Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft
File:                     PUx4cBk93824kLZkfMi1bBGW_wg.mft (raw, json)
Hash identifier:          hEOsCiK8HU/X4vdYOnomGWcxMB1Le06DYZKERlnn54Q=
Subject key identifier:   96:FF:83:CC:AA:9A:AD:C3:9A:EB:65:09:6C:91:40:B1:85:9A:A3:50
Authority key identifier: 3D:4C:78:70:19:3D:DF:CD:B8:90:B6:64:7C:C8:B5:6C:11:96:FF:08
Certificate issuer:       /CN=3d4c7870193ddfcdb890b6647cc8b56c1196ff08
Certificate serial:       01962E620D3F500B334482E09E304E26D637
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PUx4cBk93824kLZkfMi1bBGW_wg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft
Manifest number:          103B
Signing time:             Sun 13 Apr 2025 09:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:39 +0000
Files and hashes:         1: 35NCpv0Oz6uQPI44W6WG3M5yYs4.roa (hash: JBTWGmE2iSKylKwI1WUPUhWSA2P7T3aiR9SueNbm1BQ=)
                          2: PUx4cBk93824kLZkfMi1bBGW_wg.crl (hash: /pgiV/JuzxfFtjkYMrZPKzMeDCNqb8i+0H0t3Utf2dI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:0d:3f:50:0b:33:44:82:e0:9e:30:4e:26:d6:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d4c7870193ddfcdb890b6647cc8b56c1196ff08
        Validity
            Not Before: Apr 13 09:01:39 2025 GMT
            Not After : Apr 14 09:01:39 2025 GMT
        Subject: CN=96ff83ccaa9aadc39aeb65096c9140b1859aa350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fe:46:20:ec:a0:90:21:51:b2:e3:6d:16:e1:
                    98:70:1c:4f:1d:03:3c:e4:41:cd:e1:f8:ae:a5:05:
                    00:ea:5e:fe:53:aa:00:5a:10:8f:d0:88:f4:2a:b7:
                    98:57:f0:d0:ef:a0:fb:e3:08:50:a8:25:13:7a:93:
                    7f:a1:d4:42:c2:18:3b:88:1f:d0:3a:b7:db:f7:bf:
                    66:aa:51:10:13:83:8a:a8:dc:b0:5a:91:00:5f:5e:
                    86:3f:64:74:29:d8:87:c2:f5:4d:d4:da:cc:f1:cd:
                    9b:11:84:8e:58:a4:f0:70:ee:f7:90:cb:39:66:90:
                    2a:92:91:e1:40:34:6d:62:9b:86:e3:b6:99:14:02:
                    e9:aa:83:f3:c1:08:40:72:de:10:7b:e8:67:b8:19:
                    f5:37:6f:9f:eb:8b:ef:a4:24:59:27:f2:d5:26:d4:
                    6a:52:4f:7a:11:ad:56:8f:98:e0:dc:44:ae:e2:11:
                    bd:e5:ff:eb:74:d2:ff:f4:13:40:8c:e4:5a:24:1a:
                    66:df:c9:73:65:9f:3c:c7:e1:7e:31:c5:32:68:57:
                    ad:b8:a0:21:a0:b5:a5:9a:45:96:17:c3:02:38:09:
                    3e:08:39:da:97:ff:c6:ed:b4:05:bb:b3:5a:7e:83:
                    1b:d7:0f:de:c8:e3:c4:45:dc:a5:8d:a1:55:9f:80:
                    82:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:FF:83:CC:AA:9A:AD:C3:9A:EB:65:09:6C:91:40:B1:85:9A:A3:50
            X509v3 Authority Key Identifier:
                keyid:3D:4C:78:70:19:3D:DF:CD:B8:90:B6:64:7C:C8:B5:6C:11:96:FF:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUx4cBk93824kLZkfMi1bBGW_wg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/eddabc-5135-4e4b-b411-1eba6ff77eac/1/PUx4cBk93824kLZkfMi1bBGW_wg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:a6:b0:93:cc:c5:2c:b7:43:d5:91:a7:b7:46:44:ba:05:e3:
         9e:49:80:a2:88:0e:f6:cb:73:88:e0:ce:c1:31:07:f1:49:cb:
         1d:1b:dc:87:0b:81:88:66:ed:6a:16:7a:eb:78:a9:4f:0b:17:
         f2:8c:aa:55:f2:5b:b9:e3:23:71:d3:1c:14:68:e1:8b:4f:d1:
         f5:ae:6d:36:34:64:59:b4:0d:ec:bc:6c:d3:4f:bf:b8:94:5f:
         78:3b:c6:85:41:72:ee:d2:2b:40:b1:1d:08:8b:38:d7:91:0a:
         89:78:db:ee:95:9f:a6:99:24:4a:fd:de:92:fc:cb:19:36:f8:
         e3:16:da:02:e4:23:00:cd:2e:8e:7b:b8:fb:48:c8:e3:fd:39:
         52:22:71:bb:65:d0:7e:b0:3a:d8:a0:4c:3c:1b:79:d5:87:7e:
         f4:0f:69:f1:ee:49:a3:28:a8:74:d7:7d:dd:a5:d1:67:63:2b:
         31:52:78:d1:93:c7:72:cc:62:0a:38:56:49:7c:8b:b0:ac:df:
         4e:97:03:05:d9:51:c1:ce:13:de:1b:0f:36:87:2a:a7:00:55:
         32:e4:a7:41:79:7d:2e:6f:fd:d1:f5:82:01:23:12:a2:03:54:
         84:15:79:e4:6c:5d:1b:1c:fe:43:51:b2:ab:0f:06:46:10:2b:
         53:81:c6:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYg0/UAszRILgnjBOJtY3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkNGM3ODcwMTkzZGRmY2RiODkwYjY2NDdjYzhiNTZjMTE5
NmZmMDgwHhcNMjUwNDEzMDkwMTM5WhcNMjUwNDE0MDkwMTM5WjAzMTEwLwYDVQQD
Eyg5NmZmODNjY2FhOWFhZGMzOWFlYjY1MDk2YzkxNDBiMTg1OWFhMzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf5GIOygkCFRsuNtFuGYcBxPHQM8
5EHN4fiupQUA6l7+U6oAWhCP0Ij0KreYV/DQ76D74whQqCUTepN/odRCwhg7iB/Q
Orfb979mqlEQE4OKqNywWpEAX16GP2R0KdiHwvVN1NrM8c2bEYSOWKTwcO73kMs5
ZpAqkpHhQDRtYpuG47aZFALpqoPzwQhAct4Qe+hnuBn1N2+f64vvpCRZJ/LVJtRq
Uk96Ea1Wj5jg3ESu4hG95f/rdNL/9BNAjORaJBpm38lzZZ88x+F+McUyaFetuKAh
oLWlmkWWF8MCOAk+CDnal//G7bQFu7NafoMb1w/eyOPERdyljaFVn4CCewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJb/g8yqmq3DmutlCWyRQLGFmqNQMB8GA1UdIwQY
MBaAFD1MeHAZPd/NuJC2ZHzItWwRlv8IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFV4NGNCazkzODI0a0xaa2ZNaTFiQkdXX3dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9lZGRhYmMtNTEzNS00ZTRiLWI0MTEt
MWViYTZmZjc3ZWFjLzEvUFV4NGNCazkzODI0a0xaa2ZNaTFiQkdXX3dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9lZGRhYmMtNTEzNS00ZTRiLWI0MTEtMWViYTZmZjc3ZWFj
LzEvUFV4NGNCazkzODI0a0xaa2ZNaTFiQkdXX3dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6awk8zF
LLdD1ZGnt0ZEugXjnkmAoogO9stziODOwTEH8UnLHRvchwuBiGbtahZ663ipTwsX
8oyqVfJbueMjcdMcFGjhi0/R9a5tNjRkWbQN7Lxs00+/uJRfeDvGhUFy7tIrQLEd
CIs415EKiXjb7pWfppkkSv3ekvzLGTb44xbaAuQjAM0ujnu4+0jI4/05UiJxu2XQ
frA62KBMPBt51Yd+9A9p8e5JoyiodNd93aXRZ2MrMVJ40ZPHcsxiCjhWSXyLsKzf
TpcDBdlRwc4T3hsPNocqpwBVMuSnQXl9Lm/90fWCASMSogNUhBV55GxdGxz+Q1Gy
qw8GRhArU4HGvw==
-----END CERTIFICATE-----