Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
File:                     pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft (raw, json)
Hash identifier:          oxd4cdbjxpFBw33K6/iAcI74cB/GrG6NHcwQ8/zfYfU=
Subject key identifier:   EB:62:5F:4F:24:81:9D:8B:40:A5:86:F0:BA:DF:EC:63:42:6A:6C:78
Authority key identifier: A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9
Certificate issuer:       /CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
Certificate serial:       01962F0692C7B7839E7D2B0AB7A089DF994C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft
Manifest number:          1097
Signing time:             Sun 13 Apr 2025 12:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:22 +0000
Files and hashes:         1: 7MxIbmtB5wzuyNqJlVV50yXZZ2w.roa (hash: sSokJSwDE7TenrNiAqYNMhbgz0iCXtyPGRTOZYronAY=)
                          2: YVWuJ6FTMU1uU3iR7ed746pUzUU.roa (hash: oVu2kWcJUFQzXCLu/Vci/BnnMXJVo57f7gbHz7uSAXM=)
                          3: pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl (hash: Id9ibvYEjZ8UPXCBNwt30iwVaOBvy55zgSMVZ81P9aY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:92:c7:b7:83:9e:7d:2b:0a:b7:a0:89:df:99:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4b18f96aaa03567f22fc02c42a6935708655aa9
        Validity
            Not Before: Apr 13 12:01:22 2025 GMT
            Not After : Apr 14 12:01:22 2025 GMT
        Subject: CN=eb625f4f24819d8b40a586f0badfec63426a6c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:53:9d:c6:38:8a:07:9b:22:23:43:23:ed:92:
                    e3:65:69:1a:b2:7d:dd:6d:76:8a:f1:b3:47:8d:33:
                    3e:a4:55:f2:4e:e9:3e:a8:76:0b:32:d9:55:20:c6:
                    17:3a:da:70:2e:2a:eb:6b:17:58:93:2b:25:cb:bb:
                    b3:0a:9c:e2:f9:c3:a4:b1:9d:e4:ea:7e:c3:85:31:
                    ec:20:15:5b:a9:ac:7a:78:5d:59:23:0d:b1:cf:fd:
                    66:80:33:8c:fd:26:14:fa:1e:7e:50:67:b7:c0:c4:
                    83:81:25:ae:eb:5b:60:40:04:87:72:dd:c3:4b:7e:
                    2f:39:27:3d:f3:73:c5:c6:28:61:75:74:49:66:59:
                    b4:9c:be:b0:46:6a:a5:c4:09:94:b9:7e:e2:b8:53:
                    1e:a3:9e:36:21:7e:bd:9c:6f:55:18:e1:d4:55:48:
                    d0:e4:6c:b1:9c:f4:9c:d7:be:38:5e:a8:2a:92:a8:
                    09:67:80:51:e6:6b:db:5e:eb:8d:c2:55:43:fd:d0:
                    d4:ea:04:f4:3b:c3:68:78:5d:fe:22:bc:c6:6d:7b:
                    cb:81:d6:0f:4e:69:2a:c9:8f:61:30:11:a2:78:97:
                    35:27:4d:04:b2:62:00:29:d4:46:b5:fd:db:7a:94:
                    9f:6b:95:24:ed:bd:2c:89:6b:fb:6c:46:e4:0e:17:
                    0e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:62:5F:4F:24:81:9D:8B:40:A5:86:F0:BA:DF:EC:63:42:6A:6C:78
            X509v3 Authority Key Identifier:
                keyid:A4:B1:8F:96:AA:A0:35:67:F2:2F:C0:2C:42:A6:93:57:08:65:5A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLGPlqqgNWfyL8AsQqaTVwhlWqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6820f9-4459-4858-98ce-c694f0eacba6/1/pLGPlqqgNWfyL8AsQqaTVwhlWqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:ee:1e:b6:88:af:9b:fc:a0:74:10:5a:e0:e2:4a:17:da:bf:
         12:7c:51:39:d0:a2:89:ed:58:6f:46:7e:5b:c2:b0:2a:08:b3:
         d4:3a:12:4b:52:95:02:db:b1:cd:fe:57:91:94:63:ab:ff:a2:
         23:bf:74:e9:68:6d:92:ab:95:ca:1c:42:13:41:96:af:9f:1d:
         34:2a:fb:98:02:4c:ce:9c:63:dc:59:bc:14:5f:62:54:e2:b8:
         10:4d:b0:31:57:27:0a:3f:ad:2f:cd:ca:a8:55:40:a7:ba:9f:
         3c:fd:92:5e:43:6c:73:90:9e:4b:72:21:b0:91:c9:0d:10:ff:
         0a:c3:18:81:04:8e:7e:ff:cf:0c:43:df:3c:c6:b6:04:29:fc:
         24:b3:05:64:c2:67:ad:5f:eb:48:ec:ee:c9:1b:58:fe:4d:54:
         71:66:02:29:13:92:54:c0:ea:11:9e:e8:e8:8c:3f:f1:6a:fc:
         b6:e9:77:63:89:4d:2b:d9:e4:9a:86:19:4b:22:66:87:4f:be:
         da:f6:9d:f3:33:68:c5:2a:4a:9f:a5:f3:43:a8:04:e2:21:82:
         2a:ef:05:1e:54:8f:88:bb:d8:45:89:8a:92:41:31:e4:b2:19:
         76:c7:e1:c0:ea:9e:49:fa:69:95:34:05:6d:05:25:ea:3c:91:
         54:9b:a0:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBpLHt4OefSsKt6CJ35lMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0YjE4Zjk2YWFhMDM1NjdmMjJmYzAyYzQyYTY5MzU3MDg2
NTVhYTkwHhcNMjUwNDEzMTIwMTIyWhcNMjUwNDE0MTIwMTIyWjAzMTEwLwYDVQQD
EyhlYjYyNWY0ZjI0ODE5ZDhiNDBhNTg2ZjBiYWRmZWM2MzQyNmE2Yzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FOdxjiKB5siI0Mj7ZLjZWkasn3d
bXaK8bNHjTM+pFXyTuk+qHYLMtlVIMYXOtpwLirraxdYkysly7uzCpzi+cOksZ3k
6n7DhTHsIBVbqax6eF1ZIw2xz/1mgDOM/SYU+h5+UGe3wMSDgSWu61tgQASHct3D
S34vOSc983PFxihhdXRJZlm0nL6wRmqlxAmUuX7iuFMeo542IX69nG9VGOHUVUjQ
5GyxnPSc1744XqgqkqgJZ4BR5mvbXuuNwlVD/dDU6gT0O8NoeF3+IrzGbXvLgdYP
TmkqyY9hMBGieJc1J00EsmIAKdRGtf3bepSfa5Uk7b0siWv7bEbkDhcOowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtiX08kgZ2LQKWG8Lrf7GNCamx4MB8GA1UdIwQY
MBaAFKSxj5aqoDVn8i/ALEKmk1cIZVqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcExHUGxxcWdOV2Z5TDhBc1FxYVRWd2hsV3FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82ODIwZjktNDQ1OS00ODU4LTk4Y2Ut
YzY5NGYwZWFjYmE2LzEvcExHUGxxcWdOV2Z5TDhBc1FxYVRWd2hsV3FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC82ODIwZjktNDQ1OS00ODU4LTk4Y2UtYzY5NGYwZWFjYmE2
LzEvcExHUGxxcWdOV2Z5TDhBc1FxYVRWd2hsV3FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGu4etoiv
m/ygdBBa4OJKF9q/EnxROdCiie1Yb0Z+W8KwKgiz1DoSS1KVAtuxzf5XkZRjq/+i
I7906WhtkquVyhxCE0GWr58dNCr7mAJMzpxj3Fm8FF9iVOK4EE2wMVcnCj+tL83K
qFVAp7qfPP2SXkNsc5CeS3IhsJHJDRD/CsMYgQSOfv/PDEPfPMa2BCn8JLMFZMJn
rV/rSOzuyRtY/k1UcWYCKROSVMDqEZ7o6Iw/8Wr8tul3Y4lNK9nkmoYZSyJmh0++
2vad8zNoxSpKn6XzQ6gE4iGCKu8FHlSPiLvYRYmKkkEx5LIZdsfhwOqeSfpplTQF
bQUl6jyRVJugmg==
-----END CERTIFICATE-----