Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
File:                     1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft (raw, json)
Hash identifier:          bNCJ+40OuOZiPMfx1IGLxSijV7YSg8jeh1AhYYFd0+o=
Subject key identifier:   81:94:2A:10:20:35:86:07:D7:EA:73:D4:AB:C9:10:B1:5D:2E:74:B9
Authority key identifier: D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
Certificate issuer:       /CN=d716209d7def98a2bb34977f65009b3520da256e
Certificate serial:       01962F069347EE8FDC86510719919CCEB04C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
Manifest number:          02D8
Signing time:             Sun 13 Apr 2025 12:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:22 +0000
Files and hashes:         1: 1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl (hash: w2Nv8UymiVIviDitRi348dBQBn3dL9hdf0Xzd5SxIC8=)
                          2: OWBphSnGzM3NfjUoWcPjDVRSYgc.roa (hash: Z7ei4v1I8GPTdYYpZ1qHi9JiBDA34PMAtoRsAnkH2B0=)
                          3: mcI_iz_jLMF0m2ytiShNIW2Y0XI.roa (hash: MlJtJ+9IYVgqHxEydx7ywPk31bzQHuAZBNNJFqPMbXA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:93:47:ee:8f:dc:86:51:07:19:91:9c:ce:b0:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d716209d7def98a2bb34977f65009b3520da256e
        Validity
            Not Before: Apr 13 12:01:22 2025 GMT
            Not After : Apr 14 12:01:22 2025 GMT
        Subject: CN=81942a1020358607d7ea73d4abc910b15d2e74b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5b:63:e8:c3:41:e1:75:10:39:81:07:28:a4:
                    bb:f4:2c:83:97:29:4e:85:73:11:8f:34:05:c0:6b:
                    5f:2c:b6:e7:d7:43:9e:51:b4:42:30:99:e9:ea:1b:
                    1d:68:3d:97:cf:4b:25:7b:f4:de:37:05:c8:c2:b2:
                    78:b0:62:15:5d:c0:d6:14:87:7c:ea:63:9f:09:44:
                    58:79:c0:99:8d:66:16:bc:dc:85:a6:97:a0:92:e5:
                    d8:73:29:b7:e8:02:b3:bc:22:40:cb:a6:35:68:6c:
                    d7:76:29:06:e6:a2:59:25:0b:81:1c:7a:27:4c:a7:
                    05:17:be:15:eb:92:0c:cb:bb:f9:67:b8:6d:97:ef:
                    b0:da:10:2c:d9:16:64:f0:c3:6a:b9:57:08:5b:98:
                    ad:0b:93:68:c8:bf:14:8c:26:5f:14:76:af:82:49:
                    f4:be:77:db:30:18:b1:04:0f:c6:a1:53:65:86:77:
                    6c:72:d4:ae:21:81:51:cb:96:64:0d:64:1b:71:11:
                    68:31:fd:bf:d3:51:a2:a1:1f:bc:bd:19:ae:fe:91:
                    42:76:9b:81:33:08:1d:88:92:0b:99:ca:ac:76:41:
                    ad:ba:0e:40:b2:43:d6:a2:27:ff:2a:f7:d3:f6:98:
                    28:0c:6d:54:ab:6e:0c:79:f0:cb:39:30:eb:9c:f8:
                    a9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:94:2A:10:20:35:86:07:D7:EA:73:D4:AB:C9:10:B1:5D:2E:74:B9
            X509v3 Authority Key Identifier:
                keyid:D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:5c:fd:c9:a9:a0:c1:e7:ad:51:af:b0:b2:6d:b8:9d:83:af:
         6a:e2:e1:02:0e:fe:6c:80:f8:3c:5b:82:d2:0c:e6:07:74:9f:
         ab:d6:8a:13:bf:9e:d8:be:e1:3d:76:14:18:4f:47:c1:b0:3b:
         53:08:df:0d:84:97:67:b6:59:41:99:4b:f8:47:54:ff:82:ac:
         26:99:e6:c7:a6:b3:07:b2:21:60:63:7b:6e:ed:a3:a1:ca:c7:
         53:50:cf:12:c5:74:7f:59:e2:37:2d:80:72:e9:bd:c0:40:af:
         db:21:8a:e8:d2:ce:92:b7:22:c8:7b:fa:c2:90:28:24:ab:b5:
         ca:f4:89:7b:b2:1b:6c:d8:53:29:7a:f9:4b:b4:4f:22:19:dd:
         c7:06:f3:b6:e5:60:4b:8c:2b:38:4d:e8:8d:85:e4:43:74:e9:
         d1:80:f6:ab:44:b9:9b:fc:75:02:f5:76:ec:28:31:25:46:9a:
         16:1b:91:12:a0:a2:6f:9f:f2:3d:19:db:0b:ea:ca:4f:85:a3:
         79:7f:4d:6f:77:2e:b4:bb:68:17:58:eb:56:0c:10:8d:8c:d3:
         29:6e:d4:1a:78:4e:77:ab:29:6f:e1:2f:8d:3e:46:d3:ce:b7:
         e6:a8:95:06:5f:02:44:7d:8d:ff:1e:c3:cc:6c:d1:6c:f8:1e:
         37:56:ca:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBpNH7o/chlEHGZGczrBMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MTYyMDlkN2RlZjk4YTJiYjM0OTc3ZjY1MDA5YjM1MjBk
YTI1NmUwHhcNMjUwNDEzMTIwMTIyWhcNMjUwNDE0MTIwMTIyWjAzMTEwLwYDVQQD
Eyg4MTk0MmExMDIwMzU4NjA3ZDdlYTczZDRhYmM5MTBiMTVkMmU3NGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvltj6MNB4XUQOYEHKKS79CyDlylO
hXMRjzQFwGtfLLbn10OeUbRCMJnp6hsdaD2Xz0sle/TeNwXIwrJ4sGIVXcDWFId8
6mOfCURYecCZjWYWvNyFppegkuXYcym36AKzvCJAy6Y1aGzXdikG5qJZJQuBHHon
TKcFF74V65IMy7v5Z7htl++w2hAs2RZk8MNquVcIW5itC5NoyL8UjCZfFHavgkn0
vnfbMBixBA/GoVNlhndsctSuIYFRy5ZkDWQbcRFoMf2/01GioR+8vRmu/pFCdpuB
MwgdiJILmcqsdkGtug5AskPWoif/KvfT9pgoDG1Uq24MefDLOTDrnPipiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGUKhAgNYYH1+pz1KvJELFdLnS5MB8GA1UdIwQY
MBaAFNcWIJ1975iiuzSXf2UAmzUg2iVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXhZZ25YM3ZtS0s3TkpkX1pRQ2JOU0RhSlc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iNTJlMDItM2FmOC00ZWJiLTk5ZDMt
ODUxZDljMDQ0ZTcwLzEvMXhZZ25YM3ZtS0s3TkpkX1pRQ2JOU0RhSlc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9iNTJlMDItM2FmOC00ZWJiLTk5ZDMtODUxZDljMDQ0ZTcw
LzEvMXhZZ25YM3ZtS0s3TkpkX1pRQ2JOU0RhSlc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPFz9yamg
weetUa+wsm24nYOvauLhAg7+bID4PFuC0gzmB3Sfq9aKE7+e2L7hPXYUGE9HwbA7
UwjfDYSXZ7ZZQZlL+EdU/4KsJpnmx6azB7IhYGN7bu2jocrHU1DPEsV0f1niNy2A
cum9wECv2yGK6NLOkrciyHv6wpAoJKu1yvSJe7IbbNhTKXr5S7RPIhndxwbztuVg
S4wrOE3ojYXkQ3Tp0YD2q0S5m/x1AvV27CgxJUaaFhuREqCib5/yPRnbC+rKT4Wj
eX9Nb3cutLtoF1jrVgwQjYzTKW7UGnhOd6spb+EvjT5G08635qiVBl8CRH2N/x7D
zGzRbPgeN1bK/Q==
-----END CERTIFICATE-----