Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
File:                     a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft (raw, json)
Hash identifier:          nqvxAAfZoeZA49c0lQ44tZZk4l/qrVEZ3W1QjY1HVno=
Subject key identifier:   0E:D4:5B:2F:81:1B:C8:38:87:A0:2C:FB:48:2A:87:B3:51:EE:7E:87
Authority key identifier: 6B:61:99:E5:5C:35:3E:F7:F3:D2:BF:4A:4F:E3:8D:D1:A0:AD:85:65
Certificate issuer:       /CN=6b6199e55c353ef7f3d2bf4a4fe38dd1a0ad8565
Certificate serial:       01962E6180B3718D36CA59266E47E78C6011
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
Manifest number:          07B1
Signing time:             Sun 13 Apr 2025 09:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:03 +0000
Files and hashes:         1: NBepUJO_wJpnxRX9pJTgcXP4eoA.roa (hash: s4sVSw+QsBgi1se1V8v61lF7jwGyJQc1wtJojCUHwDE=)
                          2: a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl (hash: o5q8Xmz2t1wDvh7WSMolIo7lzvjSdJ1pixHZJXiNI5Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:80:b3:71:8d:36:ca:59:26:6e:47:e7:8c:60:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b6199e55c353ef7f3d2bf4a4fe38dd1a0ad8565
        Validity
            Not Before: Apr 13 09:01:03 2025 GMT
            Not After : Apr 14 09:01:03 2025 GMT
        Subject: CN=0ed45b2f811bc83887a02cfb482a87b351ee7e87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e6:8c:74:d2:82:c0:d6:ed:a0:37:75:cd:c1:
                    67:23:10:ef:7a:7f:29:e5:87:78:df:85:eb:e2:35:
                    83:1b:22:ba:de:37:42:81:99:77:c0:9c:17:d2:ba:
                    ad:c6:1f:b7:4f:fc:8b:ab:5e:ce:10:7e:fb:f1:89:
                    a5:32:71:68:19:c8:d0:43:4e:f7:b2:16:1a:66:9e:
                    d8:5a:36:5b:5a:05:8d:4b:8f:1d:d9:56:a1:51:f1:
                    d3:01:fd:af:20:77:27:53:c2:1e:e5:d7:f6:04:1c:
                    fa:d3:3e:df:c4:cd:73:dc:87:61:63:84:59:fa:6c:
                    4f:8c:ea:ad:92:94:d1:7a:5a:bd:13:bf:12:70:23:
                    08:f5:69:56:af:19:7f:72:5a:51:67:9a:d5:a4:a5:
                    74:7b:60:2a:88:0d:15:e4:12:95:46:e2:20:87:8c:
                    04:ee:ab:49:e8:94:19:b7:84:30:23:ff:c3:89:6a:
                    01:9b:3e:59:d0:d6:6e:8b:73:7a:11:51:fe:a0:75:
                    70:3c:62:23:b1:c7:ca:f0:fb:f3:65:d3:40:47:84:
                    2e:04:30:96:93:5c:1c:a9:42:73:cf:68:ba:2a:8e:
                    05:21:f3:b1:a5:b6:2a:d9:a7:f9:b1:b9:fc:89:40:
                    82:91:b7:01:e5:d0:c4:6f:7d:ba:35:44:09:d5:3d:
                    96:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D4:5B:2F:81:1B:C8:38:87:A0:2C:FB:48:2A:87:B3:51:EE:7E:87
            X509v3 Authority Key Identifier:
                keyid:6B:61:99:E5:5C:35:3E:F7:F3:D2:BF:4A:4F:E3:8D:D1:A0:AD:85:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:f9:52:60:7e:fd:27:14:94:9d:1b:ac:61:19:9f:1f:9f:27:
         b4:99:12:96:76:04:ba:88:0a:c0:ac:27:7e:91:b8:bf:31:3f:
         c6:fd:36:11:51:ac:86:6f:2e:4c:16:61:5f:32:cb:e5:62:f1:
         50:88:7b:e4:36:58:b0:48:9c:fb:c0:c6:be:27:fc:61:96:d2:
         2b:02:af:e3:c4:91:33:83:a5:be:60:6d:3d:5a:5b:16:43:4f:
         2a:e0:36:95:81:3f:b3:ea:86:8d:38:86:bb:78:01:f3:9a:ca:
         69:be:67:4b:9f:1f:ec:7d:79:d2:a8:9a:31:85:d3:d1:d7:c1:
         d2:2c:b1:cc:ce:8e:a8:3a:1e:b1:35:cb:ea:8e:f0:2d:b0:fa:
         ec:7e:2f:2b:6c:f3:b1:d4:64:17:20:4e:02:67:73:c7:db:26:
         7e:63:ab:a4:02:e9:d6:a7:75:a5:e6:bf:c9:8f:3f:13:4c:b6:
         77:b3:71:6e:65:90:d6:a5:a5:78:9f:b3:76:7d:f1:3b:d1:5f:
         b1:73:88:56:1a:63:4b:e1:af:43:69:c0:e9:0f:a1:80:43:51:
         bc:64:c5:ac:04:57:5c:7c:40:0b:a9:42:71:53:c5:c4:17:9c:
         17:6f:e2:2b:1e:76:ef:6a:1b:8a:d1:b7:c8:87:70:cc:eb:e4:
         cb:35:25:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYYCzcY02ylkmbkfnjGARMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNjE5OWU1NWMzNTNlZjdmM2QyYmY0YTRmZTM4ZGQxYTBh
ZDg1NjUwHhcNMjUwNDEzMDkwMTAzWhcNMjUwNDE0MDkwMTAzWjAzMTEwLwYDVQQD
EygwZWQ0NWIyZjgxMWJjODM4ODdhMDJjZmI0ODJhODdiMzUxZWU3ZTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuaMdNKCwNbtoDd1zcFnIxDven8p
5Yd434Xr4jWDGyK63jdCgZl3wJwX0rqtxh+3T/yLq17OEH778YmlMnFoGcjQQ073
shYaZp7YWjZbWgWNS48d2VahUfHTAf2vIHcnU8Ie5df2BBz60z7fxM1z3IdhY4RZ
+mxPjOqtkpTRelq9E78ScCMI9WlWrxl/clpRZ5rVpKV0e2AqiA0V5BKVRuIgh4wE
7qtJ6JQZt4QwI//DiWoBmz5Z0NZui3N6EVH+oHVwPGIjscfK8PvzZdNAR4QuBDCW
k1wcqUJzz2i6Ko4FIfOxpbYq2af5sbn8iUCCkbcB5dDEb326NUQJ1T2WpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7UWy+BG8g4h6As+0gqh7NR7n6HMB8GA1UdIwQY
MBaAFGthmeVcNT7389K/Sk/jjdGgrYVlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTJHWjVWdzFQdmZ6MHI5S1QtT04wYUN0aFdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9mZjJjZWItZTlhOC00NzhjLTg4YzEt
M2RlNGVjZTNhYjJhLzEvYTJHWjVWdzFQdmZ6MHI5S1QtT04wYUN0aFdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9mZjJjZWItZTlhOC00NzhjLTg4YzEtM2RlNGVjZTNhYjJh
LzEvYTJHWjVWdzFQdmZ6MHI5S1QtT04wYUN0aFdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/lSYH79
JxSUnRusYRmfH58ntJkSlnYEuogKwKwnfpG4vzE/xv02EVGshm8uTBZhXzLL5WLx
UIh75DZYsEic+8DGvif8YZbSKwKv48SRM4OlvmBtPVpbFkNPKuA2lYE/s+qGjTiG
u3gB85rKab5nS58f7H150qiaMYXT0dfB0iyxzM6OqDoesTXL6o7wLbD67H4vK2zz
sdRkFyBOAmdzx9smfmOrpALp1qd1pea/yY8/E0y2d7NxbmWQ1qWleJ+zdn3xO9Ff
sXOIVhpjS+GvQ2nA6Q+hgENRvGTFrARXXHxAC6lCcVPFxBecF2/iKx5272obitG3
yIdwzOvkyzUl1Q==
-----END CERTIFICATE-----