Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
File:                     v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft (raw, json)
Hash identifier:          KRolSuO24gMxxlPpTrUV/57DuZ8+yy9i6dcaLRDKqKY=
Subject key identifier:   E1:6C:58:0F:1D:0D:E6:8D:C3:7F:12:04:38:0F:B2:67:6E:E8:5D:02
Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
Certificate issuer:       /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Certificate serial:       01962E991ADE0509BBCA9EB02FB012BD060D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
Manifest number:          037F
Signing time:             Sun 13 Apr 2025 10:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:47 +0000
Files and hashes:         1: 2XDoWT6vqRxMHQPV7KWd6BUwSSk.roa (hash: 0NMEPsyPsfD94IuuxhO23wYkcwhlu/DvJeg9y5zCzro=)
                          2: CKaIKBYIzCcPY90H81mUnrr8ieM.roa (hash: zGQhWm6ZoMgG5VPOqkXUgqVBvbX75YOW4WFE51m4zok=)
                          3: RaKLAB2smn45UsK3_N7EvTP4-a8.roa (hash: UNiaEX5/m7HFBIb1U1qvg3duo49HjTZsPkXySBHPnoA=)
                          4: fQHPEJqUdVp5UqVFRZ1g0Y99-5Q.roa (hash: eirnjkyG4bJYmiDcYHGtnlfuQCFWvSfjnGiCY82vyyg=)
                          5: kJTqxuBl-Q6syRY_DacCTAczGBU.roa (hash: 6et1FxTpD/+A6Pbq4fE+qn0f8s2ncSLUCy+g6P+v7sg=)
                          6: v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl (hash: Q9s2+2tbWn4ML59XcjVtL9bdoQOrbNRrO9Ji25u6ik0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:1a:de:05:09:bb:ca:9e:b0:2f:b0:12:bd:06:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
        Validity
            Not Before: Apr 13 10:01:47 2025 GMT
            Not After : Apr 14 10:01:47 2025 GMT
        Subject: CN=e16c580f1d0de68dc37f1204380fb2676ee85d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a2:9c:6b:53:4d:ad:8b:66:ac:84:b4:e0:b7:
                    71:ea:4d:34:31:ba:c5:2a:38:89:29:2d:80:6a:8b:
                    c3:fb:76:b7:4d:1b:03:99:98:b1:56:ca:b1:83:f1:
                    74:e7:fe:b2:d8:0b:d5:76:49:64:ab:ad:3d:46:cc:
                    49:b1:40:74:ec:0e:66:e0:73:9b:89:cc:68:56:f0:
                    e9:00:2f:39:67:c3:6a:28:f2:3b:29:e4:1a:58:ee:
                    fd:ae:ae:f4:80:7c:d1:d0:80:98:23:ec:1d:4f:1b:
                    ce:33:9d:6f:8b:39:d8:40:6d:0c:24:2e:f5:98:98:
                    77:fd:59:ef:83:50:68:31:d7:7e:d6:28:2e:0f:83:
                    25:28:9a:d4:05:52:24:0c:37:d6:41:f8:11:3a:be:
                    38:45:c8:75:c1:03:67:7a:2d:12:e3:89:72:08:ac:
                    00:0a:35:44:38:25:a4:74:02:bd:6c:48:11:f9:38:
                    87:f6:ae:91:01:53:be:4b:31:1c:e0:6d:af:49:51:
                    7a:4b:37:30:6b:a0:8f:05:24:e7:30:39:2e:34:1c:
                    12:f8:72:bf:54:2f:45:49:6c:bd:32:b6:a8:6b:08:
                    37:bf:59:26:b3:57:07:17:c3:cd:27:fc:4e:62:4b:
                    ed:ff:99:83:bc:51:ef:6a:ac:1a:ca:fd:89:5d:21:
                    b6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:6C:58:0F:1D:0D:E6:8D:C3:7F:12:04:38:0F:B2:67:6E:E8:5D:02
            X509v3 Authority Key Identifier:
                keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:62:2e:20:92:19:a6:5d:3e:fa:2a:80:c5:90:ce:c5:45:c7:
         0d:46:92:be:a4:eb:e7:97:8f:ab:80:6d:90:1a:76:a3:1f:51:
         a8:19:e1:6a:c0:6a:a7:f5:20:5f:b7:9b:eb:1c:02:2b:eb:51:
         92:39:3a:9b:37:51:51:f6:5e:60:f3:b8:8c:cd:7b:f1:d7:27:
         f9:cc:1c:12:2b:bf:51:d7:5d:67:2b:e3:c0:a9:9b:cd:25:cf:
         75:13:b8:10:0d:33:b0:cd:c6:b4:31:f4:7b:1f:68:d9:74:d2:
         be:6a:61:fb:a5:80:81:61:7e:72:df:60:98:63:d2:f3:cc:72:
         4e:e6:7f:61:77:87:b6:07:c1:00:b1:73:3b:cf:db:21:08:3b:
         b0:07:9c:9a:15:5d:f1:26:11:d0:fd:84:83:cf:a0:15:e3:cd:
         38:86:78:b5:08:b5:eb:31:6b:74:6f:0e:3f:b6:40:d6:ee:ce:
         e5:c2:5c:b7:8f:51:a2:19:05:9d:da:ab:fd:a4:40:d5:53:50:
         cf:e1:93:e1:0d:56:bd:79:f2:da:ca:b5:c7:b4:12:ef:ee:bb:
         d3:ff:4b:9f:79:e6:f0:27:4f:8b:a8:62:f1:b2:21:16:c7:7d:
         f1:fc:a8:d7:1d:c3:10:3f:c9:1e:03:d1:41:d7:75:9b:52:7f:
         a6:46:8d:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumRreBQm7yp6wL7ASvQYNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNDFhZGRjOWE0ZWVhMjQ2ZDQyZjk4YzdjNzJiMzBiNjhk
NjdhOTcwHhcNMjUwNDEzMTAwMTQ3WhcNMjUwNDE0MTAwMTQ3WjAzMTEwLwYDVQQD
EyhlMTZjNTgwZjFkMGRlNjhkYzM3ZjEyMDQzODBmYjI2NzZlZTg1ZDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6Kca1NNrYtmrIS04Ldx6k00MbrF
KjiJKS2AaovD+3a3TRsDmZixVsqxg/F05/6y2AvVdklkq609RsxJsUB07A5m4HOb
icxoVvDpAC85Z8NqKPI7KeQaWO79rq70gHzR0ICYI+wdTxvOM51viznYQG0MJC71
mJh3/Vnvg1BoMdd+1iguD4MlKJrUBVIkDDfWQfgROr44Rch1wQNnei0S44lyCKwA
CjVEOCWkdAK9bEgR+TiH9q6RAVO+SzEc4G2vSVF6Szcwa6CPBSTnMDkuNBwS+HK/
VC9FSWy9Mraoawg3v1kms1cHF8PNJ/xOYkvt/5mDvFHvaqwayv2JXSG28QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFsWA8dDeaNw38SBDgPsmdu6F0CMB8GA1UdIwQY
MBaAFL9BrdyaTuokbUL5jHxyswto1nqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83MGZjYjMtODMwMi00MWU0LTgzNmEt
ZWVhZDUwOGJlNGVlLzEvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83MGZjYjMtODMwMi00MWU0LTgzNmEtZWVhZDUwOGJlNGVl
LzEvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2IuIJIZ
pl0++iqAxZDOxUXHDUaSvqTr55ePq4BtkBp2ox9RqBnhasBqp/UgX7eb6xwCK+tR
kjk6mzdRUfZeYPO4jM178dcn+cwcEiu/UdddZyvjwKmbzSXPdRO4EA0zsM3GtDH0
ex9o2XTSvmph+6WAgWF+ct9gmGPS88xyTuZ/YXeHtgfBALFzO8/bIQg7sAecmhVd
8SYR0P2Eg8+gFePNOIZ4tQi16zFrdG8OP7ZA1u7O5cJct49RohkFndqr/aRA1VNQ
z+GT4Q1WvXny2sq1x7QS7+670/9Ln3nm8CdPi6hi8bIhFsd98fyo1x3DED/JHgPR
Qdd1m1J/pkaNPA==
-----END CERTIFICATE-----