Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
File:                     pcEGAjxJWQSwQKy5l49Po7DF4tw.mft (raw, json)
Hash identifier:          n+YC7DWNXnckSDK89TI1UdrZo4YxA8NaGBWOxw3nKnQ=
Subject key identifier:   62:B3:12:11:75:54:46:62:90:72:F2:0C:98:9C:21:9A:65:EC:1B:7D
Authority key identifier: A5:C1:06:02:3C:49:59:04:B0:40:AC:B9:97:8F:4F:A3:B0:C5:E2:DC
Certificate issuer:       /CN=a5c106023c495904b040acb9978f4fa3b0c5e2dc
Certificate serial:       01962E993E870BF53DFC617E332D2383E260
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft
Manifest number:          0318
Signing time:             Sun 13 Apr 2025 10:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:56 +0000
Files and hashes:         1: pcEGAjxJWQSwQKy5l49Po7DF4tw.crl (hash: 0Lcx4qvVLmqDDIEngVzaEUzHtxs80q8nQDW9zAUEnzg=)
                          2: yTZlHlMAE_3YBA7oQmF4fIZqHOM.roa (hash: lfCvg73z+0fvdagtNm9IPM2kVoIfwTGx2gcIBEuq7Qk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:3e:87:0b:f5:3d:fc:61:7e:33:2d:23:83:e2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c106023c495904b040acb9978f4fa3b0c5e2dc
        Validity
            Not Before: Apr 13 10:01:56 2025 GMT
            Not After : Apr 14 10:01:56 2025 GMT
        Subject: CN=62b31211755446629072f20c989c219a65ec1b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f4:09:1b:85:74:3e:f6:5e:6c:3d:9f:07:8e:
                    f4:de:3b:65:ed:af:a1:79:73:6c:c5:42:63:a2:17:
                    b9:68:20:6c:64:5f:00:13:88:b0:03:8c:e3:f9:b5:
                    7e:e1:85:1b:71:d6:d6:4f:bb:aa:4d:ae:29:e2:21:
                    cf:fa:00:30:61:64:db:ab:bb:6c:2f:db:43:90:1d:
                    dd:69:04:3b:4c:be:1a:da:59:72:e7:05:fd:57:5b:
                    b1:99:20:a2:de:2a:3e:23:1c:17:5b:6d:80:4d:51:
                    09:8c:2c:2b:3d:7f:0b:73:d6:be:56:b8:ea:74:73:
                    d7:31:b5:37:d9:bf:19:a0:c7:f6:dd:44:02:06:84:
                    52:52:7f:d0:e4:04:fb:05:52:d4:82:39:f6:c8:b6:
                    59:a1:87:0e:29:ba:5b:49:6a:ce:0c:03:f9:4b:77:
                    5c:91:7f:e3:47:6e:e5:c6:44:b3:6f:44:93:a0:6f:
                    41:88:e4:9e:25:f9:26:ef:8b:3c:c4:8a:fa:97:d0:
                    ca:b0:63:49:47:03:91:76:de:08:21:81:c1:8e:72:
                    1d:eb:2b:ae:f8:28:36:48:1a:34:00:12:f6:c6:c6:
                    bb:e6:13:e4:ef:73:5b:11:8a:c0:db:29:f5:a6:b0:
                    2f:2e:3e:b2:f5:41:e4:d2:cf:a9:06:df:d2:a1:17:
                    ef:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B3:12:11:75:54:46:62:90:72:F2:0C:98:9C:21:9A:65:EC:1B:7D
            X509v3 Authority Key Identifier:
                keyid:A5:C1:06:02:3C:49:59:04:B0:40:AC:B9:97:8F:4F:A3:B0:C5:E2:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcEGAjxJWQSwQKy5l49Po7DF4tw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/070032-0bb3-4352-89eb-4913a0ca7409/1/pcEGAjxJWQSwQKy5l49Po7DF4tw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:b2:a5:6b:b9:ab:48:e7:9e:08:46:d4:15:ab:33:bd:93:71:
         b5:33:18:ef:76:1c:76:a8:4d:b6:6e:d3:07:91:b0:77:9e:7d:
         9a:c1:f2:9e:bc:04:eb:09:da:8c:21:21:68:8d:7a:d8:6f:88:
         0f:bd:5c:53:b2:a3:8a:53:b0:a0:e6:32:c3:c8:99:06:75:ec:
         52:7b:65:58:78:d6:9f:10:18:c9:17:34:e7:b4:ba:d6:1f:f4:
         0c:ce:13:25:9c:87:c1:d6:24:27:49:69:6b:ea:51:fe:51:10:
         48:2e:86:03:f4:b3:ee:ad:91:fc:7e:ad:1c:9e:df:6f:98:72:
         a9:5c:f7:9a:fb:15:97:28:6f:5c:28:39:38:76:78:6f:85:fd:
         7d:38:72:bf:99:21:53:f6:0c:da:4b:2a:ae:b8:7a:ad:68:5d:
         84:a8:13:f7:9b:01:8d:bd:d3:d7:2c:b1:b0:83:5a:db:1a:4e:
         c1:1c:00:56:45:21:c4:65:fd:27:f8:00:16:e2:ed:fc:de:33:
         d1:ce:29:81:ca:20:ae:2d:72:6e:0a:97:17:85:60:44:23:18:
         ec:f1:f3:e3:ce:e4:f5:c5:f8:97:3a:fd:d2:3b:ed:4c:75:81:
         26:92:82:60:83:87:ec:a5:98:c9:2f:c9:a2:1a:59:fe:18:b2:
         4d:2b:a1:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumT6HC/U9/GF+My0jg+JgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YzEwNjAyM2M0OTU5MDRiMDQwYWNiOTk3OGY0ZmEzYjBj
NWUyZGMwHhcNMjUwNDEzMTAwMTU2WhcNMjUwNDE0MTAwMTU2WjAzMTEwLwYDVQQD
Eyg2MmIzMTIxMTc1NTQ0NjYyOTA3MmYyMGM5ODljMjE5YTY1ZWMxYjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/QJG4V0PvZebD2fB4703jtl7a+h
eXNsxUJjohe5aCBsZF8AE4iwA4zj+bV+4YUbcdbWT7uqTa4p4iHP+gAwYWTbq7ts
L9tDkB3daQQ7TL4a2lly5wX9V1uxmSCi3io+IxwXW22ATVEJjCwrPX8Lc9a+Vrjq
dHPXMbU32b8ZoMf23UQCBoRSUn/Q5AT7BVLUgjn2yLZZoYcOKbpbSWrODAP5S3dc
kX/jR27lxkSzb0SToG9BiOSeJfkm74s8xIr6l9DKsGNJRwORdt4IIYHBjnId6yuu
+Cg2SBo0ABL2xsa75hPk73NbEYrA2yn1prAvLj6y9UHk0s+pBt/SoRfvDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKzEhF1VEZikHLyDJicIZpl7Bt9MB8GA1UdIwQY
MBaAFKXBBgI8SVkEsECsuZePT6OwxeLcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGNFR0FqeEpXUVN3UUt5NWw0OVBvN0RGNHR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8wNzAwMzItMGJiMy00MzUyLTg5ZWIt
NDkxM2EwY2E3NDA5LzEvcGNFR0FqeEpXUVN3UUt5NWw0OVBvN0RGNHR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8wNzAwMzItMGJiMy00MzUyLTg5ZWItNDkxM2EwY2E3NDA5
LzEvcGNFR0FqeEpXUVN3UUt5NWw0OVBvN0RGNHR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlLKla7mr
SOeeCEbUFaszvZNxtTMY73YcdqhNtm7TB5Gwd559msHynrwE6wnajCEhaI162G+I
D71cU7KjilOwoOYyw8iZBnXsUntlWHjWnxAYyRc057S61h/0DM4TJZyHwdYkJ0lp
a+pR/lEQSC6GA/Sz7q2R/H6tHJ7fb5hyqVz3mvsVlyhvXCg5OHZ4b4X9fThyv5kh
U/YM2ksqrrh6rWhdhKgT95sBjb3T1yyxsINa2xpOwRwAVkUhxGX9J/gAFuLt/N4z
0c4pgcogri1ybgqXF4VgRCMY7PHz487k9cX4lzr90jvtTHWBJpKCYIOH7KWYyS/J
ohpZ/hiyTSuh3Q==
-----END CERTIFICATE-----