Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
File:                     bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft (raw, json)
Hash identifier:          icuJPqXIPd0uoj4GQfHqAbyKqWV+g6mj2Uj4j3niYLQ=
Subject key identifier:   16:B1:60:AF:24:47:D6:86:32:E3:F3:6E:82:BD:B7:E6:18:77:9C:CF
Authority key identifier: 6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54
Certificate issuer:       /CN=6c895335ba98f7c626f0c819e9e2894c61d44754
Certificate serial:       01962F06D4522C6C073146850A41FAACF6E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
Manifest number:          0921
Signing time:             Sun 13 Apr 2025 12:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:38 +0000
Files and hashes:         1: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl (hash: JUDsS8IVe4Rspb6FweUVEe2/UZOfze5Sndo9o+2qyDo=)
                          2: pE_MPWSO2KtGb_d1FHNpKYmtUdU.roa (hash: zv4aepR6TBKlEBTPf/7SbPyiKj3XM1LCzYruoFBSb5I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d4:52:2c:6c:07:31:46:85:0a:41:fa:ac:f6:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c895335ba98f7c626f0c819e9e2894c61d44754
        Validity
            Not Before: Apr 13 12:01:38 2025 GMT
            Not After : Apr 14 12:01:38 2025 GMT
        Subject: CN=16b160af2447d68632e3f36e82bdb7e618779ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:75:eb:b3:4b:73:24:65:f6:a7:fb:d1:9b:03:
                    a7:86:19:69:9c:ec:cc:b9:a6:88:e7:03:5b:35:3f:
                    af:b4:28:7b:f5:12:da:88:ce:95:e6:dd:7e:28:23:
                    20:16:85:a4:04:b9:6b:77:07:15:36:73:ff:13:ef:
                    ea:f1:9d:eb:21:5b:9d:93:1f:6f:00:6f:4a:4a:b2:
                    7d:f8:ab:41:b2:85:30:e6:de:2f:ad:31:ee:ba:98:
                    56:39:fd:42:75:69:03:c8:f5:f8:d6:29:62:e4:54:
                    05:59:17:3c:71:a5:08:82:98:fb:95:6e:92:b5:20:
                    cc:de:6d:37:71:9f:ef:c9:81:78:89:bb:42:a4:0e:
                    f7:0d:d9:2f:79:e9:e6:76:53:4e:86:45:f0:f0:92:
                    80:ba:62:4c:ab:91:35:d9:9e:6a:23:d1:0e:85:15:
                    5c:cd:e3:b6:b3:bf:50:35:4a:5e:7c:76:65:86:b8:
                    23:0c:8e:62:57:94:23:7f:b2:a6:f3:b9:e1:20:96:
                    c0:d6:91:0b:62:88:6a:96:60:76:4b:be:47:3f:8f:
                    01:12:f9:a8:29:ff:6e:54:88:a6:1f:7c:d4:ba:50:
                    db:11:b0:9d:5f:af:71:38:bf:ff:7c:21:93:df:73:
                    62:5d:74:39:68:74:54:f7:87:64:63:99:de:00:99:
                    d3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B1:60:AF:24:47:D6:86:32:E3:F3:6E:82:BD:B7:E6:18:77:9C:CF
            X509v3 Authority Key Identifier:
                keyid:6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:f7:c4:b3:99:23:cb:dd:5a:0f:54:34:64:ce:3d:3e:38:68:
         5c:3a:92:50:5e:0c:b0:d2:e3:41:bd:d5:08:d2:c1:0f:e7:dc:
         8c:61:44:0b:91:e4:fd:fb:bf:de:d2:e3:b0:bb:e0:ba:73:73:
         b8:83:9e:62:2e:11:35:e9:04:71:eb:58:86:7b:9b:4c:dd:65:
         4e:dd:55:54:f4:d5:9b:04:66:be:70:94:0e:99:92:a1:06:89:
         31:6a:d1:c9:f0:2e:ef:52:0a:5b:80:e7:fd:b0:c6:a5:5c:9f:
         cd:41:10:8e:75:22:7c:79:c5:36:31:90:2f:8e:cd:05:1a:eb:
         5e:34:9f:3c:13:0a:6b:eb:2c:3b:4a:5f:60:a2:3f:48:c2:0d:
         87:72:bf:08:39:77:76:95:a9:e9:b9:7a:6a:41:93:b1:20:be:
         45:7a:1f:12:78:e5:6d:13:da:e0:ab:5c:bf:6c:f4:72:95:c0:
         dc:8e:63:96:4c:5c:b4:3c:4f:07:87:22:d3:97:52:f9:d1:9c:
         ed:d6:da:5c:75:e0:b1:87:4f:5f:d1:9e:d1:d7:2c:fb:35:59:
         1b:06:a4:85:46:c7:0e:7d:0d:c0:72:47:b5:0f:26:cf:e6:bb:
         cb:c2:79:41:d3:0e:cd:92:b6:05:ab:c5:c8:a4:fc:b6:c5:b0:
         b2:05:f3:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBtRSLGwHMUaFCkH6rPblMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjODk1MzM1YmE5OGY3YzYyNmYwYzgxOWU5ZTI4OTRjNjFk
NDQ3NTQwHhcNMjUwNDEzMTIwMTM4WhcNMjUwNDE0MTIwMTM4WjAzMTEwLwYDVQQD
EygxNmIxNjBhZjI0NDdkNjg2MzJlM2YzNmU4MmJkYjdlNjE4Nzc5Y2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3Xrs0tzJGX2p/vRmwOnhhlpnOzM
uaaI5wNbNT+vtCh79RLaiM6V5t1+KCMgFoWkBLlrdwcVNnP/E+/q8Z3rIVudkx9v
AG9KSrJ9+KtBsoUw5t4vrTHuuphWOf1CdWkDyPX41ili5FQFWRc8caUIgpj7lW6S
tSDM3m03cZ/vyYF4ibtCpA73DdkveenmdlNOhkXw8JKAumJMq5E12Z5qI9EOhRVc
zeO2s79QNUpefHZlhrgjDI5iV5Qjf7Km87nhIJbA1pELYohqlmB2S75HP48BEvmo
Kf9uVIimH3zUulDbEbCdX69xOL//fCGT33NiXXQ5aHRU94dkY5neAJnTmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBaxYK8kR9aGMuPzboK9t+YYd5zPMB8GA1UdIwQY
MBaAFGyJUzW6mPfGJvDIGeniiUxh1EdUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklsVE5icVk5OFltOE1nWjZlS0pUR0hVUjFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yYTU1ZjUtM2NkYy00M2VhLTk4MDMt
NzRlZTgzNzM2ZTk3LzEvYklsVE5icVk5OFltOE1nWjZlS0pUR0hVUjFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8yYTU1ZjUtM2NkYy00M2VhLTk4MDMtNzRlZTgzNzM2ZTk3
LzEvYklsVE5icVk5OFltOE1nWjZlS0pUR0hVUjFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcPfEs5kj
y91aD1Q0ZM49PjhoXDqSUF4MsNLjQb3VCNLBD+fcjGFEC5Hk/fu/3tLjsLvgunNz
uIOeYi4RNekEcetYhnubTN1lTt1VVPTVmwRmvnCUDpmSoQaJMWrRyfAu71IKW4Dn
/bDGpVyfzUEQjnUifHnFNjGQL47NBRrrXjSfPBMKa+ssO0pfYKI/SMINh3K/CDl3
dpWp6bl6akGTsSC+RXofEnjlbRPa4Ktcv2z0cpXA3I5jlkxctDxPB4ci05dS+dGc
7dbaXHXgsYdPX9Ge0dcs+zVZGwakhUbHDn0NwHJHtQ8mz+a7y8J5QdMOzZK2BavF
yKT8tsWwsgXz+w==
-----END CERTIFICATE-----