Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
File:                     to-PMlFKGD6Xejx982Rz1WJgxKQ.mft (raw, json)
Hash identifier:          B76sTGKKlM6lKajYPwfSQUIFmGlnTlH7TjXYUTyMV8E=
Subject key identifier:   83:70:74:84:26:1A:44:5C:FA:46:B5:B1:D8:50:2B:22:8F:3C:C2:F3
Authority key identifier: B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
Certificate issuer:       /CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Certificate serial:       01962DF3B483C8AAE1172DD040C385411C35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
Manifest number:          094B
Signing time:             Sun 13 Apr 2025 07:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:08 +0000
Files and hashes:         1: tQOCxRT0aCE_1_qk1kC7RdCFOSc.roa (hash: n1WxYWjnXTsr8gKXroY5cgEaMb8X/+3xuLpCg/Qcbnk=)
                          2: to-PMlFKGD6Xejx982Rz1WJgxKQ.crl (hash: XctJ0OqdjxSBHvOBFeGKey6WO89Sk8cftixzAUzvpKA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b4:83:c8:aa:e1:17:2d:d0:40:c3:85:41:1c:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b68f8f32514a183e977a3c7df36473d56260c4a4
        Validity
            Not Before: Apr 13 07:01:08 2025 GMT
            Not After : Apr 14 07:01:08 2025 GMT
        Subject: CN=83707484261a445cfa46b5b1d8502b228f3cc2f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:75:aa:23:23:c7:82:51:9e:3f:c5:ed:94:2f:
                    fd:3f:4f:03:dd:10:ed:4a:7e:21:83:a8:07:5a:9c:
                    03:ba:7d:2f:b1:df:24:5f:74:85:08:05:90:c7:1f:
                    2f:64:47:74:c7:52:f4:2a:22:ab:3b:a0:9c:bc:25:
                    bb:c9:eb:ec:b7:1d:d9:fd:39:1e:1b:36:6c:87:59:
                    33:f8:9b:02:27:fe:7f:0e:41:03:61:48:fe:dc:ee:
                    98:52:a6:e6:f8:e4:06:d2:27:82:ed:c0:0f:4c:fc:
                    56:70:0e:b5:76:ff:6c:30:14:5c:50:21:07:5d:40:
                    9b:68:a9:27:64:d1:85:62:f6:bf:51:cb:56:77:8d:
                    93:da:7a:bb:b1:24:38:9e:0d:4f:c3:5a:7f:b4:e3:
                    f7:5d:89:be:cc:63:8f:7f:c0:4c:d0:27:95:f5:cf:
                    32:95:bc:66:78:e9:8f:00:bc:6a:0d:ec:ca:20:d2:
                    6c:18:ac:ad:b4:8f:01:28:7e:89:d2:e1:19:5a:64:
                    10:ae:aa:dc:7f:dc:e2:29:a5:e8:67:03:59:bf:4a:
                    14:3f:58:98:84:1d:67:8b:1d:20:bf:f5:14:01:a9:
                    a6:e0:e7:2b:78:bc:3e:8c:6c:82:e2:8d:b6:d6:04:
                    79:fd:0a:14:18:ee:36:a9:eb:73:d8:02:ed:0f:3d:
                    5f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:70:74:84:26:1A:44:5C:FA:46:B5:B1:D8:50:2B:22:8F:3C:C2:F3
            X509v3 Authority Key Identifier:
                keyid:B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:e8:c9:ec:0d:41:7d:3f:a7:0e:60:2f:2f:16:3d:b6:f1:e7:
         93:f5:cb:d4:c8:37:9c:d2:a5:3f:99:9e:c7:59:f4:91:cd:0f:
         e2:d3:3e:25:08:e6:76:e3:6d:21:f3:61:92:c4:3b:5e:18:7b:
         00:1b:60:df:99:2c:e6:cb:5b:0e:9c:48:4f:62:5a:82:69:14:
         a0:b7:1a:9d:63:25:d7:99:88:63:63:f6:26:ab:13:54:89:55:
         ac:14:d7:d2:69:04:13:ce:91:fc:6a:2c:f5:6b:86:46:84:f0:
         92:08:77:2d:ff:84:ea:84:00:3f:10:fe:15:d9:df:54:9b:2f:
         86:19:b0:31:68:9f:9d:28:8b:fe:ae:d4:d7:bb:e5:46:17:bc:
         6a:d1:88:86:e3:55:07:a6:a4:4b:38:89:d8:56:0c:ed:15:3d:
         44:3d:4d:24:bd:57:7d:eb:8e:14:0f:7c:14:fe:51:7f:5f:3c:
         73:70:25:fc:1c:76:85:f3:19:5b:ac:b9:56:59:04:e2:1b:60:
         c6:28:c8:eb:73:ef:c8:3c:c5:ba:ff:51:00:99:33:e4:ed:8f:
         cc:e3:b7:69:2a:8f:31:3a:7e:b5:cb:cd:90:e0:c4:c0:03:2a:
         f9:a2:9c:9e:1b:6d:fb:c6:4e:f4:ab:bf:67:e8:5a:16:40:9e:
         ec:16:2c:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt87SDyKrhFy3QQMOFQRw1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2OGY4ZjMyNTE0YTE4M2U5NzdhM2M3ZGYzNjQ3M2Q1NjI2
MGM0YTQwHhcNMjUwNDEzMDcwMTA4WhcNMjUwNDE0MDcwMTA4WjAzMTEwLwYDVQQD
Eyg4MzcwNzQ4NDI2MWE0NDVjZmE0NmI1YjFkODUwMmIyMjhmM2NjMmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXWqIyPHglGeP8XtlC/9P08D3RDt
Sn4hg6gHWpwDun0vsd8kX3SFCAWQxx8vZEd0x1L0KiKrO6CcvCW7yevstx3Z/Tke
GzZsh1kz+JsCJ/5/DkEDYUj+3O6YUqbm+OQG0ieC7cAPTPxWcA61dv9sMBRcUCEH
XUCbaKknZNGFYva/UctWd42T2nq7sSQ4ng1Pw1p/tOP3XYm+zGOPf8BM0CeV9c8y
lbxmeOmPALxqDezKINJsGKyttI8BKH6J0uEZWmQQrqrcf9ziKaXoZwNZv0oUP1iY
hB1nix0gv/UUAamm4OcreLw+jGyC4o221gR5/QoUGO42qetz2ALtDz1fYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINwdIQmGkRc+ka1sdhQKyKPPMLzMB8GA1UdIwQY
MBaAFLaPjzJRShg+l3o8ffNkc9ViYMSkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG8tUE1sRktHRDZYZWp4OTgyUnoxV0pneEtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zODg3ZTQtYjU5OC00NWUzLThkODUt
MjIxMGVkOWQwODYxLzEvdG8tUE1sRktHRDZYZWp4OTgyUnoxV0pneEtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8zODg3ZTQtYjU5OC00NWUzLThkODUtMjIxMGVkOWQwODYx
LzEvdG8tUE1sRktHRDZYZWp4OTgyUnoxV0pneEtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4ujJ7A1B
fT+nDmAvLxY9tvHnk/XL1Mg3nNKlP5mex1n0kc0P4tM+JQjmduNtIfNhksQ7Xhh7
ABtg35ks5stbDpxIT2JagmkUoLcanWMl15mIY2P2JqsTVIlVrBTX0mkEE86R/Gos
9WuGRoTwkgh3Lf+E6oQAPxD+FdnfVJsvhhmwMWifnSiL/q7U17vlRhe8atGIhuNV
B6akSziJ2FYM7RU9RD1NJL1XfeuOFA98FP5Rf188c3Al/Bx2hfMZW6y5VlkE4htg
xijI63PvyDzFuv9RAJkz5O2PzOO3aSqPMTp+tcvNkODEwAMq+aKcnhtt+8ZO9Ku/
Z+haFkCe7BYsZg==
-----END CERTIFICATE-----