYaUSCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYTU1NDA5OGM3YTg4YWEzNDI2NGI5MmQ4YmYyMjU3ZWMw
YmNkYTQwHhcNMjUwNDEzMTUwMTE2WhcNMjUwNDE0MTUwMTE2WjAzMTEwLwYDVQQD
Eyg2MGZjNGVhZjQyNjc3OWJiYmY1ZWEwNTAxMTY2MGNlNWZlZmRiNzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIDx8F9MT4jSaY3zdsBmNglHVN+r
d59H7IyqC6n132EXi2mHWgU5e7I0wHKzWgV8hMlqte4CDkJVS9w2IbI7scA9JiDf
Eonb7tOt5IDZmtWVucdv4smyYPcX51A3/41Vq8Hz2GmBicLqIngGza89jMsJSwd+
66EleTq8FDzPvL8Wu97TgYH1WMHgKuZcJ0n7PhDimDXojTLWRGOpJbWzXaMJDoMI
d2cRuvsCLZclE93HEc/QrNk58rrhT/j4ZD2Xv1jwhG2VzxlMhJJjpP5Z9KV683tq
C1IFI7Pqiyy3GW0nwM3tLrLojg0PyvFqilh1e5udOky1H7keFVhnqEhyPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGD8Tq9CZ3m7v16gUBFmDOX+/bcCMB8GA1UdIwQY
MBaAFD6lVAmMeoiqNCZLkti/IlfsC82kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80NzY3Y2UtNDQ0OC00MzZiLWE5MTAt
NjZkZTk4NjVkYmFjLzEvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy80NzY3Y2UtNDQ0OC00MzZiLWE5MTAtNjZkZTk4NjVkYmFj
LzEvUHFWVUNZeDZpS28wSmt1UzJMOGlWLXdMemFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD4WIMWFI
KxVy2Yt+2a13COF3ZD/mGnWVt0Wd9bZNO1dQX1I+zRaRGG2b1W+7yhMBjS2iAEML
EQ25azNJ1s49yFHh0GKNScgXJtUIcrRYWvrJpBVmvKlF+OW8JA383ZH44ibrWiMh
CuCLCEGPVznUxUDD0ev/Z9/qopSQXaTfWZs0CUQfnBeqEvv8ZdCcrRSG/99xZpQ2
yQwAIEb5deljY8R5QCU53BNyIpy6vckOd5QgzCsmJKHQEo3UmWUZNXhd0twmrpIn
LopYMlQeWDJyWrfs5zUN0o1vlHD/75w0ExD8yYx8to+gO8nekh9AqL26roORVxTb
ydujIMZF4cCQuw==
-----END CERTIFICATE-----