Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
File:                     6hyVHWG4faGUOXhNI2Z6icsykKQ.mft (raw, json)
Hash identifier:          nvgsoZ1UdYxB/sZM5Hs7TJBHxUTeEugUK9btbZRDGPU=
Subject key identifier:   BC:91:88:F3:66:02:9F:70:35:97:23:24:95:8A:A2:AF:98:9C:BF:CD
Authority key identifier: EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4
Certificate issuer:       /CN=ea1c951d61b87da19439784d23667a89cb3290a4
Certificate serial:       01962FABA0CEC5FDA65435D5258390D8E5BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft
Manifest number:          0F39
Signing time:             Sun 13 Apr 2025 15:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:38 +0000
Files and hashes:         1: 6hyVHWG4faGUOXhNI2Z6icsykKQ.crl (hash: rJn/wPSaRIQdeuim9bM4Gtfqei1D9aPyb0B7BhO/Qjk=)
                          2: DNuH6oIfd0PY2UVMr4WMzxd7NU0.roa (hash: iqajQOHR2WVqg/fcCZBACzn/zImoOaKBPBj1ANJonPc=)
                          3: IDKX9sPGQlI6MZvv-y5YFAm0ePk.roa (hash: k1Iw/tEDEs1ds0ZzGmimuwWihzs+ZhkkWmj8r8qIDVY=)
                          4: NQVBTx4RbrONvu3Vt7IdOsvxKko.roa (hash: ci9wFGdOR13x1Mk5Vu2208pIxEOz06nAwV5fe0oYKhQ=)
                          5: eD-jgmLjU8l3pyRuumgK9QIMg5I.roa (hash: MI8CkhvzSAw59I9pdOh0qmm9At+Brpo0+Yc/fyYEwKI=)
                          6: t4HOM7223cblLwASPVWvJxWa0P8.roa (hash: 6CJfm+zy3ed5GsTq+D3MyV6sLn5UpIUZ3lP8fBBYmiw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:a0:ce:c5:fd:a6:54:35:d5:25:83:90:d8:e5:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea1c951d61b87da19439784d23667a89cb3290a4
        Validity
            Not Before: Apr 13 15:01:38 2025 GMT
            Not After : Apr 14 15:01:38 2025 GMT
        Subject: CN=bc9188f366029f7035972324958aa2af989cbfcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a4:63:35:4e:0b:fb:6f:cf:f5:90:0b:b5:c0:
                    62:0f:0c:af:ec:13:f2:f6:03:4e:70:05:e5:6a:76:
                    d1:02:6a:f3:70:c4:3d:1a:20:1c:fa:0f:9e:16:b3:
                    9f:be:e6:6c:60:de:59:65:6b:01:4f:c8:b4:74:ca:
                    73:ee:f2:f4:fa:62:a0:93:ad:07:ae:ef:31:13:17:
                    ac:96:7b:7d:be:a9:cb:d0:71:59:12:67:0a:d6:22:
                    f2:2f:96:39:04:cb:97:1f:0b:50:ad:cd:06:c8:4c:
                    78:1a:d7:4b:6c:66:3a:75:2c:e6:f5:66:79:dc:81:
                    02:39:b4:54:fe:c5:13:67:28:80:2e:57:ed:6c:61:
                    2a:76:02:10:f2:cb:73:0f:68:ab:2d:9e:75:97:93:
                    35:d9:7c:4b:69:32:f4:c4:9d:be:73:dd:aa:b8:56:
                    6c:d6:06:3d:3e:33:2f:84:cd:9c:1c:39:92:dd:44:
                    6b:0e:59:eb:08:b4:bd:f7:1a:db:f1:0c:1b:b9:62:
                    70:d3:df:74:76:bf:e0:4e:8f:94:6f:60:82:08:7c:
                    8c:75:d4:83:a1:34:39:9a:57:c7:e5:3a:e0:9b:9a:
                    96:64:79:e3:59:a4:92:eb:a1:d1:f4:77:e1:bc:bb:
                    c4:56:88:f6:84:76:f1:09:9d:94:96:18:db:e8:c3:
                    53:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:91:88:F3:66:02:9F:70:35:97:23:24:95:8A:A2:AF:98:9C:BF:CD
            X509v3 Authority Key Identifier:
                keyid:EA:1C:95:1D:61:B8:7D:A1:94:39:78:4D:23:66:7A:89:CB:32:90:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6hyVHWG4faGUOXhNI2Z6icsykKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/617715-9484-40f9-896c-724b1a0212d4/1/6hyVHWG4faGUOXhNI2Z6icsykKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:23:bb:1a:76:9a:f6:ca:d2:97:1c:b8:0b:0d:22:20:62:87:
         dd:7f:cf:22:ea:16:e4:1c:67:87:27:7a:cb:b3:bc:cd:70:0a:
         c9:66:af:f5:79:32:43:e7:c2:00:7c:77:af:b2:72:82:1a:94:
         56:99:55:4e:8d:c2:6a:f2:d1:40:01:3e:bc:8c:a3:a7:39:35:
         01:e9:4c:01:1b:ef:3a:2e:31:c9:97:19:ed:2e:6b:38:21:ea:
         66:10:c3:cb:91:34:7d:17:29:8b:b5:b9:e7:4d:b4:41:72:8b:
         f7:0a:b1:bb:aa:db:c7:da:b0:0d:95:98:b1:9c:f6:81:1a:ef:
         00:87:30:66:de:45:b9:8f:28:d2:44:09:9b:9c:20:be:94:7a:
         98:1d:98:70:95:c9:84:95:e9:66:48:0e:b0:7a:14:50:86:2b:
         ac:c8:85:8c:c0:ef:3f:26:22:b0:02:15:56:06:27:e3:c4:fc:
         98:3a:53:9b:58:46:92:b5:b9:88:b0:bd:8f:5b:7b:04:be:41:
         96:aa:53:43:b3:44:c1:c6:0d:42:23:be:36:dd:e8:82:f7:9a:
         78:12:e7:fb:e7:c1:8a:0c:d7:ef:97:fa:be:f0:dc:67:40:d8:
         28:13:27:98:94:81:c2:32:66:fd:99:97:a1:10:59:7d:cb:9d:
         83:25:6f:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq6DOxf2mVDXVJYOQ2OW+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhMWM5NTFkNjFiODdkYTE5NDM5Nzg0ZDIzNjY3YTg5Y2Iz
MjkwYTQwHhcNMjUwNDEzMTUwMTM4WhcNMjUwNDE0MTUwMTM4WjAzMTEwLwYDVQQD
EyhiYzkxODhmMzY2MDI5ZjcwMzU5NzIzMjQ5NThhYTJhZjk4OWNiZmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA76RjNU4L+2/P9ZALtcBiDwyv7BPy
9gNOcAXlanbRAmrzcMQ9GiAc+g+eFrOfvuZsYN5ZZWsBT8i0dMpz7vL0+mKgk60H
ru8xExeslnt9vqnL0HFZEmcK1iLyL5Y5BMuXHwtQrc0GyEx4GtdLbGY6dSzm9WZ5
3IECObRU/sUTZyiALlftbGEqdgIQ8stzD2irLZ51l5M12XxLaTL0xJ2+c92quFZs
1gY9PjMvhM2cHDmS3URrDlnrCLS99xrb8QwbuWJw0990dr/gTo+Ub2CCCHyMddSD
oTQ5mlfH5Trgm5qWZHnjWaSS66HR9HfhvLvEVoj2hHbxCZ2Ulhjb6MNT6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyRiPNmAp9wNZcjJJWKoq+YnL/NMB8GA1UdIwQY
MBaAFOoclR1huH2hlDl4TSNmeonLMpCkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmh5VkhXRzRmYUdVT1hoTkkyWjZpY3N5a0tRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS82MTc3MTUtOTQ4NC00MGY5LTg5NmMt
NzI0YjFhMDIxMmQ0LzEvNmh5VkhXRzRmYUdVT1hoTkkyWjZpY3N5a0tRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS82MTc3MTUtOTQ4NC00MGY5LTg5NmMtNzI0YjFhMDIxMmQ0
LzEvNmh5VkhXRzRmYUdVT1hoTkkyWjZpY3N5a0tRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCO7Gnaa
9srSlxy4Cw0iIGKH3X/PIuoW5Bxnhyd6y7O8zXAKyWav9XkyQ+fCAHx3r7JyghqU
VplVTo3CavLRQAE+vIyjpzk1AelMARvvOi4xyZcZ7S5rOCHqZhDDy5E0fRcpi7W5
5020QXKL9wqxu6rbx9qwDZWYsZz2gRrvAIcwZt5FuY8o0kQJm5wgvpR6mB2YcJXJ
hJXpZkgOsHoUUIYrrMiFjMDvPyYisAIVVgYn48T8mDpTm1hGkrW5iLC9j1t7BL5B
lqpTQ7NEwcYNQiO+Nt3ogveaeBLn++fBigzX75f6vvDcZ0DYKBMnmJSBwjJm/ZmX
oRBZfcudgyVvEA==
-----END CERTIFICATE-----