Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
File:                     PryeUbqrPD5qtpn8tEPwB_VGw_s.mft (raw, json)
Hash identifier:          2905S7AHLFAVywHANtbGZ9jdNrBFML3V8VI/czirZgs=
Subject key identifier:   01:2A:2B:70:4C:AD:E5:24:CD:F7:AC:BA:DF:EF:AA:12:78:91:4E:59
Authority key identifier: 3E:BC:9E:51:BA:AB:3C:3E:6A:B6:99:FC:B4:43:F0:07:F5:46:C3:FB
Certificate issuer:       /CN=3ebc9e51baab3c3e6ab699fcb443f007f546c3fb
Certificate serial:       01962DF41A2804BFCCE9BDC971140C59BF8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 07:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:34 +0000
Files and hashes:         1: PryeUbqrPD5qtpn8tEPwB_VGw_s.crl (hash: HozINHy8xi2qVMZxAZBokyfi3HgAGD7ilDE6G7j/MSo=)
                          2: dNeuYEAQmOoidPn9sPTHpBf3kwM.roa (hash: XKk9IUkG18VeN9nDomy3arFXLgPu8Jw+AjyCy/j87MA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:1a:28:04:bf:cc:e9:bd:c9:71:14:0c:59:bf:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebc9e51baab3c3e6ab699fcb443f007f546c3fb
        Validity
            Not Before: Apr 13 07:01:34 2025 GMT
            Not After : Apr 14 07:01:34 2025 GMT
        Subject: CN=012a2b704cade524cdf7acbadfefaa1278914e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b0:72:4b:e8:42:db:0c:d1:54:9c:17:7a:2c:
                    19:a0:b5:ab:80:e7:0d:3c:28:52:01:12:ed:dc:f6:
                    72:27:91:82:e0:13:a5:ad:43:5c:03:eb:81:2e:37:
                    b6:99:14:d2:6f:b0:0f:50:2b:81:1d:e0:2a:79:45:
                    ee:fa:d5:c3:41:37:06:2a:cf:65:52:b8:06:23:69:
                    74:99:57:de:95:34:b9:02:b5:7c:fd:cb:ed:0a:62:
                    a1:48:6c:0c:60:3f:b4:8b:46:2a:57:2e:c7:e6:f8:
                    09:18:43:10:58:b7:c1:96:78:b6:75:c6:0e:80:39:
                    0c:b1:cd:d7:fd:56:b1:77:53:ef:f1:7a:6f:3b:47:
                    62:f6:0b:8f:05:46:f2:e9:91:67:b6:27:06:12:1f:
                    33:70:34:aa:ea:e2:22:f2:68:6b:a4:24:c6:c9:0d:
                    f6:f9:72:7a:aa:fa:28:f9:81:9f:1b:a0:fd:f9:cf:
                    fa:4a:1a:84:03:4c:1d:f0:ca:33:c3:96:88:28:ea:
                    38:b3:fe:28:5e:dc:54:01:b8:3c:3a:7a:ff:46:11:
                    a9:c0:dc:8f:d5:ba:2f:b5:ec:5f:05:f7:01:1c:ba:
                    ce:9f:45:bc:f4:b6:a3:8c:79:ea:cc:05:db:39:3b:
                    82:20:f4:e4:5f:09:20:c5:68:bb:39:4e:72:23:0c:
                    4a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:2A:2B:70:4C:AD:E5:24:CD:F7:AC:BA:DF:EF:AA:12:78:91:4E:59
            X509v3 Authority Key Identifier:
                keyid:3E:BC:9E:51:BA:AB:3C:3E:6A:B6:99:FC:B4:43:F0:07:F5:46:C3:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PryeUbqrPD5qtpn8tEPwB_VGw_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/54c1d1-363b-45ba-8927-9689fbf6f6ee/1/PryeUbqrPD5qtpn8tEPwB_VGw_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:a9:90:43:b1:af:f4:4b:bb:41:83:18:af:f0:2f:ba:e6:d5:
         35:96:5b:59:d8:8a:06:d5:d8:2d:02:a3:6f:fc:9c:dd:6f:00:
         7b:1d:56:3a:bc:e8:2f:98:30:9c:51:02:18:55:f6:0c:aa:4d:
         cb:5a:29:ff:8e:6f:f6:22:0c:c7:4f:f2:14:9e:e6:87:23:1a:
         e3:40:4e:19:70:fa:4b:a1:d6:cf:da:89:f9:30:ea:9a:ec:69:
         ee:65:6e:4d:b4:84:b6:87:75:ed:90:be:63:5a:52:a9:88:24:
         e3:79:80:45:a1:5d:87:ea:0a:a0:63:0a:48:af:51:6d:3f:ad:
         aa:aa:f4:5f:25:ab:8e:4c:a4:ed:bf:c9:0d:9f:41:ea:33:28:
         b8:7e:dc:e3:20:cf:96:2d:81:2e:d7:dd:e1:6a:c2:fd:ee:5b:
         7c:fa:60:1b:f3:c2:e4:31:7c:6b:b2:b4:32:63:44:6f:d5:0c:
         8e:17:6d:5c:0d:b8:20:dc:56:82:ed:34:52:4e:00:61:9a:73:
         89:29:0f:c5:f1:a4:bd:41:49:d1:db:d4:d8:09:72:dd:73:c5:
         87:65:50:d3:78:4b:0b:1d:d2:05:cc:06:fb:3d:e4:35:55:84:
         25:29:99:8a:e9:a9:8a:48:4a:5a:8b:e3:6e:d0:12:7a:0b:13:
         56:b2:ed:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9BooBL/M6b3JcRQMWb+LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlYmM5ZTUxYmFhYjNjM2U2YWI2OTlmY2I0NDNmMDA3ZjU0
NmMzZmIwHhcNMjUwNDEzMDcwMTM0WhcNMjUwNDE0MDcwMTM0WjAzMTEwLwYDVQQD
EygwMTJhMmI3MDRjYWRlNTI0Y2RmN2FjYmFkZmVmYWExMjc4OTE0ZTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprByS+hC2wzRVJwXeiwZoLWrgOcN
PChSARLt3PZyJ5GC4BOlrUNcA+uBLje2mRTSb7APUCuBHeAqeUXu+tXDQTcGKs9l
UrgGI2l0mVfelTS5ArV8/cvtCmKhSGwMYD+0i0YqVy7H5vgJGEMQWLfBlni2dcYO
gDkMsc3X/Vaxd1Pv8XpvO0di9guPBUby6ZFnticGEh8zcDSq6uIi8mhrpCTGyQ32
+XJ6qvoo+YGfG6D9+c/6ShqEA0wd8Mozw5aIKOo4s/4oXtxUAbg8Onr/RhGpwNyP
1bovtexfBfcBHLrOn0W89LajjHnqzAXbOTuCIPTkXwkgxWi7OU5yIwxKLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAEqK3BMreUkzfesut/vqhJ4kU5ZMB8GA1UdIwQY
MBaAFD68nlG6qzw+araZ/LRD8Af1RsP7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHJ5ZVVicXJQRDVxdHBuOHRFUHdCX1ZHd19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC81NGMxZDEtMzYzYi00NWJhLTg5Mjct
OTY4OWZiZjZmNmVlLzEvUHJ5ZVVicXJQRDVxdHBuOHRFUHdCX1ZHd19zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC81NGMxZDEtMzYzYi00NWJhLTg5MjctOTY4OWZiZjZmNmVl
LzEvUHJ5ZVVicXJQRDVxdHBuOHRFUHdCX1ZHd19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWamQQ7Gv
9Eu7QYMYr/AvuubVNZZbWdiKBtXYLQKjb/yc3W8Aex1WOrzoL5gwnFECGFX2DKpN
y1op/45v9iIMx0/yFJ7mhyMa40BOGXD6S6HWz9qJ+TDqmuxp7mVuTbSEtod17ZC+
Y1pSqYgk43mARaFdh+oKoGMKSK9RbT+tqqr0XyWrjkyk7b/JDZ9B6jMouH7c4yDP
li2BLtfd4WrC/e5bfPpgG/PC5DF8a7K0MmNEb9UMjhdtXA24INxWgu00Uk4AYZpz
iSkPxfGkvUFJ0dvU2Aly3XPFh2VQ03hLCx3SBcwG+z3kNVWEJSmZiumpikhKWovj
btASegsTVrLteQ==
-----END CERTIFICATE-----