Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft
File:                     pl-8tOowipiwk5diXmOGY4PBbdA.mft (raw, json)
Hash identifier:          7sREV1807mjYeFrBuhfebgi/IZeeKLDEnD/eh7mDT40=
Subject key identifier:   9F:02:69:03:CE:BA:4D:86:8D:AC:49:59:D2:B6:B4:63:F4:AB:CA:D5
Authority key identifier: A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0
Certificate issuer:       /CN=a65fbcb4ea308a98b09397625e63866383c16dd0
Certificate serial:       01962ECFCF3C1FBE6EBDB4743CB11080F68D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft
Manifest number:          0F43
Signing time:             Sun 13 Apr 2025 11:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:32 +0000
Files and hashes:         1: WVsTj7MenBGl38xhkFqi5Z0aczs.roa (hash: 7b6SsFE3NdlNY/Clv2Hjf1UktFQZh/V54AuKRqY5yFI=)
                          2: lO1h-E6bKpXhV0awEzc3ziBx-Hs.roa (hash: 6ZLzJ6p72ZxH2QZqjbunK1Na/XaXqvcFzB2ukNCzzI4=)
                          3: pl-8tOowipiwk5diXmOGY4PBbdA.crl (hash: G6UII/CNNtTf7qEKM0BNulaz0rax258Q7nEsF08K8wc=)
                          4: zGOXqDkKzJdU0p47Wrv4dob9WRY.roa (hash: h/PYhmoQAY7EhuYv56qskYi6sqC9Lx5gg5uwdXV3h5s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:cf:3c:1f:be:6e:bd:b4:74:3c:b1:10:80:f6:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a65fbcb4ea308a98b09397625e63866383c16dd0
        Validity
            Not Before: Apr 13 11:01:32 2025 GMT
            Not After : Apr 14 11:01:32 2025 GMT
        Subject: CN=9f026903ceba4d868dac4959d2b6b463f4abcad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:06:d0:68:d4:70:5e:f1:6f:7b:df:9f:ed:a5:
                    05:f0:01:f7:d7:23:20:81:f6:8f:12:4c:0c:a2:1e:
                    44:9a:1d:43:57:c8:e6:77:ac:22:bf:0c:87:fe:dc:
                    2e:41:33:18:a3:04:08:7e:62:ec:b0:35:fe:1a:69:
                    31:44:8f:38:62:b3:be:1a:b3:c2:f1:86:c1:dc:d0:
                    bd:85:70:cb:29:a6:b0:8c:d7:0a:57:6e:f2:55:da:
                    60:18:4e:e2:10:78:67:04:ce:f7:dd:fe:47:fb:bf:
                    1e:1c:8b:cb:e9:7c:4a:70:ff:8f:3a:32:56:41:de:
                    4f:04:d7:c6:09:f4:e1:a6:66:33:e5:82:5b:5f:e2:
                    1b:88:bf:77:a6:05:e8:a9:b6:4b:e8:cd:a6:9f:50:
                    c2:4d:f1:ac:cb:74:1d:88:aa:65:78:91:05:d1:8b:
                    f1:94:b8:fd:1d:ff:a7:77:08:85:45:6c:f0:5a:1e:
                    ab:91:13:fa:a5:83:02:8a:f5:20:9f:0a:eb:00:85:
                    b1:77:85:48:29:fc:6e:32:eb:ba:84:62:e3:81:c3:
                    57:e6:cb:28:d3:ff:e8:e5:e0:38:4d:a5:5d:5b:50:
                    86:34:56:9f:c8:ac:ae:23:a4:38:a0:36:78:77:38:
                    17:4c:21:70:8b:57:69:87:3e:e0:64:6f:cc:a6:90:
                    8b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:02:69:03:CE:BA:4D:86:8D:AC:49:59:D2:B6:B4:63:F4:AB:CA:D5
            X509v3 Authority Key Identifier:
                keyid:A6:5F:BC:B4:EA:30:8A:98:B0:93:97:62:5E:63:86:63:83:C1:6D:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl-8tOowipiwk5diXmOGY4PBbdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f7231d-c561-4aa2-b80e-62d42fe6fd3c/1/pl-8tOowipiwk5diXmOGY4PBbdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:3c:7b:52:2e:e4:89:7f:7c:01:b2:2c:90:aa:76:1f:80:31:
         8e:75:55:10:95:7c:bd:4a:1a:7c:bc:4b:a4:8e:ca:0f:48:ef:
         b3:04:14:54:1b:9c:6b:3f:9e:1d:42:b5:4c:0c:f8:29:19:d8:
         01:f8:69:e6:bc:a2:1b:da:c0:38:f3:20:cd:3f:3b:f3:92:03:
         e8:51:db:75:be:fa:0c:78:18:a6:d5:58:d8:43:50:06:25:34:
         44:fa:94:5c:ce:ce:d2:0c:5e:e3:fc:be:17:ba:8f:c4:d0:23:
         eb:0b:0c:b3:06:1c:91:87:ca:49:be:7a:ec:bf:52:7d:92:bc:
         2a:74:18:a8:bf:fe:f5:d6:96:3d:88:85:af:53:a8:b6:93:31:
         cb:2c:55:f9:42:7f:dc:26:16:fa:6d:75:90:f8:f3:d2:53:9f:
         47:04:ed:af:24:b4:e0:b4:60:9d:07:b0:63:38:ed:00:c1:71:
         ec:17:c6:75:e8:3e:73:7e:04:f2:09:6c:38:82:22:42:3d:2b:
         38:dc:2d:9b:0c:a8:ec:b8:0b:f3:62:30:66:66:2b:30:59:38:
         a9:3b:86:88:ec:ef:79:8d:77:10:41:22:f5:8f:3e:ce:60:2a:
         aa:c7:0f:27:a6:09:af:c4:06:ed:62:fc:57:f8:86:3e:43:fb:
         cf:99:ab:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz888H75uvbR0PLEQgPaNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NWZiY2I0ZWEzMDhhOThiMDkzOTc2MjVlNjM4NjYzODNj
MTZkZDAwHhcNMjUwNDEzMTEwMTMyWhcNMjUwNDE0MTEwMTMyWjAzMTEwLwYDVQQD
Eyg5ZjAyNjkwM2NlYmE0ZDg2OGRhYzQ5NTlkMmI2YjQ2M2Y0YWJjYWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwbQaNRwXvFve9+f7aUF8AH31yMg
gfaPEkwMoh5Emh1DV8jmd6wivwyH/twuQTMYowQIfmLssDX+GmkxRI84YrO+GrPC
8YbB3NC9hXDLKaawjNcKV27yVdpgGE7iEHhnBM733f5H+78eHIvL6XxKcP+POjJW
Qd5PBNfGCfThpmYz5YJbX+IbiL93pgXoqbZL6M2mn1DCTfGsy3QdiKpleJEF0Yvx
lLj9Hf+ndwiFRWzwWh6rkRP6pYMCivUgnwrrAIWxd4VIKfxuMuu6hGLjgcNX5sso
0//o5eA4TaVdW1CGNFafyKyuI6Q4oDZ4dzgXTCFwi1dphz7gZG/MppCLDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8CaQPOuk2GjaxJWdK2tGP0q8rVMB8GA1UdIwQY
MBaAFKZfvLTqMIqYsJOXYl5jhmODwW3QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGwtOHRPb3dpcGl3azVkaVhtT0dZNFBCYmRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9mNzIzMWQtYzU2MS00YWEyLWI4MGUt
NjJkNDJmZTZmZDNjLzEvcGwtOHRPb3dpcGl3azVkaVhtT0dZNFBCYmRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9mNzIzMWQtYzU2MS00YWEyLWI4MGUtNjJkNDJmZTZmZDNj
LzEvcGwtOHRPb3dpcGl3azVkaVhtT0dZNFBCYmRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTx7Ui7k
iX98AbIskKp2H4AxjnVVEJV8vUoafLxLpI7KD0jvswQUVBucaz+eHUK1TAz4KRnY
Afhp5ryiG9rAOPMgzT8785ID6FHbdb76DHgYptVY2ENQBiU0RPqUXM7O0gxe4/y+
F7qPxNAj6wsMswYckYfKSb567L9SfZK8KnQYqL/+9daWPYiFr1OotpMxyyxV+UJ/
3CYW+m11kPjz0lOfRwTtryS04LRgnQewYzjtAMFx7BfGdeg+c34E8glsOIIiQj0r
ONwtmwyo7LgL82IwZmYrMFk4qTuGiOzveY13EEEi9Y8+zmAqqscPJ6YJr8QG7WL8
V/iGPkP7z5mriA==
-----END CERTIFICATE-----