Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
File:                     PcI-io7JOWsbVM_7JxxVdm2UkZk.mft (raw, json)
Hash identifier:          A3KUdcjzaR56sh1coh965dUoDsj8qSkO2Px+67/5Q14=
Subject key identifier:   82:4A:BB:EE:A4:5C:E2:F7:27:AE:9C:4A:7B:7F:F5:7E:E9:5D:C2:4D
Authority key identifier: 3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99
Certificate issuer:       /CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
Certificate serial:       01962FAB0B7BC78C33E37255FC6B198E64D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft
Manifest number:          1053
Signing time:             Sun 13 Apr 2025 15:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:00 +0000
Files and hashes:         1: 1-dSijOlomtrsqkND-2jGvkzEh1s.roa (hash: vAMtZ2jKMP2IiV0cN+Yk3wrsh8M5v/wTw365APu16Sc=)
                          2: PcI-io7JOWsbVM_7JxxVdm2UkZk.crl (hash: yxhIcIcfy8hg/RqvAGf9Dr3uCtdVQk+5aqPQmWP05Wo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:0b:7b:c7:8c:33:e3:72:55:fc:6b:19:8e:64:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3dc23e8a8ec9396b1b54cffb271c55766d949199
        Validity
            Not Before: Apr 13 15:01:00 2025 GMT
            Not After : Apr 14 15:01:00 2025 GMT
        Subject: CN=824abbeea45ce2f727ae9c4a7b7ff57ee95dc24d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6d:b2:86:7f:38:15:09:cc:89:c5:33:40:a1:
                    02:f3:d9:73:df:75:6c:f0:60:34:8c:22:9c:9c:c9:
                    a3:32:af:36:5d:45:11:37:8c:a3:3f:07:b3:ce:76:
                    52:f4:99:f0:0a:ce:fb:4d:9a:e5:00:30:76:5f:f2:
                    55:81:a6:ea:78:0e:a9:dc:9e:aa:28:9b:90:39:57:
                    d2:f7:b3:bd:27:c3:db:cb:cd:f0:3c:27:5a:e4:cc:
                    c0:ff:b7:45:cc:62:d3:1e:56:6d:09:69:e8:0f:cf:
                    d8:e5:7d:70:13:60:ea:e1:18:d0:1b:92:ce:45:15:
                    32:9d:22:64:60:30:47:4e:1e:0e:94:08:3e:4e:c8:
                    46:14:96:3c:17:5b:e0:6a:93:37:77:9d:24:46:60:
                    ea:28:9b:75:84:f0:d3:4b:5d:69:65:15:a7:12:78:
                    83:10:f0:bc:4b:5c:ac:1d:ca:0b:86:b6:b1:de:f6:
                    f2:22:0b:13:8a:3a:ab:fb:d7:df:9d:5c:5d:95:f6:
                    5e:3f:9d:d8:2a:f1:dc:d2:06:b8:1e:5b:22:c8:43:
                    b3:51:db:f3:a5:c5:8b:d4:62:53:f3:c4:8a:47:9a:
                    82:9f:04:ce:fc:68:1f:8f:40:21:4e:23:23:67:e4:
                    c5:c1:d9:8b:fb:0e:96:66:de:a9:c8:9b:d5:8b:56:
                    9d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:4A:BB:EE:A4:5C:E2:F7:27:AE:9C:4A:7B:7F:F5:7E:E9:5D:C2:4D
            X509v3 Authority Key Identifier:
                keyid:3D:C2:3E:8A:8E:C9:39:6B:1B:54:CF:FB:27:1C:55:76:6D:94:91:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PcI-io7JOWsbVM_7JxxVdm2UkZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d1cfd7-98d3-43b9-981e-c0dd4771c2aa/1/PcI-io7JOWsbVM_7JxxVdm2UkZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:ae:65:fa:bb:28:6b:ea:36:a4:f7:e4:1c:79:75:0a:a8:f4:
         ff:31:3c:17:9d:1b:6f:92:e3:88:3b:42:24:28:ec:e8:7a:b7:
         80:44:25:7c:a5:18:51:c8:93:c7:49:2b:41:99:99:d6:68:3b:
         21:c9:8a:e2:3d:8f:ec:bd:02:e5:9f:3d:8a:81:67:6d:d2:76:
         39:97:93:bf:ef:cc:8b:f8:90:c3:51:2f:d8:ea:e3:07:3b:e2:
         68:d4:a4:c3:c1:12:ae:e7:e8:6c:ef:0c:41:82:83:27:cc:97:
         4e:59:18:b4:76:62:86:a4:dc:da:26:97:ba:ba:0c:0d:d8:fb:
         ff:45:aa:0d:ed:d4:e7:88:10:9b:43:32:c5:fb:e9:a0:b2:99:
         8c:37:b4:f0:ff:b5:30:28:bc:5b:a6:35:99:e7:bb:5e:34:17:
         c5:89:5e:21:92:1a:4f:ea:8d:bb:c0:e6:e3:db:45:a4:c6:ab:
         be:80:d9:a1:7a:d9:26:24:9b:fe:39:da:96:87:1d:b8:19:71:
         31:a1:23:ad:24:09:29:f2:46:09:23:62:d0:1a:79:e3:4a:ad:
         c5:2b:46:ea:af:d2:2f:63:67:48:63:e8:2c:48:1f:dd:1c:3c:
         ac:3f:da:ee:9d:2b:59:44:d4:4e:e1:ec:25:b7:a6:86:d2:38:
         19:3a:da:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqwt7x4wz43JV/GsZjmTQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYzIzZThhOGVjOTM5NmIxYjU0Y2ZmYjI3MWM1NTc2NmQ5
NDkxOTkwHhcNMjUwNDEzMTUwMTAwWhcNMjUwNDE0MTUwMTAwWjAzMTEwLwYDVQQD
Eyg4MjRhYmJlZWE0NWNlMmY3MjdhZTljNGE3YjdmZjU3ZWU5NWRjMjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApm2yhn84FQnMicUzQKEC89lz33Vs
8GA0jCKcnMmjMq82XUURN4yjPwezznZS9JnwCs77TZrlADB2X/JVgabqeA6p3J6q
KJuQOVfS97O9J8Pby83wPCda5MzA/7dFzGLTHlZtCWnoD8/Y5X1wE2Dq4RjQG5LO
RRUynSJkYDBHTh4OlAg+TshGFJY8F1vgapM3d50kRmDqKJt1hPDTS11pZRWnEniD
EPC8S1ysHcoLhrax3vbyIgsTijqr+9ffnVxdlfZeP53YKvHc0ga4HlsiyEOzUdvz
pcWL1GJT88SKR5qCnwTO/Ggfj0AhTiMjZ+TFwdmL+w6WZt6pyJvVi1adWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJKu+6kXOL3J66cSnt/9X7pXcJNMB8GA1UdIwQY
MBaAFD3CPoqOyTlrG1TP+yccVXZtlJGZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGNJLWlvN0pPV3NiVk1fN0p4eFZkbTJVa1prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kMWNmZDctOThkMy00M2I5LTk4MWUt
YzBkZDQ3NzFjMmFhLzEvUGNJLWlvN0pPV3NiVk1fN0p4eFZkbTJVa1prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9kMWNmZDctOThkMy00M2I5LTk4MWUtYzBkZDQ3NzFjMmFh
LzEvUGNJLWlvN0pPV3NiVk1fN0p4eFZkbTJVa1prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw65l+rso
a+o2pPfkHHl1Cqj0/zE8F50bb5LjiDtCJCjs6Hq3gEQlfKUYUciTx0krQZmZ1mg7
IcmK4j2P7L0C5Z89ioFnbdJ2OZeTv+/Mi/iQw1Ev2OrjBzviaNSkw8ESrufobO8M
QYKDJ8yXTlkYtHZihqTc2iaXuroMDdj7/0WqDe3U54gQm0MyxfvpoLKZjDe08P+1
MCi8W6Y1mee7XjQXxYleIZIaT+qNu8Dm49tFpMarvoDZoXrZJiSb/jnalocduBlx
MaEjrSQJKfJGCSNi0Bp540qtxStG6q/SL2NnSGPoLEgf3Rw8rD/a7p0rWUTUTuHs
JbemhtI4GTrapQ==
-----END CERTIFICATE-----