Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft
File:                     _PLPcoTXoDRugvN4rYMPV8OWG20.mft (raw, json)
Hash identifier:          RNnFw1LNiVykE4JD+s8xLPvwvi4U+bqMVLMHMJwpQYc=
Subject key identifier:   D8:20:E9:89:AA:C2:F9:8D:57:0F:9E:D7:E8:7C:20:B0:E8:86:A7:86
Authority key identifier: FC:F2:CF:72:84:D7:A0:34:6E:82:F3:78:AD:83:0F:57:C3:96:1B:6D
Certificate issuer:       /CN=fcf2cf7284d7a0346e82f378ad830f57c3961b6d
Certificate serial:       01962E618EDD59F8445D1AA292BE3955C886
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft
Manifest number:          07F6
Signing time:             Sun 13 Apr 2025 09:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:07 +0000
Files and hashes:         1: _PLPcoTXoDRugvN4rYMPV8OWG20.crl (hash: hpUDAieI0zezV+2YGf8hA8ku1/U1Lz0E0BlfWLFtE8M=)
                          2: c1o3ffEqrdrU8ebbTBwhLFlhPXg.roa (hash: fm+w7SzhvawtVdf496aqLGV6dF6J/LTyEnyM1VppA6o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8e:dd:59:f8:44:5d:1a:a2:92:be:39:55:c8:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcf2cf7284d7a0346e82f378ad830f57c3961b6d
        Validity
            Not Before: Apr 13 09:01:07 2025 GMT
            Not After : Apr 14 09:01:07 2025 GMT
        Subject: CN=d820e989aac2f98d570f9ed7e87c20b0e886a786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:65:60:1e:4b:bb:5d:aa:66:0a:d0:a7:03:26:
                    18:dc:05:61:fc:7a:c8:ad:69:6f:8c:6e:af:af:22:
                    ca:f5:4a:ab:5a:a7:18:9f:83:38:aa:5a:04:47:98:
                    ed:25:07:2f:bc:2b:a8:6c:9f:69:2e:da:e7:fc:e2:
                    f3:57:94:9c:af:ef:b8:69:ba:5a:2f:42:b3:45:fa:
                    b1:b8:17:10:0a:2f:e9:b1:63:dc:fc:73:06:84:65:
                    9d:22:d7:81:69:43:e1:93:f1:a9:11:55:95:32:c4:
                    10:fe:5d:8b:52:03:97:89:54:ba:fe:31:52:2f:51:
                    e7:b7:29:b7:bc:28:23:dd:ad:5f:59:b6:e5:9e:2e:
                    87:fb:c8:5d:c0:49:17:e0:49:b8:0c:9a:28:15:54:
                    4a:cb:31:10:0c:6e:89:2f:62:57:a5:c5:e6:08:60:
                    9d:d7:38:08:f1:24:64:aa:51:a7:04:44:80:db:01:
                    7b:8b:04:52:78:ba:37:f5:44:5c:32:d3:9a:63:ee:
                    58:51:7e:c3:6d:70:05:97:5f:bd:e2:3c:80:9a:a5:
                    2b:0b:e8:0e:8b:fe:ca:6f:b4:7c:be:5c:bd:c2:85:
                    b9:ba:26:86:a5:e6:4e:8b:c0:ed:66:91:f5:76:ec:
                    49:3c:fa:18:e5:b9:e3:f4:de:a0:31:b3:8a:ae:34:
                    a2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:20:E9:89:AA:C2:F9:8D:57:0F:9E:D7:E8:7C:20:B0:E8:86:A7:86
            X509v3 Authority Key Identifier:
                keyid:FC:F2:CF:72:84:D7:A0:34:6E:82:F3:78:AD:83:0F:57:C3:96:1B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PLPcoTXoDRugvN4rYMPV8OWG20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/ddad9b-c9f1-431b-b093-b6835b732ad6/1/_PLPcoTXoDRugvN4rYMPV8OWG20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:d5:14:4f:01:15:fb:a1:fe:07:14:1a:42:35:23:aa:a4:fe:
         b2:55:25:2f:5c:3c:c0:e7:61:0b:a5:ca:e0:46:46:6f:9c:a3:
         bd:37:96:f9:58:63:c4:bd:39:4f:4d:cd:5e:cd:da:9e:c8:0d:
         93:3f:1e:5d:1e:00:2f:6f:ae:b7:63:fe:b9:5b:9e:7b:d3:6d:
         25:bd:a0:f5:9e:9c:7d:dc:17:d6:7e:7f:54:de:80:f7:39:7b:
         24:5d:07:55:ed:1a:14:ba:c6:99:33:b8:67:57:cc:39:64:f8:
         62:32:ac:09:30:f8:80:67:af:a1:ba:a2:3f:b4:10:6a:3b:09:
         e9:09:34:d6:14:ec:d2:4a:2e:ce:3d:57:cd:a9:00:b5:94:2f:
         df:18:bc:d2:3d:f8:48:3f:ee:2f:aa:e2:84:a0:18:43:4b:0b:
         1d:44:7d:e6:76:8b:9a:43:bd:70:df:d2:2a:56:72:3c:27:a9:
         c0:96:4e:23:8b:4f:ea:92:c9:92:23:23:d7:ed:84:23:19:60:
         1d:ce:f9:74:6c:bd:4c:01:99:db:9a:5f:f5:d8:ff:dd:3d:18:
         b8:0b:6c:86:f8:96:1b:a3:f3:7b:80:5e:63:91:6d:2a:73:5b:
         e9:39:4a:9e:e8:d0:24:82:8c:d6:87:ea:b3:70:df:95:e0:10:
         ef:24:87:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYY7dWfhEXRqikr45VciGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZjJjZjcyODRkN2EwMzQ2ZTgyZjM3OGFkODMwZjU3YzM5
NjFiNmQwHhcNMjUwNDEzMDkwMTA3WhcNMjUwNDE0MDkwMTA3WjAzMTEwLwYDVQQD
EyhkODIwZTk4OWFhYzJmOThkNTcwZjllZDdlODdjMjBiMGU4ODZhNzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWVgHku7XapmCtCnAyYY3AVh/HrI
rWlvjG6vryLK9UqrWqcYn4M4qloER5jtJQcvvCuobJ9pLtrn/OLzV5Scr++4abpa
L0KzRfqxuBcQCi/psWPc/HMGhGWdIteBaUPhk/GpEVWVMsQQ/l2LUgOXiVS6/jFS
L1Hntym3vCgj3a1fWbblni6H+8hdwEkX4Em4DJooFVRKyzEQDG6JL2JXpcXmCGCd
1zgI8SRkqlGnBESA2wF7iwRSeLo39URcMtOaY+5YUX7DbXAFl1+94jyAmqUrC+gO
i/7Kb7R8vly9woW5uiaGpeZOi8DtZpH1duxJPPoY5bnj9N6gMbOKrjSi0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgg6YmqwvmNVw+e1+h8ILDohqeGMB8GA1UdIwQY
MBaAFPzyz3KE16A0boLzeK2DD1fDlhttMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1BMUGNvVFhvRFJ1Z3ZONHJZTVBWOE9XRzIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9kZGFkOWItYzlmMS00MzFiLWIwOTMt
YjY4MzViNzMyYWQ2LzEvX1BMUGNvVFhvRFJ1Z3ZONHJZTVBWOE9XRzIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9kZGFkOWItYzlmMS00MzFiLWIwOTMtYjY4MzViNzMyYWQ2
LzEvX1BMUGNvVFhvRFJ1Z3ZONHJZTVBWOE9XRzIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjtUUTwEV
+6H+BxQaQjUjqqT+slUlL1w8wOdhC6XK4EZGb5yjvTeW+VhjxL05T03NXs3ansgN
kz8eXR4AL2+ut2P+uVuee9NtJb2g9Z6cfdwX1n5/VN6A9zl7JF0HVe0aFLrGmTO4
Z1fMOWT4YjKsCTD4gGevobqiP7QQajsJ6Qk01hTs0kouzj1XzakAtZQv3xi80j34
SD/uL6rihKAYQ0sLHUR95naLmkO9cN/SKlZyPCepwJZOI4tP6pLJkiMj1+2EIxlg
Hc75dGy9TAGZ25pf9dj/3T0YuAtshviWG6Pze4BeY5FtKnNb6TlKnujQJIKM1ofq
s3DfleAQ7ySHqw==
-----END CERTIFICATE-----