Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.mft
File:                     PnpcKTN0JfqBOVVRcmyMK35MUIc.mft (raw, json)
Hash identifier:          2Vk8c9tYnKYeZZnCTJxyz97cnFes8N8GBhIfYvj52M4=
Subject key identifier:   4C:A5:7C:42:5F:33:4D:C1:04:36:08:32:0B:AE:A0:BB:49:6C:A0:24
Authority key identifier: 3E:7A:5C:29:33:74:25:FA:81:39:55:51:72:6C:8C:2B:7E:4C:50:87
Certificate issuer:       /CN=3e7a5c29337425fa81395551726c8c2b7e4c5087
Certificate serial:       01962F073214DD59B1E6A0A1826EAD37429F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PnpcKTN0JfqBOVVRcmyMK35MUIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.mft
Manifest number:          0232
Signing time:             Sun 13 Apr 2025 12:02:02 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:02 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:02 +0000
Files and hashes:         1: PnpcKTN0JfqBOVVRcmyMK35MUIc.crl (hash: lWKmYYMvsnGZ4Z25S/KntEjApCLch+D20Qz7q9i4SRk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:32:14:dd:59:b1:e6:a0:a1:82:6e:ad:37:42:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e7a5c29337425fa81395551726c8c2b7e4c5087
        Validity
            Not Before: Apr 13 12:02:02 2025 GMT
            Not After : Apr 14 12:02:02 2025 GMT
        Subject: CN=4ca57c425f334dc1043608320baea0bb496ca024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:75:2f:d8:6d:c3:3f:c6:ad:c3:ed:87:60:17:
                    7d:e5:a5:1c:ba:c9:ef:15:39:2f:a6:89:0b:10:7b:
                    58:00:d2:15:07:dc:0e:78:38:b2:cc:20:4d:73:c9:
                    8c:50:f3:ef:1d:f6:02:82:7f:23:a2:29:c4:86:d3:
                    be:98:77:70:11:cc:1e:0c:ee:7c:80:5c:77:02:e5:
                    62:ae:98:f1:73:7e:99:5a:3e:10:b8:35:a5:19:fe:
                    fb:43:e0:a0:c1:cc:4e:b5:01:11:eb:84:86:1a:dd:
                    93:1e:a3:76:81:33:f7:f8:b2:cc:7f:14:fc:0e:e8:
                    5c:52:d7:fb:12:a4:30:5c:1e:bd:b1:5b:ac:08:61:
                    41:15:63:c4:95:c0:31:60:29:24:32:c7:76:6b:6f:
                    aa:f8:f8:5a:59:aa:e8:5b:f5:98:d3:02:2d:45:35:
                    6e:b4:ad:1b:d6:04:c8:17:f5:00:d6:d1:59:3a:f8:
                    cc:3a:67:05:ee:bd:fd:9d:c5:58:d5:12:c4:d1:22:
                    65:72:8b:69:ab:72:32:33:97:b0:8d:2f:60:23:c7:
                    47:af:24:0c:35:ca:1e:71:3d:dd:e4:c5:e1:f7:a7:
                    79:34:49:e2:85:c3:b7:4f:94:71:a6:37:e5:e7:12:
                    4c:85:8c:a7:2f:88:f2:a4:48:07:b5:04:09:67:47:
                    50:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A5:7C:42:5F:33:4D:C1:04:36:08:32:0B:AE:A0:BB:49:6C:A0:24
            X509v3 Authority Key Identifier:
                keyid:3E:7A:5C:29:33:74:25:FA:81:39:55:51:72:6C:8C:2B:7E:4C:50:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnpcKTN0JfqBOVVRcmyMK35MUIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/67b254-56f4-4e89-a99d-caa329181964/1/PnpcKTN0JfqBOVVRcmyMK35MUIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:b9:95:2c:75:8e:8e:aa:73:14:8c:b0:ee:01:d4:69:63:f6:
         80:0a:61:79:f3:0f:f3:22:5b:17:13:c6:64:a2:71:8d:49:a3:
         6c:ed:53:b3:56:b0:e2:d2:88:cc:55:04:7a:8c:b9:d3:26:fe:
         52:8d:d4:c9:85:47:d0:0d:fc:b4:0a:6f:69:37:29:95:e7:c0:
         ee:16:0d:6d:39:04:bc:0a:a5:ad:fd:b3:4b:37:81:25:85:6f:
         a4:f9:b5:04:7d:53:cf:11:10:8e:5c:fa:40:41:9a:d7:2c:ce:
         5e:ad:78:37:90:a2:2e:05:1e:5c:ce:29:45:d1:98:61:d9:9b:
         c4:1f:a0:c2:7f:4b:f6:d5:e5:7a:f8:1d:02:6e:7f:c0:a6:76:
         37:e2:4d:0c:9a:de:bc:83:8f:15:08:53:10:aa:26:80:0d:7d:
         54:87:03:49:20:7d:47:a3:cd:92:24:8e:70:3e:1c:98:09:ec:
         c3:42:38:a4:61:50:68:d0:b3:dd:86:d8:94:ee:ff:bb:80:4d:
         b9:2b:8b:78:c4:55:c2:51:e8:e0:bb:f1:bc:6e:e3:d1:d2:65:
         bd:1d:4a:6b:f0:3e:19:e2:04:ee:d3:4a:66:f0:43:84:01:0e:
         ff:63:79:79:a8:ca:0d:2b:be:21:b0:b3:1c:37:31:24:10:f5:
         b9:11:fd:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBzIU3Vmx5qChgm6tN0KfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlN2E1YzI5MzM3NDI1ZmE4MTM5NTU1MTcyNmM4YzJiN2U0
YzUwODcwHhcNMjUwNDEzMTIwMjAyWhcNMjUwNDE0MTIwMjAyWjAzMTEwLwYDVQQD
Eyg0Y2E1N2M0MjVmMzM0ZGMxMDQzNjA4MzIwYmFlYTBiYjQ5NmNhMDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nUv2G3DP8atw+2HYBd95aUcusnv
FTkvpokLEHtYANIVB9wOeDiyzCBNc8mMUPPvHfYCgn8joinEhtO+mHdwEcweDO58
gFx3AuVirpjxc36ZWj4QuDWlGf77Q+CgwcxOtQER64SGGt2THqN2gTP3+LLMfxT8
DuhcUtf7EqQwXB69sVusCGFBFWPElcAxYCkkMsd2a2+q+PhaWaroW/WY0wItRTVu
tK0b1gTIF/UA1tFZOvjMOmcF7r39ncVY1RLE0SJlcotpq3IyM5ewjS9gI8dHryQM
NcoecT3d5MXh96d5NEnihcO3T5Rxpjfl5xJMhYynL4jypEgHtQQJZ0dQjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEylfEJfM03BBDYIMguuoLtJbKAkMB8GA1UdIwQY
MBaAFD56XCkzdCX6gTlVUXJsjCt+TFCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG5wY0tUTjBKZnFCT1ZWUmNteU1LMzVNVUljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82N2IyNTQtNTZmNC00ZTg5LWE5OWQt
Y2FhMzI5MTgxOTY0LzEvUG5wY0tUTjBKZnFCT1ZWUmNteU1LMzVNVUljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82N2IyNTQtNTZmNC00ZTg5LWE5OWQtY2FhMzI5MTgxOTY0
LzEvUG5wY0tUTjBKZnFCT1ZWUmNteU1LMzVNVUljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7mVLHWO
jqpzFIyw7gHUaWP2gAphefMP8yJbFxPGZKJxjUmjbO1Ts1aw4tKIzFUEeoy50yb+
Uo3UyYVH0A38tApvaTcplefA7hYNbTkEvAqlrf2zSzeBJYVvpPm1BH1TzxEQjlz6
QEGa1yzOXq14N5CiLgUeXM4pRdGYYdmbxB+gwn9L9tXlevgdAm5/wKZ2N+JNDJre
vIOPFQhTEKomgA19VIcDSSB9R6PNkiSOcD4cmAnsw0I4pGFQaNCz3YbYlO7/u4BN
uSuLeMRVwlHo4LvxvG7j0dJlvR1Ka/A+GeIE7tNKZvBDhAEO/2N5eajKDSu+IbCz
HDcxJBD1uRH94A==
-----END CERTIFICATE-----