Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
File:                     Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft (raw, json)
Hash identifier:          sTPREgRVIDtc3By8MIIV73oVawKWn7e95F6wkc2TQkM=
Subject key identifier:   ED:AC:11:DF:F1:29:96:8E:96:30:1D:5B:33:59:A0:6B:F8:3B:96:59
Authority key identifier: 3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F
Certificate issuer:       /CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
Certificate serial:       01962F74BC80FC5BED4F3C6041B2F3336FCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft
Manifest number:          10A0
Signing time:             Sun 13 Apr 2025 14:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:41 +0000
Files and hashes:         1: Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl (hash: 5HBZNhozRhQtgIJ0k/2LqTUtAM/X1O6l30DE2i68XBM=)
                          2: mvLDmuyuUuZFiCTIw_g9i8uNgFg.roa (hash: GZj+Xi5SIMQUMGweRfOhuKIks60lK9TTGOmmhsaxut8=)
                          3: zURslIPoCzmuF9cVBs91SF_jfZs.roa (hash: PBlZSBkxr5D+YnPFObnzHQvndsM2zZG1fAG0x5+wRk4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:bc:80:fc:5b:ed:4f:3c:60:41:b2:f3:33:6f:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f3bf511774b6e1d706bb2727b3d3125775a912f
        Validity
            Not Before: Apr 13 14:01:41 2025 GMT
            Not After : Apr 14 14:01:41 2025 GMT
        Subject: CN=edac11dff129968e96301d5b3359a06bf83b9659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b8:73:71:0c:e3:99:2d:19:8a:b6:3a:80:f0:
                    af:39:8d:b0:9d:e7:a1:f0:76:9b:c2:09:86:d8:23:
                    f1:ef:ea:81:33:00:b8:03:f3:72:82:b9:49:83:90:
                    7a:d8:8c:54:7c:a5:b9:e9:28:ee:98:36:06:7e:3d:
                    31:62:6e:9e:a9:d2:56:44:ab:44:a1:0f:94:92:f9:
                    29:88:3c:8f:8b:07:7a:53:08:b2:d1:9a:5a:a7:9f:
                    cf:8f:16:be:ea:7f:30:14:64:cb:15:f0:dd:46:7c:
                    94:a5:88:fd:70:eb:33:3c:b9:be:2d:29:15:8d:1c:
                    04:d8:50:02:e7:f5:6c:7d:bf:c9:bb:ec:67:03:17:
                    8e:22:b4:8c:16:c8:e9:42:c5:b8:6a:73:5b:dc:13:
                    e8:de:07:62:9b:fa:cc:59:37:17:19:f5:7c:1d:2a:
                    34:66:12:ef:b7:51:3f:7c:ee:1a:5a:cc:5e:5d:7a:
                    3b:e7:c9:a1:ef:e4:ad:65:37:0c:c3:ba:80:76:b6:
                    74:2b:34:70:db:76:23:29:89:e9:df:f9:40:29:ea:
                    d2:87:f0:35:c8:8b:02:d6:05:a1:89:e6:f2:0c:cc:
                    c7:b8:f4:d1:f6:ca:f0:0e:07:b4:ce:d3:ad:24:9c:
                    62:92:8e:f0:ec:e4:8a:42:47:1b:76:e3:9c:be:f9:
                    40:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AC:11:DF:F1:29:96:8E:96:30:1D:5B:33:59:A0:6B:F8:3B:96:59
            X509v3 Authority Key Identifier:
                keyid:3F:3B:F5:11:77:4B:6E:1D:70:6B:B2:72:7B:3D:31:25:77:5A:91:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pzv1EXdLbh1wa7Jyez0xJXdakS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f55757-5965-4270-beab-a0d6dbfac6eb/1/Pzv1EXdLbh1wa7Jyez0xJXdakS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:1d:15:25:7b:10:ee:64:8c:af:f7:d6:bc:c4:cc:57:48:30:
         e3:cb:32:28:9b:e8:9a:97:31:ff:d4:b0:89:44:11:d0:56:7e:
         78:7d:22:b7:97:e5:cb:2d:26:18:73:7b:52:14:a4:61:a2:47:
         50:2d:47:41:a0:b9:2c:ed:52:f6:8d:ec:73:b7:eb:50:ed:7a:
         18:04:31:03:d0:c1:31:3f:f6:38:66:d8:91:83:3a:77:97:b0:
         dd:01:b0:74:2d:65:05:87:ce:66:6f:38:fe:a2:44:fd:cb:4a:
         c0:1d:41:be:90:6f:19:08:34:87:34:18:83:a7:cf:0c:45:cc:
         cf:8d:0d:8d:26:88:8a:29:1b:a8:10:0f:33:c8:e5:ae:c1:77:
         ba:65:42:60:84:68:0b:00:e8:93:24:06:fa:1b:6f:6f:58:a5:
         2a:cb:3a:33:70:14:0a:32:c0:9b:09:6c:50:a2:fb:03:c4:69:
         56:05:ea:62:65:34:59:51:17:16:fa:fe:d6:ff:6e:8c:53:98:
         0f:f1:cf:48:fb:cc:1e:f1:be:4a:a4:5e:14:a5:73:a7:58:03:
         8a:f6:ef:aa:5d:72:37:1f:31:45:28:0f:7a:9b:53:27:ed:a0:
         45:af:27:0d:b9:e4:e5:3a:7d:94:26:49:d9:c5:f9:59:4e:14:
         ae:75:f5:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdLyA/FvtTzxgQbLzM2/KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmM2JmNTExNzc0YjZlMWQ3MDZiYjI3MjdiM2QzMTI1Nzc1
YTkxMmYwHhcNMjUwNDEzMTQwMTQxWhcNMjUwNDE0MTQwMTQxWjAzMTEwLwYDVQQD
EyhlZGFjMTFkZmYxMjk5NjhlOTYzMDFkNWIzMzU5YTA2YmY4M2I5NjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7hzcQzjmS0ZirY6gPCvOY2wneeh
8HabwgmG2CPx7+qBMwC4A/NygrlJg5B62IxUfKW56SjumDYGfj0xYm6eqdJWRKtE
oQ+UkvkpiDyPiwd6Uwiy0Zpap5/Pjxa+6n8wFGTLFfDdRnyUpYj9cOszPLm+LSkV
jRwE2FAC5/Vsfb/Ju+xnAxeOIrSMFsjpQsW4anNb3BPo3gdim/rMWTcXGfV8HSo0
ZhLvt1E/fO4aWsxeXXo758mh7+StZTcMw7qAdrZ0KzRw23YjKYnp3/lAKerSh/A1
yIsC1gWhiebyDMzHuPTR9srwDge0ztOtJJxiko7w7OSKQkcbduOcvvlAWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2sEd/xKZaOljAdWzNZoGv4O5ZZMB8GA1UdIwQY
MBaAFD879RF3S24dcGuycns9MSV3WpEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHp2MUVYZExiaDF3YTdKeWV6MHhKWGRha1M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9mNTU3NTctNTk2NS00MjcwLWJlYWIt
YTBkNmRiZmFjNmViLzEvUHp2MUVYZExiaDF3YTdKeWV6MHhKWGRha1M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9mNTU3NTctNTk2NS00MjcwLWJlYWItYTBkNmRiZmFjNmVi
LzEvUHp2MUVYZExiaDF3YTdKeWV6MHhKWGRha1M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAox0VJXsQ
7mSMr/fWvMTMV0gw48syKJvompcx/9SwiUQR0FZ+eH0it5flyy0mGHN7UhSkYaJH
UC1HQaC5LO1S9o3sc7frUO16GAQxA9DBMT/2OGbYkYM6d5ew3QGwdC1lBYfOZm84
/qJE/ctKwB1BvpBvGQg0hzQYg6fPDEXMz40NjSaIiikbqBAPM8jlrsF3umVCYIRo
CwDokyQG+htvb1ilKss6M3AUCjLAmwlsUKL7A8RpVgXqYmU0WVEXFvr+1v9ujFOY
D/HPSPvMHvG+SqReFKVzp1gDivbvql1yNx8xRSgPeptTJ+2gRa8nDbnk5Tp9lCZJ
2cX5WU4UrnX1/A==
-----END CERTIFICATE-----