Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.mft
File:                     aAImjB8WbJ31GjQgRbsTLw-WyC0.mft (raw, json)
Hash identifier:          OBvABu9DIcWYsbmEEfbjdzI9viFj6TTW0WA+Ka5EE24=
Subject key identifier:   D5:43:7F:1A:1B:5F:81:83:43:7F:9E:4F:6A:6E:20:5F:70:BC:AA:2F
Authority key identifier: 68:02:26:8C:1F:16:6C:9D:F5:1A:34:20:45:BB:13:2F:0F:96:C8:2D
Certificate issuer:       /CN=6802268c1f166c9df51a342045bb132f0f96c82d
Certificate serial:       01962E988CE556848D8294270BF4AF9C7245
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aAImjB8WbJ31GjQgRbsTLw-WyC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.mft
Manifest number:          0A6C
Signing time:             Sun 13 Apr 2025 10:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:11 +0000
Files and hashes:         1: aAImjB8WbJ31GjQgRbsTLw-WyC0.crl (hash: 9IF5HUhVry8qYXZXFMcQxUTfqxDoHg/GnSsmUpnFiaw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:8c:e5:56:84:8d:82:94:27:0b:f4:af:9c:72:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6802268c1f166c9df51a342045bb132f0f96c82d
        Validity
            Not Before: Apr 13 10:01:11 2025 GMT
            Not After : Apr 14 10:01:11 2025 GMT
        Subject: CN=d5437f1a1b5f8183437f9e4f6a6e205f70bcaa2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9e:4c:52:56:22:1b:f8:a8:b2:ba:eb:d1:08:
                    73:ab:e3:ca:8d:40:cf:4e:a3:3c:90:9e:9f:be:42:
                    ef:b2:c9:3a:43:43:e7:44:7a:e9:04:5d:d3:44:56:
                    f0:f7:53:a6:aa:a5:c9:c5:1a:b9:23:1f:76:35:4a:
                    07:7e:0f:70:0d:c0:f3:d1:2c:fe:52:0b:aa:33:6c:
                    28:01:7a:46:f2:1f:0e:79:df:1a:7c:97:c6:1a:cf:
                    25:ed:06:b1:87:3d:e2:9d:81:a5:d2:2b:1b:54:d0:
                    7b:59:d2:cd:27:00:b9:58:f6:0a:6c:bd:e3:43:bf:
                    54:61:ad:7c:31:08:95:53:2a:a4:c7:e3:0d:7f:9f:
                    33:64:81:b1:44:ca:33:64:c3:ff:09:ae:4c:3e:8e:
                    56:d1:f9:15:0a:ff:9a:bc:aa:f1:26:30:2b:cc:b7:
                    37:15:11:90:d1:bf:6a:bf:81:64:b9:cf:24:df:a9:
                    fe:a9:e6:df:3f:45:fa:e5:12:cd:d9:7b:6b:b6:b3:
                    87:fd:44:ed:c2:f2:27:81:4d:d3:f9:35:a2:1c:7d:
                    1f:94:bb:e3:26:d0:13:78:0a:03:1e:1d:98:4b:af:
                    83:52:d4:6b:7b:f0:b3:fc:20:f9:53:68:ac:93:e4:
                    f8:31:88:92:72:00:dc:11:3f:c0:61:c8:ed:0a:7a:
                    50:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:43:7F:1A:1B:5F:81:83:43:7F:9E:4F:6A:6E:20:5F:70:BC:AA:2F
            X509v3 Authority Key Identifier:
                keyid:68:02:26:8C:1F:16:6C:9D:F5:1A:34:20:45:BB:13:2F:0F:96:C8:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aAImjB8WbJ31GjQgRbsTLw-WyC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:60:34:b5:93:b4:35:f0:db:cf:f7:5e:0b:91:15:55:63:d8:
         ba:bb:08:7f:14:a1:f8:98:c2:17:aa:77:15:31:92:1f:8a:f9:
         5f:13:8d:7d:d3:05:9b:42:85:31:2d:39:f4:73:d6:d5:df:a2:
         46:0d:5d:b2:32:fc:3e:a0:e7:ea:e4:15:ed:d7:39:03:24:d7:
         a6:7e:af:e3:2e:39:3f:67:3f:5f:73:02:8b:46:de:6d:31:5e:
         ee:4d:5a:68:c3:98:be:ce:91:09:0a:da:f1:69:22:e8:37:72:
         fe:bc:14:c0:62:7d:88:9c:44:73:d6:f4:23:fe:03:10:18:42:
         78:13:ac:61:65:35:65:04:72:76:64:17:08:69:dc:93:fc:ed:
         82:ed:31:64:29:1e:75:89:9a:a9:64:50:49:bc:70:a3:52:db:
         01:55:1d:d4:4d:61:3a:eb:4b:09:a9:2c:b7:ab:42:70:12:e6:
         47:a0:c8:b6:96:18:d1:62:58:38:cb:09:47:c6:9a:e9:5c:fb:
         fd:29:75:d7:fe:b5:e4:0d:69:c6:46:34:b8:dc:41:74:32:5e:
         7a:1d:c8:5f:a0:28:b8:59:15:5d:ae:58:b9:ef:88:25:2f:14:
         88:ed:05:ef:64:bf:30:bb:2e:28:51:4e:13:07:9c:8b:c1:25:
         a6:2e:37:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumIzlVoSNgpQnC/SvnHJFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MDIyNjhjMWYxNjZjOWRmNTFhMzQyMDQ1YmIxMzJmMGY5
NmM4MmQwHhcNMjUwNDEzMTAwMTExWhcNMjUwNDE0MTAwMTExWjAzMTEwLwYDVQQD
EyhkNTQzN2YxYTFiNWY4MTgzNDM3ZjllNGY2YTZlMjA1ZjcwYmNhYTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0p5MUlYiG/iosrrr0Qhzq+PKjUDP
TqM8kJ6fvkLvssk6Q0PnRHrpBF3TRFbw91OmqqXJxRq5Ix92NUoHfg9wDcDz0Sz+
UguqM2woAXpG8h8Oed8afJfGGs8l7Qaxhz3inYGl0isbVNB7WdLNJwC5WPYKbL3j
Q79UYa18MQiVUyqkx+MNf58zZIGxRMozZMP/Ca5MPo5W0fkVCv+avKrxJjArzLc3
FRGQ0b9qv4Fkuc8k36n+qebfP0X65RLN2XtrtrOH/UTtwvIngU3T+TWiHH0flLvj
JtATeAoDHh2YS6+DUtRre/Cz/CD5U2isk+T4MYiScgDcET/AYcjtCnpQvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVDfxobX4GDQ3+eT2puIF9wvKovMB8GA1UdIwQY
MBaAFGgCJowfFmyd9Ro0IEW7Ey8PlsgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUFJbWpCOFdiSjMxR2pRZ1Jic1RMdy1XeUMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9jODY0OWQtMmYwMC00NjYzLThlNGUt
ZTNjMjJkMGY2MjA3LzEvYUFJbWpCOFdiSjMxR2pRZ1Jic1RMdy1XeUMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9jODY0OWQtMmYwMC00NjYzLThlNGUtZTNjMjJkMGY2MjA3
LzEvYUFJbWpCOFdiSjMxR2pRZ1Jic1RMdy1XeUMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARGA0tZO0
NfDbz/deC5EVVWPYursIfxSh+JjCF6p3FTGSH4r5XxONfdMFm0KFMS059HPW1d+i
Rg1dsjL8PqDn6uQV7dc5AyTXpn6v4y45P2c/X3MCi0bebTFe7k1aaMOYvs6RCQra
8Wki6Ddy/rwUwGJ9iJxEc9b0I/4DEBhCeBOsYWU1ZQRydmQXCGnck/ztgu0xZCke
dYmaqWRQSbxwo1LbAVUd1E1hOutLCakst6tCcBLmR6DItpYY0WJYOMsJR8aa6Vz7
/Sl11/615A1pxkY0uNxBdDJeeh3IX6AouFkVXa5Yue+IJS8UiO0F72S/MLsuKFFO
Eweci8Elpi43ow==
-----END CERTIFICATE-----