Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
File:                     PnFWq-5roji5BzFd-cVShlrc2ug.mft (raw, json)
Hash identifier:          /r9GPQpdNt+h+pegP8zz5VRKPUwS7AJhpXK4XGkePe0=
Subject key identifier:   7E:B7:64:9B:B5:2E:F5:A7:20:CF:CA:0A:20:4C:96:95:0D:0D:0B:09
Authority key identifier: 3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8
Certificate issuer:       /CN=3e7156abee6ba238b907315df9c552865adcdae8
Certificate serial:       01962F74C887A31537D4E63BDED3F6E2E3D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft
Manifest number:          075B
Signing time:             Sun 13 Apr 2025 14:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:44 +0000
Files and hashes:         1: PnFWq-5roji5BzFd-cVShlrc2ug.crl (hash: 1b6GMJwYDCB2UWgNTIuHZVezJLxEikdgz7A6ymIpT1U=)
                          2: vDazkPOiPtoCYetZfRX-qpQ69j8.roa (hash: B0GK+5WaWwtXf0DhRaPxfP/Ak+Di2Wr89zC0Jym0UK4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c8:87:a3:15:37:d4:e6:3b:de:d3:f6:e2:e3:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e7156abee6ba238b907315df9c552865adcdae8
        Validity
            Not Before: Apr 13 14:01:44 2025 GMT
            Not After : Apr 14 14:01:44 2025 GMT
        Subject: CN=7eb7649bb52ef5a720cfca0a204c96950d0d0b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fa:e9:c7:e3:56:1c:1f:d0:01:46:f3:0b:dd:
                    c9:cd:12:66:c8:09:13:7d:87:c5:fe:8a:6a:4f:b9:
                    8e:8c:57:17:a7:bd:db:d9:91:93:c4:41:8b:26:0d:
                    1b:5e:ef:78:46:27:ac:5c:5b:aa:c4:5f:2b:7f:47:
                    c4:f7:32:58:2c:71:bc:2a:fe:4c:db:c9:a8:0d:3f:
                    6f:2c:b6:24:0a:9b:0d:fa:bc:68:ce:fe:e0:5b:4f:
                    a1:71:59:8c:ba:8f:1b:3d:f6:1a:20:f9:b7:91:08:
                    43:4d:b4:02:7d:00:6d:aa:4e:93:f8:18:2c:86:e3:
                    18:60:17:07:99:5e:00:0e:c6:b1:33:65:eb:74:85:
                    19:c9:c9:d2:db:95:be:70:7b:4d:cf:6c:f5:3f:16:
                    0f:52:8c:4b:2a:60:6e:7e:bf:a1:a1:d3:70:17:27:
                    c4:93:82:8e:7b:ce:23:fb:4c:c4:c1:3d:87:69:3c:
                    02:65:f3:b0:37:96:ec:e0:08:11:6b:c2:45:be:68:
                    9f:a9:9c:15:e6:65:dd:4a:a7:67:e6:af:9f:f8:7f:
                    17:08:b7:56:8f:a6:8d:e4:95:4d:c4:5a:55:8d:84:
                    9b:3b:02:78:21:e5:19:c2:55:28:12:97:be:6f:c3:
                    45:ff:52:27:a8:9c:16:c2:c5:b9:65:e9:2f:a8:e3:
                    10:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B7:64:9B:B5:2E:F5:A7:20:CF:CA:0A:20:4C:96:95:0D:0D:0B:09
            X509v3 Authority Key Identifier:
                keyid:3E:71:56:AB:EE:6B:A2:38:B9:07:31:5D:F9:C5:52:86:5A:DC:DA:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnFWq-5roji5BzFd-cVShlrc2ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a4a0f7-7dbd-4b03-b7f9-58f2d44ff281/1/PnFWq-5roji5BzFd-cVShlrc2ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:cf:da:dd:e4:0a:45:94:f0:1f:e9:50:c7:18:04:ba:29:c1:
         79:72:e2:2a:8c:8d:0d:6e:03:fa:df:98:d4:14:af:1f:6e:ed:
         78:de:15:88:24:1f:02:96:b7:43:3a:6c:bc:05:68:d0:3a:88:
         1f:2b:14:ef:00:aa:d7:f6:f7:9c:f5:1e:c2:5e:bf:d9:cb:4f:
         2b:fd:8d:f1:cc:2e:62:c5:74:4a:87:80:26:c3:04:5c:27:0d:
         ec:86:5e:67:dc:5f:c3:a0:24:2a:9c:7c:ed:52:d4:17:ad:06:
         c8:ee:49:a9:ae:6d:49:94:4f:e0:ea:0c:ec:5c:80:c2:80:0a:
         f4:3f:70:dd:6f:73:ee:f9:0b:56:9f:97:ec:c9:fc:b2:96:da:
         7d:8b:d8:d4:8f:ab:35:78:7c:3c:e9:9b:e3:84:80:c9:29:7d:
         29:43:db:ca:f9:e2:19:93:74:28:fa:b8:40:8f:49:a1:2f:80:
         0d:bd:b5:fe:d3:04:2e:79:42:9c:ba:ee:a9:5b:3e:31:d8:52:
         01:58:c2:40:1d:81:7b:5c:36:be:85:b3:06:5e:31:67:89:c1:
         f0:c5:1a:30:aa:02:68:1f:74:63:b1:1c:5f:44:3f:62:6a:84:
         30:31:7a:d1:78:57:87:ce:1c:f1:4c:01:af:b8:19:88:14:a8:
         57:8d:45:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdMiHoxU31OY73tP24uPUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNzE1NmFiZWU2YmEyMzhiOTA3MzE1ZGY5YzU1Mjg2NWFk
Y2RhZTgwHhcNMjUwNDEzMTQwMTQ0WhcNMjUwNDE0MTQwMTQ0WjAzMTEwLwYDVQQD
Eyg3ZWI3NjQ5YmI1MmVmNWE3MjBjZmNhMGEyMDRjOTY5NTBkMGQwYjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vrpx+NWHB/QAUbzC93JzRJmyAkT
fYfF/opqT7mOjFcXp73b2ZGTxEGLJg0bXu94RiesXFuqxF8rf0fE9zJYLHG8Kv5M
28moDT9vLLYkCpsN+rxozv7gW0+hcVmMuo8bPfYaIPm3kQhDTbQCfQBtqk6T+Bgs
huMYYBcHmV4ADsaxM2XrdIUZycnS25W+cHtNz2z1PxYPUoxLKmBufr+hodNwFyfE
k4KOe84j+0zEwT2HaTwCZfOwN5bs4AgRa8JFvmifqZwV5mXdSqdn5q+f+H8XCLdW
j6aN5JVNxFpVjYSbOwJ4IeUZwlUoEpe+b8NF/1InqJwWwsW5ZekvqOMQGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH63ZJu1LvWnIM/KCiBMlpUNDQsJMB8GA1UdIwQY
MBaAFD5xVqvua6I4uQcxXfnFUoZa3NroMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG5GV3EtNXJvamk1QnpGZC1jVlNobHJjMnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9hNGEwZjctN2RiZC00YjAzLWI3Zjkt
NThmMmQ0NGZmMjgxLzEvUG5GV3EtNXJvamk1QnpGZC1jVlNobHJjMnVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9hNGEwZjctN2RiZC00YjAzLWI3ZjktNThmMmQ0NGZmMjgx
LzEvUG5GV3EtNXJvamk1QnpGZC1jVlNobHJjMnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASc/a3eQK
RZTwH+lQxxgEuinBeXLiKoyNDW4D+t+Y1BSvH27teN4ViCQfApa3QzpsvAVo0DqI
HysU7wCq1/b3nPUewl6/2ctPK/2N8cwuYsV0SoeAJsMEXCcN7IZeZ9xfw6AkKpx8
7VLUF60GyO5Jqa5tSZRP4OoM7FyAwoAK9D9w3W9z7vkLVp+X7Mn8spbafYvY1I+r
NXh8POmb44SAySl9KUPbyvniGZN0KPq4QI9JoS+ADb21/tMELnlCnLruqVs+MdhS
AVjCQB2Be1w2voWzBl4xZ4nB8MUaMKoCaB90Y7EcX0Q/YmqEMDF60XhXh84c8UwB
r7gZiBSoV41FpQ==
-----END CERTIFICATE-----