Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
File:                     PLHMl1whjxZoawhB7fwwnMp0ans.mft (raw, json)
Hash identifier:          ag9wUjwWslMa+Ss2kK0Q+g4fh9OK5I4qBbklHrhXN4o=
Subject key identifier:   BD:01:2B:3A:0C:7B:D1:E4:79:06:DB:81:67:79:87:7D:86:7A:E8:35
Authority key identifier: 3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B
Certificate issuer:       /CN=3cb1cc975c218f16686b0841edfc309cca746a7b
Certificate serial:       01962F742B4846A8C0A503BCA12165E63F58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft
Manifest number:          0146
Signing time:             Sun 13 Apr 2025 14:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:04 +0000
Files and hashes:         1: NJyfKGT7eHHPjQOAXKwVNKCjCYs.roa (hash: XDn/F11FiIWe6mjWs24N5BRlzAoQS5rK8vutFukkZcU=)
                          2: PLHMl1whjxZoawhB7fwwnMp0ans.crl (hash: SDE+nSKd7puX1i5f0qX4REZbYHZk7gX8weaItZNUeMY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:2b:48:46:a8:c0:a5:03:bc:a1:21:65:e6:3f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cb1cc975c218f16686b0841edfc309cca746a7b
        Validity
            Not Before: Apr 13 14:01:04 2025 GMT
            Not After : Apr 14 14:01:04 2025 GMT
        Subject: CN=bd012b3a0c7bd1e47906db816779877d867ae835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d3:56:e4:7d:aa:ed:6b:e5:b2:72:f7:f5:ea:
                    e6:68:1b:f0:98:da:93:d8:9a:d7:8b:7a:0d:f9:5e:
                    b0:b2:ec:70:f1:16:c5:a4:27:04:c2:18:04:2d:d1:
                    c9:97:87:a8:02:09:5e:58:e5:0a:85:0d:27:00:37:
                    5f:82:37:2c:3f:d6:94:f3:70:84:c5:40:c6:56:a3:
                    1f:ef:26:50:c0:30:03:67:97:b6:c3:f7:d6:65:ca:
                    3c:2e:cc:b0:0f:e0:97:27:8b:48:82:ce:8c:72:7f:
                    5c:d3:56:d8:d7:68:f2:9b:fa:bc:a9:12:dd:0c:db:
                    c0:ea:05:fb:76:6e:57:64:6b:16:2a:1f:5d:92:00:
                    06:ff:c4:bd:80:38:27:92:93:1a:4f:8f:64:fe:08:
                    7b:96:bd:85:66:08:f1:89:8d:63:6f:7a:ca:5f:c3:
                    6e:9e:ae:5d:8a:46:58:b2:94:d3:e9:10:21:90:9d:
                    56:d8:cf:b2:32:d0:72:bb:b0:f6:1f:42:37:b3:30:
                    ce:46:3c:e6:4f:d2:e9:a4:24:df:47:96:b5:df:78:
                    74:1c:b4:10:9b:47:b5:fd:93:4f:04:de:9c:4f:3a:
                    a1:42:a2:7d:58:88:8c:bb:01:68:dc:de:3f:88:28:
                    02:35:df:a0:3e:6e:af:c0:a2:c7:ec:71:13:ea:29:
                    0f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:01:2B:3A:0C:7B:D1:E4:79:06:DB:81:67:79:87:7D:86:7A:E8:35
            X509v3 Authority Key Identifier:
                keyid:3C:B1:CC:97:5C:21:8F:16:68:6B:08:41:ED:FC:30:9C:CA:74:6A:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PLHMl1whjxZoawhB7fwwnMp0ans.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/239a8e-90d8-43bd-90ed-3e34d00732a3/1/PLHMl1whjxZoawhB7fwwnMp0ans.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:d5:da:85:9f:44:aa:5f:e6:95:54:f2:82:0c:b2:b5:8f:5c:
         b1:14:32:7a:f7:75:e2:53:89:af:19:13:94:cf:56:98:36:3f:
         37:9a:5c:30:81:56:4d:26:57:ed:51:1a:fb:fd:41:08:1d:f1:
         fd:d1:ec:76:4a:0b:01:3b:56:18:ea:66:ca:74:60:e7:f8:3b:
         0d:d5:e8:55:c6:2b:a7:81:d2:59:6a:33:31:f6:9f:47:3c:9b:
         a1:9c:b6:75:c8:51:15:a8:d8:4a:83:6a:ef:ce:9e:72:9c:a1:
         8c:71:a2:e4:dd:8a:e4:b3:da:cb:32:80:56:22:02:9c:34:f7:
         0e:42:07:52:c6:f9:ee:af:93:ca:db:25:35:8d:b2:e8:64:66:
         43:8a:a3:db:a7:a8:12:d8:66:4e:ee:10:57:57:47:5d:a1:26:
         d1:df:c9:e0:a4:c3:06:61:15:eb:95:48:34:f5:6d:4e:12:0b:
         ab:a8:25:54:1c:26:e7:e4:f1:2f:b5:2a:d6:9a:af:72:21:0a:
         eb:81:6e:ae:1c:fd:d2:89:cc:c2:2b:2f:65:a6:88:d2:06:e1:
         fd:7d:83:e4:f7:54:13:b1:a8:1d:a2:13:0c:eb:98:2e:55:14:
         cd:fe:60:fa:6f:56:d3:bc:0b:cf:cc:4f:fd:cd:89:95:22:e7:
         76:11:5e:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdCtIRqjApQO8oSFl5j9YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjYjFjYzk3NWMyMThmMTY2ODZiMDg0MWVkZmMzMDljY2E3
NDZhN2IwHhcNMjUwNDEzMTQwMTA0WhcNMjUwNDE0MTQwMTA0WjAzMTEwLwYDVQQD
EyhiZDAxMmIzYTBjN2JkMWU0NzkwNmRiODE2Nzc5ODc3ZDg2N2FlODM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dNW5H2q7WvlsnL39ermaBvwmNqT
2JrXi3oN+V6wsuxw8RbFpCcEwhgELdHJl4eoAgleWOUKhQ0nADdfgjcsP9aU83CE
xUDGVqMf7yZQwDADZ5e2w/fWZco8LsywD+CXJ4tIgs6Mcn9c01bY12jym/q8qRLd
DNvA6gX7dm5XZGsWKh9dkgAG/8S9gDgnkpMaT49k/gh7lr2FZgjxiY1jb3rKX8Nu
nq5dikZYspTT6RAhkJ1W2M+yMtByu7D2H0I3szDORjzmT9LppCTfR5a133h0HLQQ
m0e1/ZNPBN6cTzqhQqJ9WIiMuwFo3N4/iCgCNd+gPm6vwKLH7HET6ikPcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0BKzoMe9HkeQbbgWd5h32Geug1MB8GA1UdIwQY
MBaAFDyxzJdcIY8WaGsIQe38MJzKdGp7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUExITWwxd2hqeFpvYXdoQjdmd3duTXAwYW5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yMzlhOGUtOTBkOC00M2JkLTkwZWQt
M2UzNGQwMDczMmEzLzEvUExITWwxd2hqeFpvYXdoQjdmd3duTXAwYW5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8yMzlhOGUtOTBkOC00M2JkLTkwZWQtM2UzNGQwMDczMmEz
LzEvUExITWwxd2hqeFpvYXdoQjdmd3duTXAwYW5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAldXahZ9E
ql/mlVTyggyytY9csRQyevd14lOJrxkTlM9WmDY/N5pcMIFWTSZX7VEa+/1BCB3x
/dHsdkoLATtWGOpmynRg5/g7DdXoVcYrp4HSWWozMfafRzyboZy2dchRFajYSoNq
786ecpyhjHGi5N2K5LPayzKAViICnDT3DkIHUsb57q+TytslNY2y6GRmQ4qj26eo
EthmTu4QV1dHXaEm0d/J4KTDBmEV65VINPVtThILq6glVBwm5+TxL7Uq1pqvciEK
64Furhz90onMwisvZaaI0gbh/X2D5PdUE7GoHaITDOuYLlUUzf5g+m9W07wLz8xP
/c2JlSLndhFeZA==
-----END CERTIFICATE-----