Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.mft
File:                     pqBZBOyBdGoKZtIH9dNvjZeIig0.mft (raw, json)
Hash identifier:          kzktmWCWI00FTrFMnkZx2Mj9JVpcDTIcWZv5gtZLpSQ=
Subject key identifier:   B7:04:BC:36:F3:92:A8:6B:9F:17:DE:48:69:05:00:95:1A:4B:9C:DB
Authority key identifier: A6:A0:59:04:EC:81:74:6A:0A:66:D2:07:F5:D3:6F:8D:97:88:8A:0D
Certificate issuer:       /CN=a6a05904ec81746a0a66d207f5d36f8d97888a0d
Certificate serial:       01962E98D35DBA92BB53174729141882BB2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pqBZBOyBdGoKZtIH9dNvjZeIig0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.mft
Manifest number:          064D
Signing time:             Sun 13 Apr 2025 10:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:29 +0000
Files and hashes:         1: pqBZBOyBdGoKZtIH9dNvjZeIig0.crl (hash: k7BO4f9rB+OctUgSUoQ6ENgKKjhdk+ZcBaFUsFFAgYg=)
                          2: wcWtJWZdHtQ3MB-JGGb4XgtvRZY.roa (hash: uBYBylJRjDgsdsAh3Gf2WJ38oblmNaRqlj9rvalMb+M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d3:5d:ba:92:bb:53:17:47:29:14:18:82:bb:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6a05904ec81746a0a66d207f5d36f8d97888a0d
        Validity
            Not Before: Apr 13 10:01:29 2025 GMT
            Not After : Apr 14 10:01:29 2025 GMT
        Subject: CN=b704bc36f392a86b9f17de48690500951a4b9cdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a1:c2:e7:96:74:65:3a:41:34:74:99:dd:b0:
                    0e:e5:b2:34:7e:9c:04:d8:18:cc:ba:0d:cc:b1:40:
                    b2:0d:28:e8:20:f8:93:9e:39:6d:80:2d:0e:68:03:
                    f2:26:3e:c6:57:02:6b:e4:62:38:44:ee:52:d5:c9:
                    b9:59:d8:4d:f7:73:e3:4e:37:c0:65:b5:06:f3:9a:
                    4b:2d:b6:b9:83:18:2e:d8:6f:53:d3:1d:6b:5b:e5:
                    21:2f:78:98:fb:c9:0d:a7:8b:c1:4e:97:90:eb:3d:
                    2b:e1:6c:6c:b1:0f:3c:95:43:96:14:fb:8f:34:f6:
                    f2:b9:db:3b:ca:45:9b:00:a2:20:ad:37:3b:90:6d:
                    ec:91:0d:ca:3c:63:34:d2:e9:78:ab:7e:61:c8:c9:
                    d1:c5:73:eb:8e:fd:5d:20:13:df:7a:b7:d4:63:96:
                    c7:e8:1d:18:8c:e0:7e:91:53:91:04:b3:a4:27:21:
                    6d:99:55:04:ee:0e:0e:0a:f9:3a:f9:88:43:44:bd:
                    a6:0a:0c:dd:f3:0d:51:0e:23:b2:8c:f6:2a:57:58:
                    67:28:88:c6:39:fb:64:34:20:7c:c2:11:66:e6:3b:
                    22:b5:2c:c7:3b:c9:e5:42:78:bb:cd:43:9d:5f:cc:
                    42:c7:7e:b0:9d:71:a1:39:04:32:27:e4:69:2f:56:
                    d5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:04:BC:36:F3:92:A8:6B:9F:17:DE:48:69:05:00:95:1A:4B:9C:DB
            X509v3 Authority Key Identifier:
                keyid:A6:A0:59:04:EC:81:74:6A:0A:66:D2:07:F5:D3:6F:8D:97:88:8A:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pqBZBOyBdGoKZtIH9dNvjZeIig0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3b51c9-b37b-4767-88d9-5df6a463035b/1/pqBZBOyBdGoKZtIH9dNvjZeIig0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:c1:3b:6e:62:45:94:90:09:c4:71:dc:10:9a:45:0e:fb:eb:
         bb:e0:8e:6e:8d:a1:28:40:3c:f1:10:4d:98:db:5d:16:a3:c8:
         74:50:31:1f:5e:12:99:31:50:03:d1:59:b3:69:ce:8b:34:84:
         e8:56:05:81:08:ad:9c:f8:f5:b7:4e:8a:05:52:e3:02:25:17:
         b5:9f:32:21:16:e7:e6:5f:44:9f:2d:3e:c4:3c:c1:66:ca:12:
         c4:3d:dc:63:8f:7f:02:a8:60:39:93:7b:bc:9e:85:ef:91:85:
         4a:2d:72:af:df:de:33:74:2c:20:a3:d1:e4:c9:ff:70:be:74:
         1d:3f:cb:3e:10:a2:92:2a:09:eb:ac:fa:6a:66:d8:d0:8e:af:
         b5:95:42:9f:60:c4:68:f8:cf:4f:eb:ba:fb:d6:54:c2:aa:e3:
         45:57:95:90:17:fd:c7:28:19:35:31:a1:a2:30:fb:98:5c:32:
         6c:0d:e8:74:09:89:76:70:08:ca:a0:2b:bb:01:28:6a:88:cf:
         87:9a:08:39:4d:6a:e5:3b:48:fd:a5:de:8a:e0:3d:9a:7d:21:
         b4:3a:d1:24:10:6a:83:47:c8:fe:41:92:89:bd:c4:9a:12:50:
         78:5a:53:45:5d:0b:47:91:d7:f3:bc:aa:94:09:da:ff:0f:e7:
         4d:bf:f8:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumNNdupK7UxdHKRQYgrsqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YTA1OTA0ZWM4MTc0NmEwYTY2ZDIwN2Y1ZDM2ZjhkOTc4
ODhhMGQwHhcNMjUwNDEzMTAwMTI5WhcNMjUwNDE0MTAwMTI5WjAzMTEwLwYDVQQD
EyhiNzA0YmMzNmYzOTJhODZiOWYxN2RlNDg2OTA1MDA5NTFhNGI5Y2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26HC55Z0ZTpBNHSZ3bAO5bI0fpwE
2BjMug3MsUCyDSjoIPiTnjltgC0OaAPyJj7GVwJr5GI4RO5S1cm5WdhN93PjTjfA
ZbUG85pLLba5gxgu2G9T0x1rW+UhL3iY+8kNp4vBTpeQ6z0r4WxssQ88lUOWFPuP
NPbyuds7ykWbAKIgrTc7kG3skQ3KPGM00ul4q35hyMnRxXPrjv1dIBPferfUY5bH
6B0YjOB+kVORBLOkJyFtmVUE7g4OCvk6+YhDRL2mCgzd8w1RDiOyjPYqV1hnKIjG
OftkNCB8whFm5jsitSzHO8nlQni7zUOdX8xCx36wnXGhOQQyJ+RpL1bVZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLcEvDbzkqhrnxfeSGkFAJUaS5zbMB8GA1UdIwQY
MBaAFKagWQTsgXRqCmbSB/XTb42XiIoNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHFCWkJPeUJkR29LWnRJSDlkTnZqWmVJaWcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zYjUxYzktYjM3Yi00NzY3LTg4ZDkt
NWRmNmE0NjMwMzViLzEvcHFCWkJPeUJkR29LWnRJSDlkTnZqWmVJaWcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8zYjUxYzktYjM3Yi00NzY3LTg4ZDktNWRmNmE0NjMwMzVi
LzEvcHFCWkJPeUJkR29LWnRJSDlkTnZqWmVJaWcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPsE7bmJF
lJAJxHHcEJpFDvvru+CObo2hKEA88RBNmNtdFqPIdFAxH14SmTFQA9FZs2nOizSE
6FYFgQitnPj1t06KBVLjAiUXtZ8yIRbn5l9Eny0+xDzBZsoSxD3cY49/AqhgOZN7
vJ6F75GFSi1yr9/eM3QsIKPR5Mn/cL50HT/LPhCikioJ66z6ambY0I6vtZVCn2DE
aPjPT+u6+9ZUwqrjRVeVkBf9xygZNTGhojD7mFwybA3odAmJdnAIyqAruwEoaojP
h5oIOU1q5TtI/aXeiuA9mn0htDrRJBBqg0fI/kGSib3EmhJQeFpTRV0LR5HX87yq
lAna/w/nTb/4QQ==
-----END CERTIFICATE-----