Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
File:                     PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft (raw, json)
Hash identifier:          2s3smd6OfTfnHHAx3i1wm34IZZBoiJtgl0fp9PFeAc4=
Subject key identifier:   17:85:92:5D:79:30:FA:68:CB:E7:C6:58:AE:41:A7:8D:84:30:CC:88
Authority key identifier: 3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76
Certificate issuer:       /CN=3d16072ca0252fab50658d736ff2c60c1629dc76
Certificate serial:       01962ECF8A0BF367AA1B5411BF9A478B7571
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft
Manifest number:          0DB0
Signing time:             Sun 13 Apr 2025 11:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:15 +0000
Files and hashes:         1: 8e7eehP1l-DLf5STdKJWnoHYbKQ.roa (hash: K8SacJP+Z6piM83BegnBqW6J1m/glPf8EgTcnUYrotM=)
                          2: PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl (hash: UfyPKCWyXL+iRi9nzBkTJMm+NrzD4Usjf5xM2zBzw2o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8a:0b:f3:67:aa:1b:54:11:bf:9a:47:8b:75:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d16072ca0252fab50658d736ff2c60c1629dc76
        Validity
            Not Before: Apr 13 11:01:15 2025 GMT
            Not After : Apr 14 11:01:15 2025 GMT
        Subject: CN=1785925d7930fa68cbe7c658ae41a78d8430cc88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:93:6b:1b:fe:8c:7f:b6:80:6c:3d:21:6d:25:
                    73:dd:ac:b5:57:24:ed:34:80:5b:b7:fc:91:3c:78:
                    ef:ed:10:21:14:da:84:03:5b:01:d1:2d:ca:0a:ad:
                    7b:88:b6:0f:e9:04:c3:b7:92:1d:8d:ca:c0:f4:2b:
                    6f:1b:67:4b:df:ac:e7:4e:ee:34:ca:9e:eb:85:49:
                    64:da:47:d7:ab:6d:b8:3d:e7:db:5b:fd:4e:19:f6:
                    82:6e:04:3e:0c:e8:02:bb:15:6d:33:7c:d9:4a:0c:
                    d0:5d:db:71:70:ac:16:66:91:f6:7d:9f:9e:ef:e8:
                    a7:83:0d:65:1e:5e:a7:76:bd:2b:89:aa:46:c3:ae:
                    2f:ca:cc:53:99:de:49:4c:70:37:72:2d:f9:7e:fb:
                    ce:6a:6d:11:ac:f1:fa:37:0d:a7:4c:d2:9c:57:77:
                    d8:6e:b1:af:bc:fb:54:e3:6b:87:a2:4c:33:f7:de:
                    c2:d9:ee:64:eb:08:fe:7d:75:da:6d:22:f2:f2:55:
                    9b:2c:df:f6:1e:01:55:3c:01:10:af:a7:cd:35:09:
                    88:8e:7f:45:09:08:1d:52:d8:ed:2b:d2:49:70:b4:
                    c1:f4:22:36:e3:7b:a0:ca:d8:fc:04:7e:b7:84:84:
                    96:5d:e2:3d:75:b3:4c:d5:11:bd:b6:8f:d3:34:13:
                    50:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:85:92:5D:79:30:FA:68:CB:E7:C6:58:AE:41:A7:8D:84:30:CC:88
            X509v3 Authority Key Identifier:
                keyid:3D:16:07:2C:A0:25:2F:AB:50:65:8D:73:6F:F2:C6:0C:16:29:DC:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRYHLKAlL6tQZY1zb_LGDBYp3HY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/2fbf2c-542f-4c98-99db-a4e5de8ee716/1/PRYHLKAlL6tQZY1zb_LGDBYp3HY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:2b:7f:ac:fe:3a:c6:26:3b:06:3b:54:07:a5:1e:dd:ea:3e:
         f3:06:08:9b:19:7b:d0:2e:b3:4a:27:51:4c:9d:f8:3c:d2:6e:
         38:7e:35:52:12:a0:94:0c:d0:04:47:f2:ad:a7:32:ee:a8:19:
         b9:ca:b9:1d:7f:4a:c0:29:42:c3:e3:7d:02:0b:3e:d3:dd:ac:
         cc:11:12:bf:7f:87:e4:85:c9:18:62:75:7f:f4:95:b9:81:f5:
         15:d4:c0:d9:48:0d:bb:f1:be:69:d8:48:46:0f:95:37:f7:91:
         61:04:bc:36:62:aa:0f:9c:a6:b2:c4:4a:a8:07:77:8a:86:21:
         6c:8d:65:eb:20:46:31:b1:7c:74:5f:aa:77:2a:94:35:89:bf:
         10:a1:e0:63:ee:83:08:1c:93:9e:38:0a:24:3d:b9:97:1d:ec:
         9b:ea:87:29:88:bd:2e:9b:d4:97:84:34:6c:fc:5b:bf:fe:0f:
         06:ea:96:70:60:fd:e0:26:20:c3:bb:82:75:e7:d0:af:b8:f8:
         ef:8a:14:01:fd:29:5e:e5:c8:86:3c:37:8c:ad:e2:c0:a3:48:
         12:ac:37:ba:10:a8:2d:19:f0:aa:a1:f6:17:25:02:e7:b3:64:
         a7:94:d4:d0:c3:e5:38:2a:6f:2e:b5:5a:fb:31:21:5f:62:74:
         d2:29:a8:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz4oL82eqG1QRv5pHi3VxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMTYwNzJjYTAyNTJmYWI1MDY1OGQ3MzZmZjJjNjBjMTYy
OWRjNzYwHhcNMjUwNDEzMTEwMTE1WhcNMjUwNDE0MTEwMTE1WjAzMTEwLwYDVQQD
EygxNzg1OTI1ZDc5MzBmYTY4Y2JlN2M2NThhZTQxYTc4ZDg0MzBjYzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZNrG/6Mf7aAbD0hbSVz3ay1VyTt
NIBbt/yRPHjv7RAhFNqEA1sB0S3KCq17iLYP6QTDt5IdjcrA9CtvG2dL36znTu40
yp7rhUlk2kfXq224PefbW/1OGfaCbgQ+DOgCuxVtM3zZSgzQXdtxcKwWZpH2fZ+e
7+ingw1lHl6ndr0riapGw64vysxTmd5JTHA3ci35fvvOam0RrPH6Nw2nTNKcV3fY
brGvvPtU42uHokwz997C2e5k6wj+fXXabSLy8lWbLN/2HgFVPAEQr6fNNQmIjn9F
CQgdUtjtK9JJcLTB9CI243ugytj8BH63hISWXeI9dbNM1RG9to/TNBNQfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBeFkl15MPpoy+fGWK5Bp42EMMyIMB8GA1UdIwQY
MBaAFD0WByygJS+rUGWNc2/yxgwWKdx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFJZSExLQWxMNnRRWlkxemJfTEdEQllwM0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8yZmJmMmMtNTQyZi00Yzk4LTk5ZGIt
YTRlNWRlOGVlNzE2LzEvUFJZSExLQWxMNnRRWlkxemJfTEdEQllwM0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8yZmJmMmMtNTQyZi00Yzk4LTk5ZGItYTRlNWRlOGVlNzE2
LzEvUFJZSExLQWxMNnRRWlkxemJfTEdEQllwM0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUit/rP46
xiY7BjtUB6Ue3eo+8wYImxl70C6zSidRTJ34PNJuOH41UhKglAzQBEfyracy7qgZ
ucq5HX9KwClCw+N9Ags+092szBESv3+H5IXJGGJ1f/SVuYH1FdTA2UgNu/G+adhI
Rg+VN/eRYQS8NmKqD5ymssRKqAd3ioYhbI1l6yBGMbF8dF+qdyqUNYm/EKHgY+6D
CByTnjgKJD25lx3sm+qHKYi9LpvUl4Q0bPxbv/4PBuqWcGD94CYgw7uCdefQr7j4
74oUAf0pXuXIhjw3jK3iwKNIEqw3uhCoLRnwqqH2FyUC57Nkp5TU0MPlOCpvLrVa
+zEhX2J00imoiA==
-----END CERTIFICATE-----