Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b73411-cf4e-4999-9f42-cde404805b10/1/ba7zApYp3gKduYq3tOm9IhwomRw.mft
File:                     ba7zApYp3gKduYq3tOm9IhwomRw.mft (raw, json)
Hash identifier:          XR1yMEVgpz3XHWA8AWaK+/9HfTlH2swP7waTROAjRfY=
Subject key identifier:   ED:C3:E5:75:98:42:6F:73:B9:2E:39:43:1B:68:E8:A3:90:CE:13:4F
Authority key identifier: 6D:AE:F3:02:96:29:DE:02:9D:B9:8A:B7:B4:E9:BD:22:1C:28:99:1C
Certificate issuer:       /CN=6daef3029629de029db98ab7b4e9bd221c28991c
Certificate serial:       01962E995AD57AEB3BE36B6D90EA5B46C489
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ba7zApYp3gKduYq3tOm9IhwomRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/b73411-cf4e-4999-9f42-cde404805b10/1/ba7zApYp3gKduYq3tOm9IhwomRw.mft
Manifest number:          0AD3
Signing time:             Sun 13 Apr 2025 10:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:04 +0000
Files and hashes:         1: ba7zApYp3gKduYq3tOm9IhwomRw.crl (hash: fE+RnDGteA7PqEjSXf2JZs4Tc7BUdZ0XLTw8bwlj10Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5a:d5:7a:eb:3b:e3:6b:6d:90:ea:5b:46:c4:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6daef3029629de029db98ab7b4e9bd221c28991c
        Validity
            Not Before: Apr 13 10:02:04 2025 GMT
            Not After : Apr 14 10:02:04 2025 GMT
        Subject: CN=edc3e57598426f73b92e39431b68e8a390ce134f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c8:f7:ee:f1:7b:0a:c8:4c:8d:90:48:3c:c3:
                    32:a2:40:a3:13:ae:7c:53:d6:ce:93:49:05:3e:c1:
                    b4:55:49:84:d6:0d:dc:b4:7a:cd:36:f3:1b:f2:c6:
                    56:d2:23:db:50:88:da:7d:d3:0d:3c:de:b1:58:cc:
                    1f:f9:d4:45:19:a3:7c:8d:b1:79:ea:b3:be:7f:67:
                    4b:82:c6:1a:fe:55:de:9e:8f:71:70:a3:ce:b7:35:
                    1e:f4:1e:9f:a8:c4:22:f1:58:c5:c0:77:14:6a:21:
                    c0:6e:05:b9:53:7c:36:f5:7e:d1:15:46:72:ea:da:
                    43:b0:5d:6c:36:c8:8a:fe:6f:c2:aa:c1:6b:8f:fa:
                    38:07:b1:08:fa:49:f5:e6:31:3f:43:ab:59:6a:39:
                    ee:58:a1:51:94:17:f3:97:16:45:50:9f:22:ac:02:
                    1a:42:42:11:4b:bc:43:b4:2e:75:32:15:b6:df:f3:
                    f0:38:16:c9:e0:2d:e9:79:6f:8d:7a:8f:33:71:83:
                    3c:81:e6:96:5a:72:6f:e1:7a:5d:f5:0e:5f:2b:ab:
                    cf:3f:7f:b8:b0:29:a2:4e:6f:05:ea:d3:d4:db:75:
                    07:53:4f:88:d4:21:cc:ab:ac:8e:23:9e:83:7f:66:
                    33:ef:51:b7:f0:7f:ce:4e:bd:5b:a0:37:47:49:a8:
                    f0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C3:E5:75:98:42:6F:73:B9:2E:39:43:1B:68:E8:A3:90:CE:13:4F
            X509v3 Authority Key Identifier:
                keyid:6D:AE:F3:02:96:29:DE:02:9D:B9:8A:B7:B4:E9:BD:22:1C:28:99:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba7zApYp3gKduYq3tOm9IhwomRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b73411-cf4e-4999-9f42-cde404805b10/1/ba7zApYp3gKduYq3tOm9IhwomRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b73411-cf4e-4999-9f42-cde404805b10/1/ba7zApYp3gKduYq3tOm9IhwomRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:50:8e:6f:00:d5:09:ac:a6:18:7f:4b:0f:76:e9:a6:90:18:
         4b:f9:4b:69:b9:a7:17:d8:bb:04:50:78:99:69:f5:5b:d1:b5:
         0d:74:85:52:60:40:a8:29:a5:f4:f2:35:d8:f6:c9:e9:20:11:
         e2:ef:a1:40:0e:dc:c0:ce:42:6c:58:ea:7c:b1:cb:02:1c:ec:
         2a:9f:bd:99:a2:5b:98:2e:cf:58:26:44:94:74:fc:2c:9c:3a:
         b5:61:93:15:1c:f0:e6:a8:db:39:6d:81:f4:ae:75:9c:06:c9:
         28:5d:b0:b5:55:d1:63:ce:7b:79:8a:45:e5:12:ac:5c:62:75:
         b2:90:da:9c:38:05:50:04:08:60:49:0b:60:b7:1b:0d:69:80:
         08:ae:7e:0f:0b:29:2d:18:bb:0f:9e:71:da:dd:2b:2e:2d:db:
         11:c5:79:0f:63:e8:48:c7:2e:ee:9b:1b:f3:63:4f:d0:7d:01:
         e3:77:92:2e:a5:6d:8d:f4:f8:9c:39:06:0e:14:50:c3:1a:38:
         dd:f0:4c:40:b6:9d:58:ed:59:a4:59:75:0a:79:73:27:54:2e:
         a6:92:12:02:e8:cc:80:9e:49:bc:c6:e5:3f:07:b5:69:a0:e5:
         8c:b8:61:b0:6d:48:d8:75:51:90:ef:fc:ff:34:01:49:9f:90:
         35:19:e2:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumVrVeus742ttkOpbRsSJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYWVmMzAyOTYyOWRlMDI5ZGI5OGFiN2I0ZTliZDIyMWMy
ODk5MWMwHhcNMjUwNDEzMTAwMjA0WhcNMjUwNDE0MTAwMjA0WjAzMTEwLwYDVQQD
EyhlZGMzZTU3NTk4NDI2ZjczYjkyZTM5NDMxYjY4ZThhMzkwY2UxMzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMj37vF7CshMjZBIPMMyokCjE658
U9bOk0kFPsG0VUmE1g3ctHrNNvMb8sZW0iPbUIjafdMNPN6xWMwf+dRFGaN8jbF5
6rO+f2dLgsYa/lXeno9xcKPOtzUe9B6fqMQi8VjFwHcUaiHAbgW5U3w29X7RFUZy
6tpDsF1sNsiK/m/CqsFrj/o4B7EI+kn15jE/Q6tZajnuWKFRlBfzlxZFUJ8irAIa
QkIRS7xDtC51MhW23/PwOBbJ4C3peW+Neo8zcYM8geaWWnJv4Xpd9Q5fK6vPP3+4
sCmiTm8F6tPU23UHU0+I1CHMq6yOI56Df2Yz71G38H/OTr1boDdHSajwtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3D5XWYQm9zuS45Qxto6KOQzhNPMB8GA1UdIwQY
MBaAFG2u8wKWKd4CnbmKt7TpvSIcKJkcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmE3ekFwWXAzZ0tkdVlxM3RPbTlJaHdvbVJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iNzM0MTEtY2Y0ZS00OTk5LTlmNDIt
Y2RlNDA0ODA1YjEwLzEvYmE3ekFwWXAzZ0tkdVlxM3RPbTlJaHdvbVJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9iNzM0MTEtY2Y0ZS00OTk5LTlmNDItY2RlNDA0ODA1YjEw
LzEvYmE3ekFwWXAzZ0tkdVlxM3RPbTlJaHdvbVJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIlCObwDV
CaymGH9LD3bpppAYS/lLabmnF9i7BFB4mWn1W9G1DXSFUmBAqCml9PI12PbJ6SAR
4u+hQA7cwM5CbFjqfLHLAhzsKp+9maJbmC7PWCZElHT8LJw6tWGTFRzw5qjbOW2B
9K51nAbJKF2wtVXRY857eYpF5RKsXGJ1spDanDgFUAQIYEkLYLcbDWmACK5+Dwsp
LRi7D55x2t0rLi3bEcV5D2PoSMcu7psb82NP0H0B43eSLqVtjfT4nDkGDhRQwxo4
3fBMQLadWO1ZpFl1CnlzJ1QuppISAujMgJ5JvMblPwe1aaDljLhhsG1I2HVRkO/8
/zQBSZ+QNRni9Q==
-----END CERTIFICATE-----