Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
File:                     CCswPLSec-LSpARYPV-Dd86wJUU.mft (raw, json)
Hash identifier:          soSP0aeqN39VPTJ88gh9UhygvPLUXL8BBhEEYE74Q/c=
Subject key identifier:   59:25:ED:7C:DB:2E:A0:16:C6:B7:7F:52:8B:E1:BC:6E:28:3E:9A:F1
Authority key identifier: 08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
Certificate issuer:       /CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Certificate serial:       01962E2AC5DEE4613672DA996C23268513DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
Manifest number:          12CD
Signing time:             Sun 13 Apr 2025 08:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:17 +0000
Files and hashes:         1: 2inYN_MIUD72H0bF-G-uxeD9N2g.roa (hash: w3/xjcroWv/hTB5uAogzmCV91fqWgoiwopuu9uS5xyA=)
                          2: CCswPLSec-LSpARYPV-Dd86wJUU.crl (hash: gG6H09DYlVdu8MYFqCLXxCoSqCd64imlP3BpKuo5TSc=)
                          3: ClcjDVwq5bxJkQpaatwkcE8Ccvk.roa (hash: iX9fNXWEgzfPs5uLIPgDHjdM43scoKq0NVj+XxIGDUs=)
                          4: ziAErXap3gE4oUQ_30DyvIau8mU.roa (hash: zI6SwX02+qOlq17QooQYsFVB47XHuwzw3+jlks2XEb4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c5:de:e4:61:36:72:da:99:6c:23:26:85:13:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082b303cb49e73e2d2a404583d5f8377ceb02545
        Validity
            Not Before: Apr 13 08:01:17 2025 GMT
            Not After : Apr 14 08:01:17 2025 GMT
        Subject: CN=5925ed7cdb2ea016c6b77f528be1bc6e283e9af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:50:7e:d1:7d:8a:da:15:3d:cf:3e:8b:c6:63:
                    fe:57:b4:51:6b:99:d8:b9:3a:e4:9f:58:c7:ff:62:
                    9e:42:71:cc:49:ad:36:b3:e3:8e:8b:9e:fe:81:68:
                    c0:fe:d7:8d:84:bf:b6:75:d6:51:1d:1f:01:1b:df:
                    6d:6e:bb:de:bd:ce:07:82:1f:43:6c:8f:7f:da:35:
                    da:18:1d:09:3b:5c:d7:58:c8:13:18:fb:a6:60:7f:
                    db:d0:f8:9b:b6:65:14:69:fd:69:5d:90:91:80:bd:
                    9f:a3:f8:40:c1:56:4d:5e:87:d3:62:08:7c:0d:f2:
                    df:11:45:89:a6:28:8c:ce:6a:ca:76:8e:b4:9a:f7:
                    df:e4:80:2c:63:bd:62:27:37:24:a7:c1:0b:46:d0:
                    ba:4a:03:86:77:20:60:8c:51:ad:ff:9d:9c:c9:de:
                    cd:06:2c:56:d1:ef:d2:d9:3d:46:71:4c:4a:b6:27:
                    5b:5e:f7:41:21:7f:66:78:07:1f:d8:62:58:72:fc:
                    b2:d1:5d:ee:68:2d:87:2e:5c:1e:f7:14:a1:76:d2:
                    c4:24:61:de:a3:59:86:86:dd:a3:31:df:b3:4c:20:
                    dc:b6:b0:f8:cb:2a:3b:33:5a:b1:4a:e0:64:f1:30:
                    0e:b5:6a:6a:06:a1:51:63:8a:7d:03:54:28:40:72:
                    c0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:25:ED:7C:DB:2E:A0:16:C6:B7:7F:52:8B:E1:BC:6E:28:3E:9A:F1
            X509v3 Authority Key Identifier:
                keyid:08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:0a:f8:24:d1:cf:00:d3:58:14:8d:3f:55:b4:af:e6:59:67:
         1e:56:20:43:a1:90:1c:c5:c1:a4:6f:7e:24:18:88:6f:67:c7:
         79:40:1e:53:0e:2b:ae:08:e8:81:ba:1b:3c:95:3d:ee:03:c0:
         a8:3f:5c:05:6e:1e:53:e8:a8:ea:3f:09:c2:ca:ac:73:c9:6e:
         39:a5:3f:bc:1e:81:ec:f2:f1:a2:2c:89:49:51:fa:53:79:99:
         c0:e8:6a:20:e5:3b:be:4f:4e:2b:b1:dc:ba:aa:09:f8:e4:33:
         d0:48:1e:0b:e8:c5:1b:e2:ec:29:ab:32:f1:8f:d0:4f:ad:2e:
         c2:64:d5:e2:17:85:1f:e1:8a:c3:5b:b2:99:f4:05:41:b4:e0:
         c0:65:df:c8:92:63:02:31:53:cf:ad:0b:16:d5:80:51:32:9f:
         95:7c:b5:06:7f:be:71:7a:88:7e:9f:f1:da:1f:43:4e:42:27:
         b9:f6:af:72:69:f0:2a:49:c2:48:00:7f:bc:f1:38:23:37:6b:
         69:19:08:a2:90:8b:7f:9d:d9:0a:34:6d:7a:b0:aa:12:8e:93:
         43:f0:ef:d7:54:69:0f:93:6a:a9:4f:f4:e0:f8:f1:60:ba:65:
         7a:74:b0:a7:08:46:27:98:10:c8:04:70:76:cf:6b:4f:64:8d:
         d9:46:11:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKsXe5GE2ctqZbCMmhRPcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MmIzMDNjYjQ5ZTczZTJkMmE0MDQ1ODNkNWY4Mzc3Y2Vi
MDI1NDUwHhcNMjUwNDEzMDgwMTE3WhcNMjUwNDE0MDgwMTE3WjAzMTEwLwYDVQQD
Eyg1OTI1ZWQ3Y2RiMmVhMDE2YzZiNzdmNTI4YmUxYmM2ZTI4M2U5YWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylB+0X2K2hU9zz6LxmP+V7RRa5nY
uTrkn1jH/2KeQnHMSa02s+OOi57+gWjA/teNhL+2ddZRHR8BG99tbrvevc4Hgh9D
bI9/2jXaGB0JO1zXWMgTGPumYH/b0PibtmUUaf1pXZCRgL2fo/hAwVZNXofTYgh8
DfLfEUWJpiiMzmrKdo60mvff5IAsY71iJzckp8ELRtC6SgOGdyBgjFGt/52cyd7N
BixW0e/S2T1GcUxKtidbXvdBIX9meAcf2GJYcvyy0V3uaC2HLlwe9xShdtLEJGHe
o1mGht2jMd+zTCDctrD4yyo7M1qxSuBk8TAOtWpqBqFRY4p9A1QoQHLAmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkl7XzbLqAWxrd/UovhvG4oPprxMB8GA1UdIwQY
MBaAFAgrMDy0nnPi0qQEWD1fg3fOsCVFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0Nzd1BMU2VjLUxTcEFSWVBWLURkODZ3SlVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zNDBlYjUtN2JlMC00YmM5LWJmMmQt
YjQ3M2NlNzgwN2NhLzEvQ0Nzd1BMU2VjLUxTcEFSWVBWLURkODZ3SlVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zNDBlYjUtN2JlMC00YmM5LWJmMmQtYjQ3M2NlNzgwN2Nh
LzEvQ0Nzd1BMU2VjLUxTcEFSWVBWLURkODZ3SlVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEAr4JNHP
ANNYFI0/VbSv5llnHlYgQ6GQHMXBpG9+JBiIb2fHeUAeUw4rrgjogbobPJU97gPA
qD9cBW4eU+io6j8Jwsqsc8luOaU/vB6B7PLxoiyJSVH6U3mZwOhqIOU7vk9OK7Hc
uqoJ+OQz0EgeC+jFG+LsKasy8Y/QT60uwmTV4heFH+GKw1uymfQFQbTgwGXfyJJj
AjFTz60LFtWAUTKflXy1Bn++cXqIfp/x2h9DTkInufavcmnwKknCSAB/vPE4Izdr
aRkIopCLf53ZCjRterCqEo6TQ/Dv11RpD5NqqU/04PjxYLplenSwpwhGJ5gQyARw
ds9rT2SN2UYRdQ==
-----END CERTIFICATE-----