Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
File:                     PYAS-hSs56DDvS6C4KKdmkS_4pA.mft (raw, json)
Hash identifier:          23e+mKVQRxyYEsIMN1YbuzS7kDJriqeeo1gSTz8uFCo=
Subject key identifier:   13:E4:B7:9A:4B:76:4B:9B:2C:4E:ED:67:EB:00:0F:0D:2F:8F:F1:CD
Authority key identifier: 3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90
Certificate issuer:       /CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290
Certificate serial:       01962E99A4B738493413954FF91EAADC0E5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 10:02:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:23 +0000
Files and hashes:         1: PYAS-hSs56DDvS6C4KKdmkS_4pA.crl (hash: B7N5mMAZ0GFAcGZnDhqBYnlb5eDo72Cv7DMX2G0WvSs=)
                          2: V63W0aVBLx51NnINgD_iQeLMOyw.roa (hash: FLA4TSQ4UunV1xOhrn0rSmh7Oq3MF9Le3VUmM3hfUww=)
                          3: yE0AwLBzhrC3USxmIPbSNA6JiN0.roa (hash: iP655Z0vSJV+iwH+Vd2nT6rPYgBPSGVwVe0RcmkGPWU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:a4:b7:38:49:34:13:95:4f:f9:1e:aa:dc:0e:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290
        Validity
            Not Before: Apr 13 10:02:23 2025 GMT
            Not After : Apr 14 10:02:23 2025 GMT
        Subject: CN=13e4b79a4b764b9b2c4eed67eb000f0d2f8ff1cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8d:c7:25:e6:af:bd:2a:33:13:c1:9b:20:53:
                    ef:c5:79:21:9b:84:b6:1f:6a:3d:11:8c:cf:62:5b:
                    a7:9f:59:a5:4a:71:9c:c0:55:73:65:ac:04:88:16:
                    24:6f:9a:5b:dc:6c:52:22:c3:d5:34:7a:bd:45:3a:
                    b5:8d:5e:74:ef:b6:e3:87:6a:a0:13:54:94:9e:5a:
                    b8:6b:87:cc:c7:95:e1:fa:08:20:9f:08:5c:a8:d7:
                    3b:7f:3e:8f:86:4b:a8:b1:c7:f9:e2:70:e2:35:d6:
                    a6:1e:ed:f6:4a:fb:79:bc:c3:b8:8e:83:e4:0e:01:
                    fe:e7:7b:5d:5a:e3:0e:4d:48:a9:13:98:00:80:98:
                    9f:ea:2c:22:b8:8b:30:3c:51:c6:08:92:ad:b5:a8:
                    dc:bb:7b:e7:42:ec:05:ac:f1:15:ae:c2:09:ef:6c:
                    58:a3:6d:ce:82:43:80:4d:85:ed:83:b0:69:2b:0d:
                    6f:64:1a:0f:d8:e3:54:a6:86:32:74:e2:2b:71:d9:
                    07:39:f8:6d:1a:a0:3f:ec:f1:e7:84:cc:2e:07:56:
                    cf:08:e6:69:eb:bc:71:3e:e2:f2:7c:95:c6:22:aa:
                    04:96:e2:38:a7:29:a7:8b:6b:fc:d5:02:90:4e:10:
                    7f:e0:1c:02:df:0c:8c:b1:13:73:10:73:64:03:fa:
                    a3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E4:B7:9A:4B:76:4B:9B:2C:4E:ED:67:EB:00:0F:0D:2F:8F:F1:CD
            X509v3 Authority Key Identifier:
                keyid:3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ae:36:76:23:64:ab:d5:21:78:52:af:b3:ec:c5:2e:fa:5b:
         51:f3:ba:1a:2a:c9:36:32:2a:dc:4b:55:b1:17:ac:f5:f2:95:
         65:a1:8a:7a:52:8d:4b:30:09:bb:35:b5:4c:a9:de:85:4b:74:
         2c:f2:f1:ac:0b:87:e6:31:7b:00:8e:bd:65:98:b7:de:36:e3:
         80:f7:58:b6:ab:02:22:6d:d5:aa:1f:95:8a:64:a0:57:51:45:
         18:45:d8:8b:92:3d:41:6c:ce:5d:32:e8:39:32:de:9e:de:35:
         8e:e3:7a:17:f1:74:5d:b0:d9:c5:82:07:25:9e:56:84:0d:fd:
         13:31:80:03:7f:56:ac:e1:a7:0b:f4:b2:7d:ee:38:43:fe:5b:
         e0:d9:a5:94:fd:3b:ca:b3:38:b2:46:15:93:d9:96:64:7c:2d:
         e2:75:cd:48:df:8f:a6:3c:42:b1:b8:38:18:4b:9c:a9:80:5c:
         ca:29:13:c1:f9:2f:12:c9:dd:68:f0:0a:1b:2a:d8:02:e9:b0:
         e7:6a:80:60:35:5b:82:c5:7c:fc:a5:4a:29:03:e1:bd:5d:39:
         65:f5:81:2a:d9:12:72:2d:ee:d0:a6:1e:38:c3:54:e2:7a:68:
         e5:b9:cf:d3:da:8c:59:8f:ab:c3:cb:27:75:b5:e8:8b:85:e9:
         b1:40:0b:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumaS3OEk0E5VP+R6q3A5fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkODAxMmZhMTRhY2U3YTBjM2JkMmU4MmUwYTI5ZDlhNDRi
ZmUyOTAwHhcNMjUwNDEzMTAwMjIzWhcNMjUwNDE0MTAwMjIzWjAzMTEwLwYDVQQD
EygxM2U0Yjc5YTRiNzY0YjliMmM0ZWVkNjdlYjAwMGYwZDJmOGZmMWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs43HJeavvSozE8GbIFPvxXkhm4S2
H2o9EYzPYlunn1mlSnGcwFVzZawEiBYkb5pb3GxSIsPVNHq9RTq1jV5077bjh2qg
E1SUnlq4a4fMx5Xh+gggnwhcqNc7fz6Phkuoscf54nDiNdamHu32Svt5vMO4joPk
DgH+53tdWuMOTUipE5gAgJif6iwiuIswPFHGCJKttajcu3vnQuwFrPEVrsIJ72xY
o23OgkOATYXtg7BpKw1vZBoP2ONUpoYydOIrcdkHOfhtGqA/7PHnhMwuB1bPCOZp
67xxPuLyfJXGIqoEluI4pymni2v81QKQThB/4BwC3wyMsRNzEHNkA/qjRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBPkt5pLdkubLE7tZ+sADw0vj/HNMB8GA1UdIwQY
MBaAFD2AEvoUrOegw70uguCinZpEv+KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFlBUy1oU3M1NkREdlM2QzRLS2Rta1NfNHBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9lZjVlZDEtYmRlZS00NjM5LTkyNDgt
NzdmODRjNTYyYTVmLzEvUFlBUy1oU3M1NkREdlM2QzRLS2Rta1NfNHBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9lZjVlZDEtYmRlZS00NjM5LTkyNDgtNzdmODRjNTYyYTVm
LzEvUFlBUy1oU3M1NkREdlM2QzRLS2Rta1NfNHBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKa42diNk
q9UheFKvs+zFLvpbUfO6GirJNjIq3EtVsRes9fKVZaGKelKNSzAJuzW1TKnehUt0
LPLxrAuH5jF7AI69ZZi33jbjgPdYtqsCIm3Vqh+VimSgV1FFGEXYi5I9QWzOXTLo
OTLent41juN6F/F0XbDZxYIHJZ5WhA39EzGAA39WrOGnC/Syfe44Q/5b4NmllP07
yrM4skYVk9mWZHwt4nXNSN+PpjxCsbg4GEucqYBcyikTwfkvEsndaPAKGyrYAumw
52qAYDVbgsV8/KVKKQPhvV05ZfWBKtkSci3u0KYeOMNU4npo5bnP09qMWY+rw8sn
dbXoi4XpsUAL/w==
-----END CERTIFICATE-----