Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
File:                     ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft (raw, json)
Hash identifier:          FNfNl0uwBAiiVbPUBPupaprgVMtBkhxQz2r6y/FD8+8=
Subject key identifier:   6B:5A:CA:11:87:47:03:CA:27:BF:F1:D9:F0:8B:93:0D:67:E8:D9:DD
Authority key identifier: A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
Certificate issuer:       /CN=a69749fa2337db33a76474eb812c034e30509d2a
Certificate serial:       01962DF3B4E838ECA16212C6B6C0A00E5AA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
Manifest number:          045C
Signing time:             Sun 13 Apr 2025 07:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:08 +0000
Files and hashes:         1: AKpMQvIIqQzXRs3Ululs7jvONDY.roa (hash: BIy70VCzVM+Xa+CdmKbiFZkREDOaRaKjJ7xUey551TY=)
                          2: ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl (hash: zFZuPAfPtCrp3TFWnT2MWnuimP1/osrQVkQ2ccEaxqU=)
                          3: xwhdiFLdj-4M8l9XUnyeFRJXGwQ.roa (hash: VoSzy1kKxVH6beyOekb646N9QsT3/EG5ENUuXQtb21o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b4:e8:38:ec:a1:62:12:c6:b6:c0:a0:0e:5a:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a69749fa2337db33a76474eb812c034e30509d2a
        Validity
            Not Before: Apr 13 07:01:08 2025 GMT
            Not After : Apr 14 07:01:08 2025 GMT
        Subject: CN=6b5aca11874703ca27bff1d9f08b930d67e8d9dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:19:fe:59:4c:de:b0:fe:83:82:a3:87:d0:2d:
                    e3:8f:fe:9a:7e:80:42:45:be:14:d7:f2:f8:81:26:
                    3a:20:a0:9c:7f:50:19:f0:6d:77:a8:60:80:18:5f:
                    05:ac:3f:87:b3:6f:9e:87:41:38:4c:31:f4:8a:bc:
                    e8:cb:59:f3:86:be:65:1b:70:62:28:5b:ce:2b:d6:
                    6b:b3:cc:1f:46:5f:9c:64:6b:5c:55:df:78:4f:8d:
                    45:99:81:8c:ab:11:d5:7c:31:23:c6:b4:b8:85:70:
                    39:b0:7b:d1:d3:2d:8e:ac:0f:20:96:57:06:7e:3a:
                    b6:1b:56:33:95:4b:ef:86:38:3f:e4:24:32:8b:73:
                    07:0f:b3:5a:a5:3f:f9:ed:02:87:53:b5:ef:5a:ae:
                    1f:46:01:5d:71:ec:8e:eb:5a:81:44:c4:3a:a3:56:
                    22:1b:5a:80:52:3c:41:60:ee:87:c8:9b:04:19:e4:
                    df:2d:94:b6:e3:dc:8f:47:26:e6:53:69:d1:93:75:
                    6b:55:68:70:98:c4:05:ed:45:62:d1:08:d4:ad:c4:
                    0f:c1:ce:3d:40:71:e8:56:91:1a:de:25:fb:02:52:
                    c0:29:87:55:2e:1c:1e:5d:39:12:bc:9a:08:81:fc:
                    73:a2:2b:fc:0b:8c:51:ea:83:68:d5:8f:1a:be:02:
                    e3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5A:CA:11:87:47:03:CA:27:BF:F1:D9:F0:8B:93:0D:67:E8:D9:DD
            X509v3 Authority Key Identifier:
                keyid:A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:1e:e8:87:e7:fb:8b:ca:28:de:38:0a:6c:70:75:f4:30:f5:
         ec:d8:dc:1d:f3:5d:f9:f1:f3:74:f4:3c:73:e3:34:af:99:0e:
         26:68:5d:32:05:18:48:49:19:2e:bf:95:82:30:93:66:40:0e:
         d2:b6:fe:62:70:4c:c6:df:9e:a9:69:16:a0:24:05:0e:90:89:
         92:01:27:a2:74:aa:9c:f1:6b:88:ad:b8:b3:8c:f6:6b:ad:ee:
         46:74:b2:e6:21:ea:92:63:05:74:4b:9e:1c:4d:1d:f4:bb:c2:
         c8:69:09:1a:d3:6c:98:9a:0b:ba:b6:c0:fa:39:d8:e4:d2:60:
         ae:ee:26:6a:88:41:d8:a0:95:5b:c3:d0:26:2b:20:e7:4c:76:
         8e:15:f5:07:3c:b9:af:27:1e:0f:b4:e8:b0:3f:10:f4:ee:a2:
         4a:40:1e:78:e5:b7:d7:71:d4:19:e8:b0:f7:6b:0e:55:cb:4e:
         37:15:3f:ee:18:72:d7:a9:24:45:01:63:f8:2b:03:dd:6d:14:
         25:12:75:c0:fe:0e:c1:76:5a:4e:27:45:32:1b:42:b0:51:89:
         73:15:4d:da:5c:8e:44:da:43:31:ae:08:f2:f5:18:97:f7:9e:
         9d:87:4a:7f:9b:91:0e:09:45:01:d2:4d:ea:b2:d2:77:ad:3d:
         75:35:b3:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt87ToOOyhYhLGtsCgDlqmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2OTc0OWZhMjMzN2RiMzNhNzY0NzRlYjgxMmMwMzRlMzA1
MDlkMmEwHhcNMjUwNDEzMDcwMTA4WhcNMjUwNDE0MDcwMTA4WjAzMTEwLwYDVQQD
Eyg2YjVhY2ExMTg3NDcwM2NhMjdiZmYxZDlmMDhiOTMwZDY3ZThkOWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBn+WUzesP6DgqOH0C3jj/6afoBC
Rb4U1/L4gSY6IKCcf1AZ8G13qGCAGF8FrD+Hs2+eh0E4TDH0irzoy1nzhr5lG3Bi
KFvOK9Zrs8wfRl+cZGtcVd94T41FmYGMqxHVfDEjxrS4hXA5sHvR0y2OrA8gllcG
fjq2G1YzlUvvhjg/5CQyi3MHD7NapT/57QKHU7XvWq4fRgFdceyO61qBRMQ6o1Yi
G1qAUjxBYO6HyJsEGeTfLZS249yPRybmU2nRk3VrVWhwmMQF7UVi0QjUrcQPwc49
QHHoVpEa3iX7AlLAKYdVLhweXTkSvJoIgfxzoiv8C4xR6oNo1Y8avgLjCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtayhGHRwPKJ7/x2fCLkw1n6NndMB8GA1UdIwQY
MBaAFKaXSfojN9szp2R064EsA04wUJ0qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHBkSi1pTTMyek9uWkhUcmdTd0RUakJRblNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iMWJmNTctNjc5Zi00NTY0LWI3MDEt
Y2IyOTY3MDhkZWM4LzEvcHBkSi1pTTMyek9uWkhUcmdTd0RUakJRblNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9iMWJmNTctNjc5Zi00NTY0LWI3MDEtY2IyOTY3MDhkZWM4
LzEvcHBkSi1pTTMyek9uWkhUcmdTd0RUakJRblNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADR7oh+f7
i8oo3jgKbHB19DD17NjcHfNd+fHzdPQ8c+M0r5kOJmhdMgUYSEkZLr+VgjCTZkAO
0rb+YnBMxt+eqWkWoCQFDpCJkgEnonSqnPFriK24s4z2a63uRnSy5iHqkmMFdEue
HE0d9LvCyGkJGtNsmJoLurbA+jnY5NJgru4maohB2KCVW8PQJisg50x2jhX1Bzy5
ryceD7TosD8Q9O6iSkAeeOW313HUGeiw92sOVctONxU/7hhy16kkRQFj+CsD3W0U
JRJ1wP4OwXZaTidFMhtCsFGJcxVN2lyORNpDMa4I8vUYl/eenYdKf5uRDglFAdJN
6rLSd609dTWzlg==
-----END CERTIFICATE-----