Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft
File:                     T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft (raw, json)
Hash identifier:          /Z0R13WKmbAxpy3nmBRK5nN1VxSQHyCNRiBgb+eU0Rc=
Subject key identifier:   AD:D1:9A:19:73:44:1C:50:18:24:1A:F7:49:8E:B0:79:23:F1:01:4E
Authority key identifier: 4F:A8:93:E3:3A:82:1F:F6:6D:38:F0:EB:CE:49:91:1F:3A:5F:96:4E
Certificate issuer:       /CN=4fa893e33a821ff66d38f0ebce49911f3a5f964e
Certificate serial:       01962F741F7543CA5CEA4820571061339F1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T6iT4zqCH_ZtOPDrzkmRHzpflk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft
Manifest number:          05CF
Signing time:             Sun 13 Apr 2025 14:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:01 +0000
Files and hashes:         1: T6iT4zqCH_ZtOPDrzkmRHzpflk4.crl (hash: +oPsghcf1dWFCVL6oYk6IMZYMtCYmBPEGEw5FXhjSXE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:1f:75:43:ca:5c:ea:48:20:57:10:61:33:9f:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fa893e33a821ff66d38f0ebce49911f3a5f964e
        Validity
            Not Before: Apr 13 14:01:01 2025 GMT
            Not After : Apr 14 14:01:01 2025 GMT
        Subject: CN=add19a1973441c5018241af7498eb07923f1014e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:56:4d:91:8f:4e:cf:5d:68:1d:f1:3e:df:c1:
                    d6:38:3f:21:12:0a:da:c9:6f:ac:b0:88:dd:be:ef:
                    51:08:46:68:64:d6:b2:7b:95:c6:86:02:65:3f:79:
                    0d:29:eb:67:62:b9:a3:77:6f:1f:21:e4:02:50:ee:
                    25:72:cb:b5:55:d3:9b:2c:a8:8f:05:ed:cb:b3:d4:
                    73:99:54:ad:46:a2:6b:79:67:d0:de:76:2b:ab:ff:
                    e7:5d:68:df:54:4c:bf:f8:14:f5:e7:66:0c:e3:fc:
                    10:3c:14:21:23:09:40:00:61:40:00:2a:84:10:4a:
                    ef:66:c5:d0:f0:ce:6f:cb:f4:09:cb:dd:7e:b5:a0:
                    95:3d:2c:b1:e9:6f:87:0d:2e:93:c1:65:44:7a:69:
                    03:b7:c6:ff:60:47:2c:c5:4b:88:cb:5a:ef:c2:49:
                    38:f3:ec:5f:b3:e9:c2:05:f2:09:bf:86:19:b6:88:
                    ef:be:1e:b7:05:a2:73:c8:28:93:98:41:7b:28:24:
                    5e:cc:bd:05:c7:9f:35:92:37:6f:f6:73:57:74:44:
                    0e:74:77:3d:22:5e:e1:2b:8c:a2:1b:d1:3d:32:24:
                    a7:7a:95:79:d5:8a:76:40:84:25:5b:31:bf:45:4b:
                    47:17:07:8a:fd:cd:f6:d2:f7:47:00:23:8e:e2:56:
                    40:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D1:9A:19:73:44:1C:50:18:24:1A:F7:49:8E:B0:79:23:F1:01:4E
            X509v3 Authority Key Identifier:
                keyid:4F:A8:93:E3:3A:82:1F:F6:6D:38:F0:EB:CE:49:91:1F:3A:5F:96:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T6iT4zqCH_ZtOPDrzkmRHzpflk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:e3:c0:02:85:ef:08:1e:f1:fb:87:7e:ee:63:f9:71:e7:bc:
         6a:4b:43:61:d2:a6:57:29:21:95:aa:fa:35:18:35:41:02:b4:
         4c:4a:b9:58:4c:c0:1a:71:24:85:04:08:88:7d:60:b3:3d:33:
         8d:6e:0b:80:38:c3:f1:ba:eb:bc:af:eb:fa:dd:67:cc:6d:f5:
         a7:ae:91:e9:6d:4b:4b:4f:01:81:ee:86:f2:56:7a:76:2e:6c:
         b4:34:2a:c9:98:03:dd:f5:f4:7e:94:8e:6c:bc:bf:e4:a7:e9:
         a7:d6:9a:3c:1f:d3:b9:2b:c3:46:81:ea:f2:22:85:42:a5:2f:
         6d:11:ad:2f:21:a8:e0:a5:c0:c2:75:10:5c:9a:27:01:c8:94:
         e2:c9:b0:a0:d7:4b:ca:3a:9c:6f:26:17:e6:97:56:c7:9a:f3:
         35:67:23:a1:ba:fa:38:be:88:74:77:57:50:fc:2c:d1:c9:61:
         9c:e3:13:65:1a:01:fe:45:b7:2f:cb:35:24:12:df:fe:29:bc:
         b1:47:5e:fb:8f:3f:ee:ca:42:82:41:f8:79:6d:3f:ca:7e:59:
         d0:39:1e:ef:fe:8a:f8:0f:49:5b:8b:32:a8:34:dd:55:00:f9:
         10:20:7a:1b:a8:c7:08:3f:7d:40:64:ac:57:64:fe:94:81:41:
         1d:de:ac:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdB91Q8pc6kggVxBhM58fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYTg5M2UzM2E4MjFmZjY2ZDM4ZjBlYmNlNDk5MTFmM2E1
Zjk2NGUwHhcNMjUwNDEzMTQwMTAxWhcNMjUwNDE0MTQwMTAxWjAzMTEwLwYDVQQD
EyhhZGQxOWExOTczNDQxYzUwMTgyNDFhZjc0OThlYjA3OTIzZjEwMTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VZNkY9Oz11oHfE+38HWOD8hEgra
yW+ssIjdvu9RCEZoZNaye5XGhgJlP3kNKetnYrmjd28fIeQCUO4lcsu1VdObLKiP
Be3Ls9RzmVStRqJreWfQ3nYrq//nXWjfVEy/+BT152YM4/wQPBQhIwlAAGFAACqE
EErvZsXQ8M5vy/QJy91+taCVPSyx6W+HDS6TwWVEemkDt8b/YEcsxUuIy1rvwkk4
8+xfs+nCBfIJv4YZtojvvh63BaJzyCiTmEF7KCRezL0Fx581kjdv9nNXdEQOdHc9
Il7hK4yiG9E9MiSnepV51Yp2QIQlWzG/RUtHFweK/c320vdHACOO4lZAJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3RmhlzRBxQGCQa90mOsHkj8QFOMB8GA1UdIwQY
MBaAFE+ok+M6gh/2bTjw685JkR86X5ZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDZpVDR6cUNIX1p0T1BEcnprbVJIenBmbGs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9iODVjYWYtZjIwZS00YjY3LTk4YTAt
ZmY3ZjQ4ZjkzZjAxLzEvVDZpVDR6cUNIX1p0T1BEcnprbVJIenBmbGs0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My9iODVjYWYtZjIwZS00YjY3LTk4YTAtZmY3ZjQ4ZjkzZjAx
LzEvVDZpVDR6cUNIX1p0T1BEcnprbVJIenBmbGs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbOPAAoXv
CB7x+4d+7mP5cee8aktDYdKmVykhlar6NRg1QQK0TEq5WEzAGnEkhQQIiH1gsz0z
jW4LgDjD8brrvK/r+t1nzG31p66R6W1LS08Bge6G8lZ6di5stDQqyZgD3fX0fpSO
bLy/5Kfpp9aaPB/TuSvDRoHq8iKFQqUvbRGtLyGo4KXAwnUQXJonAciU4smwoNdL
yjqcbyYX5pdWx5rzNWcjobr6OL6IdHdXUPws0clhnOMTZRoB/kW3L8s1JBLf/im8
sUde+48/7spCgkH4eW0/yn5Z0Dke7/6K+A9JW4syqDTdVQD5ECB6G6jHCD99QGSs
V2T+lIFBHd6sHw==
-----END CERTIFICATE-----