Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
File:                     PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft (raw, json)
Hash identifier:          BwPSTyQXdtfJL3w7cscQ7YWoDcVLPLc+K6jRg5TbwVw=
Subject key identifier:   79:96:1A:83:0F:A8:BB:42:AA:8B:13:86:8F:3D:08:45:11:66:67:AA
Authority key identifier: 3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
Certificate issuer:       /CN=3cc94ff479778651a605121f1ffe678196328f35
Certificate serial:       01962FAB74A87F8917B97A920A3D161472D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:27 +0000
Files and hashes:         1: CahBkkjIRD5RSAyC_TG87QI2fzc.roa (hash: xwWB2SdIUKCzemaOm29fIJHDchBB//Ii3x59COqFn54=)
                          2: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl (hash: +i94t2dlSRFL/OUJQ397T8EzSWHtWDZEaZjuAkX0EtE=)
                          3: j4vYQ759MLoLj0cN0zuQjHrzqiw.roa (hash: uApwJtUDHaWf6V3ibkhcekhPd8rOwJMJCw2CtVWuA6s=)
                          4: mXcskRJTzyB3nxmoygHfU8qKFgw.roa (hash: uQEoqefAcfOcPTcbOqYeFxWZJNwhk/YLJx7Ey5o+17w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:74:a8:7f:89:17:b9:7a:92:0a:3d:16:14:72:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cc94ff479778651a605121f1ffe678196328f35
        Validity
            Not Before: Apr 13 15:01:27 2025 GMT
            Not After : Apr 14 15:01:27 2025 GMT
        Subject: CN=79961a830fa8bb42aa8b13868f3d0845116667aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:79:c3:64:96:5d:cb:af:30:72:ff:53:62:88:
                    0e:c0:92:23:ee:d0:63:4c:33:02:6f:45:75:58:c8:
                    d6:bc:c7:54:0a:50:c9:76:cb:3c:a6:3b:5d:9a:a7:
                    b9:85:4d:b2:d8:ea:9d:69:6a:96:10:aa:34:bf:56:
                    5b:dd:44:86:2e:2d:67:49:43:e6:5b:11:ee:af:a4:
                    93:08:af:90:bd:93:5b:cf:5e:dd:c5:40:8f:ad:7d:
                    8f:08:3c:2e:01:b3:06:d5:f8:b1:97:d7:bd:60:ca:
                    5c:0c:c7:ff:15:6e:2f:f4:30:df:72:d2:eb:c3:ef:
                    fa:46:d3:39:ac:67:b6:73:a1:e2:67:f9:c8:56:a9:
                    da:49:0d:85:08:7d:2e:eb:c3:ea:56:e3:4c:fe:de:
                    24:2f:e9:81:fb:a0:18:29:b2:db:7f:2f:24:4e:92:
                    46:af:60:6f:c8:c1:0f:57:c7:11:d6:13:3e:74:60:
                    76:28:18:52:aa:55:f8:49:c1:9d:d3:5b:e8:2e:e0:
                    42:a7:0b:5e:3d:6a:d1:4d:b5:df:0f:1f:5a:97:cc:
                    67:29:0e:f2:81:ce:5a:6f:8c:c6:3e:c6:31:4d:c0:
                    6c:d8:04:cc:d5:4e:e8:18:38:b6:75:06:d1:e5:c1:
                    01:6a:c6:b9:59:f3:c0:37:29:98:f2:5b:57:52:83:
                    53:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:96:1A:83:0F:A8:BB:42:AA:8B:13:86:8F:3D:08:45:11:66:67:AA
            X509v3 Authority Key Identifier:
                keyid:3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:3e:3f:0c:d4:6a:6f:28:a2:85:15:80:69:3b:e7:cd:02:79:
         94:2c:97:bc:7b:38:d9:55:74:93:2f:a5:7b:38:06:49:4d:f2:
         8a:7f:4d:a6:01:e7:14:a6:34:48:ed:5b:cc:5e:76:a9:ab:7e:
         62:45:18:49:f2:ce:e9:19:3b:4d:66:e6:b1:54:2d:41:ad:1c:
         1c:6a:db:01:06:c0:42:b5:43:83:31:c9:30:c1:1e:6a:f8:17:
         88:1e:42:37:53:0f:f6:30:0f:0b:34:72:62:36:98:19:04:c5:
         ee:ec:43:0d:19:d5:50:be:68:05:dd:45:ed:d3:c5:42:6b:a3:
         60:cc:9f:00:bd:aa:bc:be:93:85:87:57:92:cb:9c:b3:37:e4:
         97:d2:49:b3:50:ec:6a:b0:88:5c:90:8b:1d:ef:08:55:06:a5:
         b7:07:49:3e:e2:fa:48:9d:7a:21:87:a9:d0:09:c3:a7:8e:90:
         95:fc:e2:5b:ae:e8:be:45:33:96:1e:f7:04:d3:00:f1:b0:98:
         1f:a2:7d:dc:44:c9:5d:c5:1c:b1:5a:a1:62:dd:8a:9b:cb:77:
         ae:4e:cc:1d:82:76:0d:5d:8a:23:51:cc:9c:17:e8:55:9a:d5:
         66:1f:ee:12:ad:f0:56:ac:64:c3:13:6c:c9:53:bf:42:4d:0d:
         fb:4a:75:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq3Sof4kXuXqSCj0WFHLQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjYzk0ZmY0Nzk3Nzg2NTFhNjA1MTIxZjFmZmU2NzgxOTYz
MjhmMzUwHhcNMjUwNDEzMTUwMTI3WhcNMjUwNDE0MTUwMTI3WjAzMTEwLwYDVQQD
Eyg3OTk2MWE4MzBmYThiYjQyYWE4YjEzODY4ZjNkMDg0NTExNjY2N2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3nDZJZdy68wcv9TYogOwJIj7tBj
TDMCb0V1WMjWvMdUClDJdss8pjtdmqe5hU2y2OqdaWqWEKo0v1Zb3USGLi1nSUPm
WxHur6STCK+QvZNbz17dxUCPrX2PCDwuAbMG1fixl9e9YMpcDMf/FW4v9DDfctLr
w+/6RtM5rGe2c6HiZ/nIVqnaSQ2FCH0u68PqVuNM/t4kL+mB+6AYKbLbfy8kTpJG
r2BvyMEPV8cR1hM+dGB2KBhSqlX4ScGd01voLuBCpwtePWrRTbXfDx9al8xnKQ7y
gc5ab4zGPsYxTcBs2ATM1U7oGDi2dQbR5cEBasa5WfPANymY8ltXUoNTpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmWGoMPqLtCqosTho89CEURZmeqMB8GA1UdIwQY
MBaAFDzJT/R5d4ZRpgUSHx/+Z4GWMo81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUE1sUDlIbDNobEdtQlJJZkhfNW5nWll5anpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xZTYzYjYtMzk1Ni00ZDEyLWIxOWYt
NWJlZjY0MjBhMDI4LzEvUE1sUDlIbDNobEdtQlJJZkhfNW5nWll5anpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8xZTYzYjYtMzk1Ni00ZDEyLWIxOWYtNWJlZjY0MjBhMDI4
LzEvUE1sUDlIbDNobEdtQlJJZkhfNW5nWll5anpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaT4/DNRq
byiihRWAaTvnzQJ5lCyXvHs42VV0ky+lezgGSU3yin9NpgHnFKY0SO1bzF52qat+
YkUYSfLO6Rk7TWbmsVQtQa0cHGrbAQbAQrVDgzHJMMEeavgXiB5CN1MP9jAPCzRy
YjaYGQTF7uxDDRnVUL5oBd1F7dPFQmujYMyfAL2qvL6ThYdXksucszfkl9JJs1Ds
arCIXJCLHe8IVQaltwdJPuL6SJ16IYep0AnDp46QlfziW67ovkUzlh73BNMA8bCY
H6J93ETJXcUcsVqhYt2Km8t3rk7MHYJ2DV2KI1HMnBfoVZrVZh/uEq3wVqxkwxNs
yVO/Qk0N+0p11g==
-----END CERTIFICATE-----