Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef64c5-9487-40fd-b669-e844e2c2e9da/1/PVY-IFrSF0M3CbIAoNzTDHCWHJY.mft
File:                     PVY-IFrSF0M3CbIAoNzTDHCWHJY.mft (raw, json)
Hash identifier:          Xxdjc1duuA6VRqOhX12pZ0e/KPekHmnkabxKQDCeffA=
Subject key identifier:   68:62:98:32:15:02:6F:67:96:14:76:14:25:48:8F:B2:40:DF:A2:C2
Authority key identifier: 3D:56:3E:20:5A:D2:17:43:37:09:B2:00:A0:DC:D3:0C:70:96:1C:96
Certificate issuer:       /CN=3d563e205ad217433709b200a0dcd30c70961c96
Certificate serial:       01962E61F78B88254099EA591FDFD9DB1A24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PVY-IFrSF0M3CbIAoNzTDHCWHJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/ef64c5-9487-40fd-b669-e844e2c2e9da/1/PVY-IFrSF0M3CbIAoNzTDHCWHJY.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:34 +0000
Files and hashes:         1: K0VVkly9aNi0yGL2uwtJHWinFa0.roa (hash: gUjyIMB+jt8lh1mExnA7oGVCKt6v3R2m9uw5LrUvVCY=)
                          2: PVY-IFrSF0M3CbIAoNzTDHCWHJY.crl (hash: 5SQfiMBIGtrLSVG6FFiLSoSO2xYtdfhk6jToXuaFyzQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f7:8b:88:25:40:99:ea:59:1f:df:d9:db:1a:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d563e205ad217433709b200a0dcd30c70961c96
        Validity
            Not Before: Apr 13 09:01:34 2025 GMT
            Not After : Apr 14 09:01:34 2025 GMT
        Subject: CN=6862983215026f679614761425488fb240dfa2c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:70:78:fd:16:04:9e:5f:79:61:00:6f:39:4f:
                    79:a8:26:f7:d0:10:12:76:e2:c6:c5:9a:c0:a1:41:
                    ab:a8:7b:16:4f:c1:d7:cc:d7:f6:de:8a:b6:77:2d:
                    f6:87:63:25:a8:ed:6b:ae:ca:23:41:aa:fe:7a:7e:
                    b1:b2:59:39:84:b3:82:98:e6:31:bb:ae:41:14:02:
                    f6:3f:35:3e:be:1e:2b:92:48:9d:cd:98:b7:80:41:
                    74:84:e6:6f:a3:58:af:9c:b1:9b:00:81:90:b9:2d:
                    0f:9a:86:a9:ca:93:39:66:c2:5c:b0:1d:fe:99:ca:
                    24:92:58:7e:7c:55:ca:42:14:5f:ca:7a:b2:2b:dd:
                    dc:2a:07:2a:2e:b0:fa:2c:af:41:0a:82:60:4e:67:
                    47:c5:12:bd:ae:bb:7e:8d:75:46:89:a6:41:8c:69:
                    71:92:09:9f:fa:15:a5:e7:16:5d:31:16:f9:92:db:
                    b8:bd:99:0e:da:5f:3b:a6:43:88:07:da:49:17:88:
                    98:56:05:29:fd:91:0a:cb:09:d2:5d:49:15:f6:f6:
                    f1:b4:15:80:37:97:8c:66:69:b2:a6:6d:bf:42:47:
                    26:3c:39:65:95:17:52:3e:30:7f:1b:5f:eb:76:11:
                    f2:6a:ee:d3:9a:40:2a:9b:36:66:9e:03:a2:4d:47:
                    c8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:62:98:32:15:02:6F:67:96:14:76:14:25:48:8F:B2:40:DF:A2:C2
            X509v3 Authority Key Identifier:
                keyid:3D:56:3E:20:5A:D2:17:43:37:09:B2:00:A0:DC:D3:0C:70:96:1C:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PVY-IFrSF0M3CbIAoNzTDHCWHJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef64c5-9487-40fd-b669-e844e2c2e9da/1/PVY-IFrSF0M3CbIAoNzTDHCWHJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef64c5-9487-40fd-b669-e844e2c2e9da/1/PVY-IFrSF0M3CbIAoNzTDHCWHJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:ee:72:42:7a:1a:61:c9:79:ec:11:74:ac:a1:45:57:bf:61:
         c7:3a:db:04:28:bb:d8:1e:c3:9b:2d:ce:e4:c9:f0:16:18:65:
         52:08:a0:b8:02:63:40:68:a9:67:09:44:75:f9:49:51:e4:41:
         c5:72:2c:a4:db:c8:2f:b7:ff:57:c6:1f:7b:c7:03:54:4a:48:
         be:db:fb:bd:d8:1c:08:b3:1c:31:05:d2:0a:64:75:14:4f:76:
         17:25:85:85:6c:40:df:fd:14:e3:ee:b5:00:46:bb:25:f7:82:
         06:31:63:fc:ce:8e:29:28:9c:ab:1a:db:c0:e1:f4:7c:a2:ac:
         2a:44:06:c4:ff:8c:e2:31:10:67:c5:48:d0:f7:c9:50:63:f9:
         1f:88:7e:7f:2d:d7:ab:7d:fe:95:b3:67:a3:23:bd:e2:33:dc:
         8e:44:91:97:9c:06:ae:73:89:84:1e:88:ad:f3:27:51:b6:da:
         73:ed:c2:c6:59:fb:a8:cd:0a:95:f5:8e:bc:7b:54:02:a9:a1:
         90:36:43:d6:41:e0:e4:cf:2b:c3:fb:55:71:ce:06:b4:9a:b4:
         66:d1:b2:51:af:66:39:34:ca:f7:69:1c:cf:89:61:f9:49:78:
         69:56:21:e9:7b:60:1e:5c:7a:05:8b:59:6d:5e:43:6c:5a:b0:
         77:bd:52:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYfeLiCVAmepZH9/Z2xokMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkNTYzZTIwNWFkMjE3NDMzNzA5YjIwMGEwZGNkMzBjNzA5
NjFjOTYwHhcNMjUwNDEzMDkwMTM0WhcNMjUwNDE0MDkwMTM0WjAzMTEwLwYDVQQD
Eyg2ODYyOTgzMjE1MDI2ZjY3OTYxNDc2MTQyNTQ4OGZiMjQwZGZhMmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnB4/RYEnl95YQBvOU95qCb30BAS
duLGxZrAoUGrqHsWT8HXzNf23oq2dy32h2MlqO1rrsojQar+en6xslk5hLOCmOYx
u65BFAL2PzU+vh4rkkidzZi3gEF0hOZvo1ivnLGbAIGQuS0PmoapypM5ZsJcsB3+
mcokklh+fFXKQhRfynqyK93cKgcqLrD6LK9BCoJgTmdHxRK9rrt+jXVGiaZBjGlx
kgmf+hWl5xZdMRb5ktu4vZkO2l87pkOIB9pJF4iYVgUp/ZEKywnSXUkV9vbxtBWA
N5eMZmmypm2/QkcmPDlllRdSPjB/G1/rdhHyau7TmkAqmzZmngOiTUfIPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhimDIVAm9nlhR2FCVIj7JA36LCMB8GA1UdIwQY
MBaAFD1WPiBa0hdDNwmyAKDc0wxwlhyWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFZZLUlGclNGME0zQ2JJQW9OelRESENXSEpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9lZjY0YzUtOTQ4Ny00MGZkLWI2Njkt
ZTg0NGUyYzJlOWRhLzEvUFZZLUlGclNGME0zQ2JJQW9OelRESENXSEpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9lZjY0YzUtOTQ4Ny00MGZkLWI2NjktZTg0NGUyYzJlOWRh
LzEvUFZZLUlGclNGME0zQ2JJQW9OelRESENXSEpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+5yQnoa
Ycl57BF0rKFFV79hxzrbBCi72B7Dmy3O5MnwFhhlUgiguAJjQGipZwlEdflJUeRB
xXIspNvIL7f/V8Yfe8cDVEpIvtv7vdgcCLMcMQXSCmR1FE92FyWFhWxA3/0U4+61
AEa7JfeCBjFj/M6OKSicqxrbwOH0fKKsKkQGxP+M4jEQZ8VI0PfJUGP5H4h+fy3X
q33+lbNnoyO94jPcjkSRl5wGrnOJhB6IrfMnUbbac+3Cxln7qM0KlfWOvHtUAqmh
kDZD1kHg5M8rw/tVcc4GtJq0ZtGyUa9mOTTK92kcz4lh+Ul4aVYh6XtgHlx6BYtZ
bV5DbFqwd71SPg==
-----END CERTIFICATE-----