Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
File:                     PFaMWdeoMZnDp56g6DdblG7YhOI.mft (raw, json)
Hash identifier:          t8HEczT1oPEeseVhBYWvRLeMNNkZhZsXWb0/XgcdVeU=
Subject key identifier:   6B:08:6C:E1:F8:A1:34:0C:B8:D7:62:FC:19:EF:9F:3E:D4:09:EC:0C
Authority key identifier: 3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
Certificate issuer:       /CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Certificate serial:       01962F0731CC32F972A105E8219F527857CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:02:02 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:02 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:02 +0000
Files and hashes:         1: 7WOP-_-MOSfX89KKSoy6v0ZdGmI.roa (hash: K5alUaOgD5qLhUU0KdZTL8p6umuUwQibq8QwoQYmgD8=)
                          2: HCoi5HM2CS9n54Michmh4KOI3ek.roa (hash: jtTZBvxkebDPFdaXtrlo0EAEQkLMF8pkeRtYqCQ7D0I=)
                          3: PFaMWdeoMZnDp56g6DdblG7YhOI.crl (hash: Z9olfvbdt1DGuZ4ddC+7+NYnYOMQGgcfCY+O8NvYwDs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:31:cc:32:f9:72:a1:05:e8:21:9f:52:78:57:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
        Validity
            Not Before: Apr 13 12:02:02 2025 GMT
            Not After : Apr 14 12:02:02 2025 GMT
        Subject: CN=6b086ce1f8a1340cb8d762fc19ef9f3ed409ec0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c4:2a:c5:dc:b8:8c:3c:30:86:c3:70:ff:82:
                    f4:87:bb:38:c8:07:56:ca:75:f5:10:66:a5:b7:f4:
                    75:9d:dc:8d:93:8d:e3:c0:ac:e9:4c:d5:42:ea:ee:
                    dc:43:dd:c7:a0:bb:7d:6c:fd:27:01:67:94:00:b3:
                    d9:4f:6d:55:13:03:f0:e2:f5:cc:71:fc:d9:14:8e:
                    3e:b7:38:6a:97:44:49:30:cb:17:16:80:0c:dc:00:
                    ca:a8:fa:bb:e7:28:46:7a:b8:e5:db:1a:f2:6e:dc:
                    c1:b4:85:5a:d1:13:78:24:7b:ac:ea:a9:d5:d1:19:
                    b8:d7:f0:c8:97:8f:0a:da:d1:cf:44:30:d2:b3:03:
                    7d:fb:3a:b6:bf:0c:3d:51:d8:a1:f0:ec:aa:83:d6:
                    be:87:73:70:d9:f3:56:a3:77:18:22:3a:e6:b6:78:
                    90:f2:94:d1:0f:89:8d:21:64:23:c3:69:07:d6:89:
                    54:d5:33:fa:9b:ee:42:d9:ff:57:02:25:be:b2:11:
                    b6:1d:1e:54:2d:12:0d:fc:86:99:c6:70:81:c1:78:
                    14:ba:ed:0f:fd:35:a5:c6:35:e5:3a:15:55:b0:53:
                    03:13:92:fd:91:ab:46:c2:e8:5c:9e:47:9d:ba:82:
                    0e:c9:36:7c:0f:bc:6c:8f:ac:47:4b:3a:bd:94:2d:
                    f7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:08:6C:E1:F8:A1:34:0C:B8:D7:62:FC:19:EF:9F:3E:D4:09:EC:0C
            X509v3 Authority Key Identifier:
                keyid:3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:cf:68:72:59:ac:b4:c7:0a:a8:ff:34:dd:0f:70:e7:42:3c:
         eb:fb:83:ed:7b:08:19:23:8f:ed:89:85:08:55:55:af:87:05:
         fd:70:06:44:84:26:78:43:01:77:41:8e:1b:33:ac:d3:c7:bd:
         01:2e:d2:8d:d1:48:ba:bb:ea:47:4f:67:ce:9c:1b:cc:32:b9:
         c4:a5:3f:ed:5a:00:9f:64:18:03:bb:23:17:f4:68:22:cf:a8:
         7b:68:05:a8:eb:a1:e4:e1:24:4f:a0:b5:7f:8e:b0:f9:74:33:
         b3:9e:63:96:8f:11:76:45:be:36:b2:4e:c0:c0:81:87:7f:30:
         10:ff:34:3d:60:ff:66:6a:bb:28:fd:4e:fb:53:1e:24:22:0a:
         74:82:85:ad:b7:71:d2:36:0d:31:bf:00:0e:46:3c:ee:62:ec:
         ea:bc:04:a3:12:8f:c7:e8:5b:b1:44:ef:14:20:51:4d:5d:ba:
         4e:10:48:11:a4:68:c5:74:2b:ca:fc:a8:bd:8c:07:f8:aa:9c:
         51:66:3a:68:74:ff:25:13:6c:bb:a1:c5:7d:c7:61:95:73:8a:
         48:ea:9f:10:9a:2c:f9:e7:ba:40:b2:ed:0e:af:99:cc:59:16:
         08:b7:68:61:37:7e:9c:6e:29:03:d3:dd:59:ba:89:db:0f:97:
         f9:a8:24:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBzHMMvlyoQXoIZ9SeFfMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNTY4YzU5ZDdhODMxOTljM2E3OWVhMGU4Mzc1Yjk0NmVk
ODg0ZTIwHhcNMjUwNDEzMTIwMjAyWhcNMjUwNDE0MTIwMjAyWjAzMTEwLwYDVQQD
Eyg2YjA4NmNlMWY4YTEzNDBjYjhkNzYyZmMxOWVmOWYzZWQ0MDllYzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcQqxdy4jDwwhsNw/4L0h7s4yAdW
ynX1EGalt/R1ndyNk43jwKzpTNVC6u7cQ93HoLt9bP0nAWeUALPZT21VEwPw4vXM
cfzZFI4+tzhql0RJMMsXFoAM3ADKqPq75yhGerjl2xrybtzBtIVa0RN4JHus6qnV
0Rm41/DIl48K2tHPRDDSswN9+zq2vww9Udih8Oyqg9a+h3Nw2fNWo3cYIjrmtniQ
8pTRD4mNIWQjw2kH1olU1TP6m+5C2f9XAiW+shG2HR5ULRIN/IaZxnCBwXgUuu0P
/TWlxjXlOhVVsFMDE5L9katGwuhcnkeduoIOyTZ8D7xsj6xHSzq9lC33/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsIbOH4oTQMuNdi/Bnvnz7UCewMMB8GA1UdIwQY
MBaAFDxWjFnXqDGZw6eeoOg3W5Ru2ITiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEZhTVdkZW9NWm5EcDU2ZzZEZGJsRzdZaE9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82ZjM2YzItZDA1Yy00NDI1LWE5ZTQt
NWUzN2U3ZjNmMTVkLzEvUEZhTVdkZW9NWm5EcDU2ZzZEZGJsRzdZaE9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82ZjM2YzItZDA1Yy00NDI1LWE5ZTQtNWUzN2U3ZjNmMTVk
LzEvUEZhTVdkZW9NWm5EcDU2ZzZEZGJsRzdZaE9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc89oclms
tMcKqP803Q9w50I86/uD7XsIGSOP7YmFCFVVr4cF/XAGRIQmeEMBd0GOGzOs08e9
AS7SjdFIurvqR09nzpwbzDK5xKU/7VoAn2QYA7sjF/RoIs+oe2gFqOuh5OEkT6C1
f46w+XQzs55jlo8RdkW+NrJOwMCBh38wEP80PWD/Zmq7KP1O+1MeJCIKdIKFrbdx
0jYNMb8ADkY87mLs6rwEoxKPx+hbsUTvFCBRTV26ThBIEaRoxXQryvyovYwH+Kqc
UWY6aHT/JRNsu6HFfcdhlXOKSOqfEJos+ee6QLLtDq+ZzFkWCLdoYTd+nG4pA9Pd
WbqJ2w+X+agkbw==
-----END CERTIFICATE-----