Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
File:                     v141bOg5-NOTBn0fCbfdHFWgHlc.mft (raw, json)
Hash identifier:          G68KMFVsSaeWOIWWvzi7IsO58lFCVdXHp8QlpSTb9Ss=
Subject key identifier:   F9:00:9D:DD:3F:CF:18:1F:FB:24:8D:06:0F:F1:23:72:81:CE:1F:79
Authority key identifier: BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57
Certificate issuer:       /CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57
Certificate serial:       01962DF3AFA8D8C1ADF481B0443CE291E966
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
Manifest number:          01E1
Signing time:             Sun 13 Apr 2025 07:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:06 +0000
Files and hashes:         1: v141bOg5-NOTBn0fCbfdHFWgHlc.crl (hash: rFSYMHQKs4p98A2+UGoudyzTYCjQRxxgYjziD+iEYv0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:af:a8:d8:c1:ad:f4:81:b0:44:3c:e2:91:e9:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57
        Validity
            Not Before: Apr 13 07:01:06 2025 GMT
            Not After : Apr 14 07:01:06 2025 GMT
        Subject: CN=f9009ddd3fcf181ffb248d060ff1237281ce1f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1d:41:4d:85:1f:7b:25:49:1a:fc:3c:c7:16:
                    9b:57:47:58:57:ed:1b:f7:b8:4d:fc:c5:1a:66:6f:
                    2a:c8:08:ee:a6:c6:a5:55:82:32:9e:67:73:6c:37:
                    42:c5:9e:4b:22:19:12:bb:cc:9d:88:58:e2:7d:43:
                    cd:d8:70:68:c9:19:60:49:41:91:09:70:83:ac:63:
                    de:3a:15:05:70:d1:5e:84:03:11:48:63:3f:aa:a1:
                    97:27:c5:92:5d:22:5b:bb:22:4a:b4:47:fe:19:ec:
                    48:10:d1:4d:60:22:30:17:90:47:2d:bb:b4:41:cd:
                    3d:99:5b:7f:05:91:a6:e4:92:65:7c:e1:89:e8:ff:
                    a4:6e:53:79:cf:25:91:ea:78:88:4e:2c:31:02:b2:
                    69:9c:3a:ec:29:61:5d:6f:bd:d3:64:ef:ef:73:ab:
                    4c:28:6f:fd:a8:95:9f:52:69:3d:88:f7:d8:0c:1c:
                    e6:77:83:32:aa:50:51:52:5e:8c:92:96:c2:2e:93:
                    36:c7:0b:c2:18:01:9c:d2:d6:78:68:a6:7d:13:43:
                    38:ca:bd:c5:43:94:02:ff:f6:f8:fb:40:a9:65:58:
                    1c:e8:7e:e9:c2:aa:d1:df:80:47:1a:86:59:bd:d1:
                    35:2d:63:84:14:de:a2:95:b4:2e:f2:b9:2f:e1:bf:
                    e4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:00:9D:DD:3F:CF:18:1F:FB:24:8D:06:0F:F1:23:72:81:CE:1F:79
            X509v3 Authority Key Identifier:
                keyid:BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:73:05:61:d1:91:cb:fb:8d:69:cc:2e:5f:28:dd:df:bc:0d:
         3d:29:8a:61:3f:1b:d5:6c:b7:6a:49:79:c1:96:91:0a:24:e3:
         ac:aa:4f:ce:6b:39:cd:ed:0e:bc:5a:59:6e:5c:45:13:cd:06:
         7c:86:62:b1:f0:ba:f8:ca:d4:32:fc:55:d2:36:0c:72:f7:00:
         4f:13:5a:50:42:f1:91:c6:d6:13:32:87:f7:19:99:ce:aa:c0:
         5a:30:31:f2:fd:95:03:79:3a:7b:5b:d5:40:d5:7a:3c:ba:db:
         96:f8:e1:15:3e:b0:23:cd:e2:18:ad:e8:94:08:0f:62:b1:70:
         a9:87:c3:e9:a6:64:a3:d3:b2:69:96:6a:7a:09:c2:48:50:78:
         21:06:c4:1f:26:77:a6:fa:27:9f:72:27:49:b3:27:70:4b:a4:
         a9:0d:7b:86:aa:99:bb:c6:22:5f:36:cd:cb:30:f2:36:b0:dc:
         c2:ba:2c:ad:28:55:1e:8a:87:fa:e5:6a:75:77:ef:8f:46:0f:
         b1:cb:de:22:c6:37:02:69:44:3f:ea:0f:8f:56:df:4c:32:6a:
         d8:f1:bf:8c:0a:58:17:60:e1:9d:49:df:62:b1:4b:39:40:c1:
         19:e8:60:02:0a:72:32:ea:16:53:ba:f9:0b:dd:81:09:c3:de:
         e3:0b:b1:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt86+o2MGt9IGwRDzikelmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNWUzNTZjZTgzOWY4ZDM5MzA2N2QxZjA5YjdkZDFjNTVh
MDFlNTcwHhcNMjUwNDEzMDcwMTA2WhcNMjUwNDE0MDcwMTA2WjAzMTEwLwYDVQQD
EyhmOTAwOWRkZDNmY2YxODFmZmIyNDhkMDYwZmYxMjM3MjgxY2UxZjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4h1BTYUfeyVJGvw8xxabV0dYV+0b
97hN/MUaZm8qyAjupsalVYIynmdzbDdCxZ5LIhkSu8ydiFjifUPN2HBoyRlgSUGR
CXCDrGPeOhUFcNFehAMRSGM/qqGXJ8WSXSJbuyJKtEf+GexIENFNYCIwF5BHLbu0
Qc09mVt/BZGm5JJlfOGJ6P+kblN5zyWR6niITiwxArJpnDrsKWFdb73TZO/vc6tM
KG/9qJWfUmk9iPfYDBzmd4MyqlBRUl6MkpbCLpM2xwvCGAGc0tZ4aKZ9E0M4yr3F
Q5QC//b4+0CpZVgc6H7pwqrR34BHGoZZvdE1LWOEFN6ilbQu8rkv4b/kVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkAnd0/zxgf+ySNBg/xI3KBzh95MB8GA1UdIwQY
MBaAFL9eNWzoOfjTkwZ9Hwm33RxVoB5XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjE0MWJPZzUtTk9UQm4wZkNiZmRIRldnSGxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC83YzNiNmQtZDVhNi00ZWZkLTk5YmYt
Yzk4ODAwOTBlM2M1LzEvdjE0MWJPZzUtTk9UQm4wZkNiZmRIRldnSGxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC83YzNiNmQtZDVhNi00ZWZkLTk5YmYtYzk4ODAwOTBlM2M1
LzEvdjE0MWJPZzUtTk9UQm4wZkNiZmRIRldnSGxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnMFYdGR
y/uNacwuXyjd37wNPSmKYT8b1Wy3akl5wZaRCiTjrKpPzms5ze0OvFpZblxFE80G
fIZisfC6+MrUMvxV0jYMcvcATxNaUELxkcbWEzKH9xmZzqrAWjAx8v2VA3k6e1vV
QNV6PLrblvjhFT6wI83iGK3olAgPYrFwqYfD6aZko9OyaZZqegnCSFB4IQbEHyZ3
pvonn3InSbMncEukqQ17hqqZu8YiXzbNyzDyNrDcwrosrShVHoqH+uVqdXfvj0YP
scveIsY3AmlEP+oPj1bfTDJq2PG/jApYF2DhnUnfYrFLOUDBGehgAgpyMuoWU7r5
C92BCcPe4wux2Q==
-----END CERTIFICATE-----