Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
File:                     r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft (raw, json)
Hash identifier:          Y1vr0Ov78ICzmPebOzlNyAoCbp7v0jNsm97vIzi3y8k=
Subject key identifier:   61:3B:70:BC:88:AD:12:BB:64:D3:03:FD:09:88:AC:EB:C7:05:33:5A
Authority key identifier: AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5
Certificate issuer:       /CN=afa929be73491acd99d590372a52b815fa1f23f5
Certificate serial:       01962DF3FEE8C4F71D4995FB461FFD53AAF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
Manifest number:          1046
Signing time:             Sun 13 Apr 2025 07:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:27 +0000
Files and hashes:         1: Qm0v2QB0N6w8qGQL8ta92rDkpA0.roa (hash: aEK3PYUQq1E1pzkJ/CLkmP6YwUe047cyT3qoeHQ2dn8=)
                          2: dS8Rkw8dzyED62hL_7OXnHLvH04.roa (hash: qEmro5fJia38aDC86kQ3vNKBrJLyPDYdvwDe7Qknl6I=)
                          3: jIx4n0qvGCMbvZ4nZHfe7AlAvc4.roa (hash: PbvVUSgN0dLFWz6bc4odaxxggERGNNwAo8M1AiayrEs=)
                          4: r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl (hash: 1eUcXqbMB4hCLrlcLAO+2v09/rCzo6o3l/tSVhRN7WY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:fe:e8:c4:f7:1d:49:95:fb:46:1f:fd:53:aa:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afa929be73491acd99d590372a52b815fa1f23f5
        Validity
            Not Before: Apr 13 07:01:27 2025 GMT
            Not After : Apr 14 07:01:27 2025 GMT
        Subject: CN=613b70bc88ad12bb64d303fd0988acebc705335a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8b:8b:2d:88:23:ea:84:71:0a:d6:b9:c9:3e:
                    d4:be:ae:3f:cd:82:a3:9a:35:f7:d7:9a:3b:ed:fb:
                    52:46:d6:b1:70:00:e2:85:86:c1:f3:83:3c:c3:0b:
                    ed:b5:63:06:9d:50:09:d8:bd:39:01:4d:de:43:1d:
                    4c:45:47:5c:72:26:75:01:77:e5:70:b9:9a:76:34:
                    dc:d3:6d:b6:e5:b3:9f:a8:c9:cd:f2:e1:92:f0:18:
                    ea:62:bc:a3:2e:30:4f:8d:f1:f1:06:65:d8:0f:9b:
                    06:72:8a:4e:bc:9a:d9:0b:71:c9:d0:d3:c3:e6:95:
                    18:cc:fc:33:68:7b:94:d2:f5:65:49:0c:9d:74:27:
                    7f:ac:da:d9:e7:4a:60:56:09:ea:1a:c9:39:50:93:
                    21:1c:22:3e:c5:59:6b:7c:62:24:eb:33:78:65:0f:
                    5b:46:bf:35:0d:5a:ed:4f:cd:d5:f2:bc:9e:c9:f9:
                    bf:87:b1:c7:68:c0:e2:0b:3d:b7:a4:6f:89:f8:b6:
                    0d:36:d8:f2:db:c8:e0:7d:8a:b1:13:31:32:43:24:
                    9f:0d:84:e1:8c:b9:38:1a:17:d2:6b:e9:6c:c4:4f:
                    6b:6b:17:14:7f:9e:c7:75:98:98:6c:ae:88:18:87:
                    5a:af:44:7b:d7:fa:f3:ca:45:0d:b2:92:c3:b7:ad:
                    8f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:3B:70:BC:88:AD:12:BB:64:D3:03:FD:09:88:AC:EB:C7:05:33:5A
            X509v3 Authority Key Identifier:
                keyid:AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:b0:f3:c5:8b:77:b9:fa:fc:fa:d3:5c:02:3e:45:11:48:10:
         c7:61:e9:f6:75:f0:88:a4:04:32:65:4d:2a:7d:f3:08:b2:4f:
         02:4c:52:74:40:ec:a3:96:5e:6f:eb:37:d3:41:8f:8d:bc:30:
         3e:b5:55:e9:04:98:3c:c6:eb:98:14:80:63:94:af:9f:15:0c:
         ba:a5:ff:53:99:48:c6:f8:fb:b2:9e:e8:c1:d8:e6:df:76:43:
         b6:08:52:43:82:08:52:65:9c:65:a0:45:de:06:17:ea:1d:e4:
         ec:ad:79:e3:c4:1a:d5:97:60:b8:91:56:0a:09:1e:f3:49:e2:
         fe:30:2e:b9:8e:fb:79:89:8f:03:2d:3a:c6:a0:15:13:b2:f6:
         dc:a0:9a:2f:cc:f2:a6:7a:bf:db:b9:25:af:39:ed:4f:03:1c:
         07:9a:5e:14:46:4a:4d:fa:4f:92:7d:70:6f:7b:d2:15:7c:9d:
         77:fb:98:24:76:01:78:47:10:05:8d:94:57:50:51:31:aa:f0:
         11:4c:f1:43:1e:f8:6b:d4:68:bc:14:46:a3:f5:1a:1c:ef:04:
         a3:b9:b1:d4:27:09:5c:34:cd:86:0c:db:75:25:79:08:35:eb:
         46:71:80:c0:45:00:89:67:3c:fa:99:2b:95:8d:b3:74:30:a0:
         4b:c0:b4:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8/7oxPcdSZX7Rh/9U6r2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmYTkyOWJlNzM0OTFhY2Q5OWQ1OTAzNzJhNTJiODE1ZmEx
ZjIzZjUwHhcNMjUwNDEzMDcwMTI3WhcNMjUwNDE0MDcwMTI3WjAzMTEwLwYDVQQD
Eyg2MTNiNzBiYzg4YWQxMmJiNjRkMzAzZmQwOTg4YWNlYmM3MDUzMzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArouLLYgj6oRxCta5yT7Uvq4/zYKj
mjX315o77ftSRtaxcADihYbB84M8wwvttWMGnVAJ2L05AU3eQx1MRUdcciZ1AXfl
cLmadjTc02225bOfqMnN8uGS8BjqYryjLjBPjfHxBmXYD5sGcopOvJrZC3HJ0NPD
5pUYzPwzaHuU0vVlSQyddCd/rNrZ50pgVgnqGsk5UJMhHCI+xVlrfGIk6zN4ZQ9b
Rr81DVrtT83V8ryeyfm/h7HHaMDiCz23pG+J+LYNNtjy28jgfYqxEzEyQySfDYTh
jLk4GhfSa+lsxE9raxcUf57HdZiYbK6IGIdar0R71/rzykUNspLDt62PlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGE7cLyIrRK7ZNMD/QmIrOvHBTNaMB8GA1UdIwQY
MBaAFK+pKb5zSRrNmdWQNypSuBX6HyP1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjZrcHZuTkpHczJaMVpBM0tsSzRGZm9mSV9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8yNjk0ZjgtZmExZi00YzgxLTgzMTIt
M2I2ZjFiZGY0MTJhLzEvcjZrcHZuTkpHczJaMVpBM0tsSzRGZm9mSV9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8yNjk0ZjgtZmExZi00YzgxLTgzMTItM2I2ZjFiZGY0MTJh
LzEvcjZrcHZuTkpHczJaMVpBM0tsSzRGZm9mSV9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOrDzxYt3
ufr8+tNcAj5FEUgQx2Hp9nXwiKQEMmVNKn3zCLJPAkxSdEDso5Zeb+s300GPjbww
PrVV6QSYPMbrmBSAY5SvnxUMuqX/U5lIxvj7sp7owdjm33ZDtghSQ4IIUmWcZaBF
3gYX6h3k7K1548Qa1ZdguJFWCgke80ni/jAuuY77eYmPAy06xqAVE7L23KCaL8zy
pnq/27klrzntTwMcB5peFEZKTfpPkn1wb3vSFXydd/uYJHYBeEcQBY2UV1BRMarw
EUzxQx74a9RovBRGo/UaHO8Eo7mx1CcJXDTNhgzbdSV5CDXrRnGAwEUAiWc8+pkr
lY2zdDCgS8C0vQ==
-----END CERTIFICATE-----