Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft
File:                     PtW83-CttrlBURh__axK6PMRpvE.mft (raw, json)
Hash identifier:          l1uRkx+UsClWKRzA6ht4ONWjrudmfgik/sJPiGAiYt8=
Subject key identifier:   2E:F6:2E:9C:15:7E:ED:B5:20:5C:E5:04:13:2C:C0:9E:2A:66:B0:4E
Authority key identifier: 3E:D5:BC:DF:E0:AD:B6:B9:41:51:18:7F:FD:AC:4A:E8:F3:11:A6:F1
Certificate issuer:       /CN=3ed5bcdfe0adb6b94151187ffdac4ae8f311a6f1
Certificate serial:       01962DF3A7F8D7AAF08799F29BC190A2C6E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft
Manifest number:          147E
Signing time:             Sun 13 Apr 2025 07:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:04 +0000
Files and hashes:         1: Hg8kBZfVcKLuM_k8GGnGJeVAvdc.roa (hash: ziqa3QYWLFKgPT8ZERs4WMz6NaXL6vju070csDXblpM=)
                          2: PtW83-CttrlBURh__axK6PMRpvE.crl (hash: SIP4ZPXeaBN/PhsPSlfBsHr6DbtGEfg4U2gKjN38hg0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a7:f8:d7:aa:f0:87:99:f2:9b:c1:90:a2:c6:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ed5bcdfe0adb6b94151187ffdac4ae8f311a6f1
        Validity
            Not Before: Apr 13 07:01:04 2025 GMT
            Not After : Apr 14 07:01:04 2025 GMT
        Subject: CN=2ef62e9c157eedb5205ce504132cc09e2a66b04e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:cc:5d:10:53:46:f2:58:a6:57:fd:ef:e4:34:
                    41:fd:d8:9a:e7:19:45:34:ce:3e:de:62:f4:79:f2:
                    64:c9:30:b8:2e:88:29:ce:5a:37:6d:f1:fb:91:0c:
                    b1:c8:06:6b:b3:83:1e:a5:a1:67:72:a3:a9:02:dd:
                    b7:01:4f:9e:a3:7b:a8:b7:87:65:48:d4:8f:17:be:
                    b5:99:8d:79:9e:5d:39:65:f9:83:63:f5:1c:3b:60:
                    10:8d:3c:7d:3e:f3:f6:1b:6e:5b:f8:43:b1:e7:de:
                    ba:d5:06:c2:ab:ee:dd:34:72:62:62:a8:5b:34:a8:
                    95:26:49:7e:e2:5f:4a:5f:88:c1:a3:a8:90:b3:a5:
                    05:08:f2:28:03:c3:e8:ff:41:a8:63:4c:41:8c:a8:
                    ea:a7:9c:4b:da:e0:fb:3b:9e:15:f9:95:4d:fd:75:
                    3c:4f:e7:d2:ff:12:8e:38:d3:c4:18:92:5a:2c:89:
                    a5:f9:0a:7b:cb:7d:2c:6a:c1:01:33:0d:dc:6f:f3:
                    eb:e2:09:1c:68:3f:f9:f1:ea:24:70:e5:b7:6d:ef:
                    a6:c7:af:db:0f:7a:31:c1:4c:f3:3d:73:be:c5:f0:
                    91:c0:d3:48:a3:62:05:15:88:3b:43:d0:63:bf:da:
                    e7:cb:11:ea:9f:81:e3:16:10:f2:77:32:ea:7b:fa:
                    a3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F6:2E:9C:15:7E:ED:B5:20:5C:E5:04:13:2C:C0:9E:2A:66:B0:4E
            X509v3 Authority Key Identifier:
                keyid:3E:D5:BC:DF:E0:AD:B6:B9:41:51:18:7F:FD:AC:4A:E8:F3:11:A6:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PtW83-CttrlBURh__axK6PMRpvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/PtW83-CttrlBURh__axK6PMRpvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:73:61:77:6a:f1:a1:0a:6d:88:00:37:fb:de:7a:6e:5b:bc:
         b6:75:96:28:6a:74:a3:e2:21:67:d8:c6:60:55:53:91:a1:24:
         cf:ac:11:70:61:5e:41:71:1e:04:cb:48:3e:c9:18:f6:8d:1e:
         50:26:fa:34:bb:e0:7e:18:98:9e:11:70:3e:bb:6b:f9:dc:f2:
         72:47:7d:82:89:61:b5:d9:c5:2e:0f:ff:79:db:37:23:7e:58:
         f7:f6:22:ff:ab:5c:f0:8f:85:f5:66:df:0b:1a:d0:a5:a6:16:
         56:e1:e3:47:2c:fa:c9:73:98:1f:22:ee:a3:f0:13:19:66:bd:
         0f:56:05:f1:78:3c:17:10:86:cf:47:a7:69:fa:0e:93:ac:98:
         db:e0:22:4e:14:0b:6a:04:aa:37:75:d3:fc:a9:e4:a9:35:21:
         43:73:d4:82:37:78:4b:4b:46:ea:87:f9:ec:f6:ef:f9:30:d9:
         3e:78:f6:e0:ee:23:74:54:1a:0b:50:f3:fc:70:52:90:01:3c:
         7f:de:b1:ce:7d:14:57:2c:29:24:1b:14:88:6f:51:88:5a:1c:
         99:6a:61:60:a2:eb:2d:97:71:3c:03:a2:c4:a7:54:bf:7e:0d:
         79:36:b6:dd:39:cc:0a:95:cd:b3:c9:1d:45:70:41:c3:cb:cc:
         31:ea:ac:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt86f416rwh5nym8GQosbjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlZDViY2RmZTBhZGI2Yjk0MTUxMTg3ZmZkYWM0YWU4ZjMx
MWE2ZjEwHhcNMjUwNDEzMDcwMTA0WhcNMjUwNDE0MDcwMTA0WjAzMTEwLwYDVQQD
EygyZWY2MmU5YzE1N2VlZGI1MjA1Y2U1MDQxMzJjYzA5ZTJhNjZiMDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7sxdEFNG8limV/3v5DRB/dia5xlF
NM4+3mL0efJkyTC4Logpzlo3bfH7kQyxyAZrs4MepaFncqOpAt23AU+eo3uot4dl
SNSPF761mY15nl05ZfmDY/UcO2AQjTx9PvP2G25b+EOx59661QbCq+7dNHJiYqhb
NKiVJkl+4l9KX4jBo6iQs6UFCPIoA8Po/0GoY0xBjKjqp5xL2uD7O54V+ZVN/XU8
T+fS/xKOONPEGJJaLIml+Qp7y30sasEBMw3cb/Pr4gkcaD/58eokcOW3be+mx6/b
D3oxwUzzPXO+xfCRwNNIo2IFFYg7Q9Bjv9rnyxHqn4HjFhDydzLqe/qjswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC72LpwVfu21IFzlBBMswJ4qZrBOMB8GA1UdIwQY
MBaAFD7VvN/grba5QVEYf/2sSujzEabxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHRXODMtQ3R0cmxCVVJoX19heEs2UE1ScHZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8xYjgyOTItODZlNy00ZmI1LWEzODct
MmFlOTBjM2ZhZTMxLzEvUHRXODMtQ3R0cmxCVVJoX19heEs2UE1ScHZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8xYjgyOTItODZlNy00ZmI1LWEzODctMmFlOTBjM2ZhZTMx
LzEvUHRXODMtQ3R0cmxCVVJoX19heEs2UE1ScHZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqXNhd2rx
oQptiAA3+956blu8tnWWKGp0o+IhZ9jGYFVTkaEkz6wRcGFeQXEeBMtIPskY9o0e
UCb6NLvgfhiYnhFwPrtr+dzyckd9golhtdnFLg//eds3I35Y9/Yi/6tc8I+F9Wbf
CxrQpaYWVuHjRyz6yXOYHyLuo/ATGWa9D1YF8Xg8FxCGz0enafoOk6yY2+AiThQL
agSqN3XT/KnkqTUhQ3PUgjd4S0tG6of57Pbv+TDZPnj24O4jdFQaC1Dz/HBSkAE8
f96xzn0UVywpJBsUiG9RiFocmWphYKLrLZdxPAOixKdUv34NeTa23TnMCpXNs8kd
RXBBw8vMMeqs5g==
-----END CERTIFICATE-----