Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/d4ef16-2795-4f39-9be9-6175e83c6a2b/1/BLYeUUDNiYT3_iAQ21nr2y8-1OY.mft
File:                     BLYeUUDNiYT3_iAQ21nr2y8-1OY.mft (raw, json)
Hash identifier:          5kGUZJaCdvUH6a/kS7HtAlT3X6xpQg4SXonhhS8LW38=
Subject key identifier:   28:1E:AC:FD:0D:77:13:0E:AD:2C:75:4B:4B:6D:CD:C7:BF:C8:F8:84
Authority key identifier: 04:B6:1E:51:40:CD:89:84:F7:FE:20:10:DB:59:EB:DB:2F:3E:D4:E6
Certificate issuer:       /CN=04b61e5140cd8984f7fe2010db59ebdb2f3ed4e6
Certificate serial:       01962E98E7C44DB7C3BEDE2239A4A1CB7C15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BLYeUUDNiYT3_iAQ21nr2y8-1OY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/d4ef16-2795-4f39-9be9-6175e83c6a2b/1/BLYeUUDNiYT3_iAQ21nr2y8-1OY.mft
Manifest number:          0B42
Signing time:             Sun 13 Apr 2025 10:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:34 +0000
Files and hashes:         1: BLYeUUDNiYT3_iAQ21nr2y8-1OY.crl (hash: /Wmz2SsEN1juqy66G1Xd2floC3v64tJGLRPMFWg4iUU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e7:c4:4d:b7:c3:be:de:22:39:a4:a1:cb:7c:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04b61e5140cd8984f7fe2010db59ebdb2f3ed4e6
        Validity
            Not Before: Apr 13 10:01:34 2025 GMT
            Not After : Apr 14 10:01:34 2025 GMT
        Subject: CN=281eacfd0d77130ead2c754b4b6dcdc7bfc8f884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ee:19:9d:b0:28:b9:8e:ba:96:19:be:a2:4e:
                    8c:76:3c:e2:cc:09:d9:08:cf:da:02:da:5e:4d:29:
                    95:7e:30:b2:5b:69:78:6c:90:c4:c9:b4:0c:24:fb:
                    82:cb:b2:18:5d:81:5c:11:53:72:d9:f2:4f:3d:07:
                    20:84:58:46:3f:f7:7a:12:7b:95:22:14:90:f4:99:
                    7d:bd:d5:49:79:39:ad:86:f2:62:44:8e:80:84:43:
                    05:f4:cc:07:dc:af:7c:14:59:b1:ff:2c:37:9e:53:
                    51:81:92:7c:d8:fc:39:9f:50:fc:da:88:85:26:38:
                    cd:bd:fe:91:dd:06:60:1b:f1:12:43:c4:a1:5d:96:
                    e1:81:12:ff:4e:51:54:ff:7c:e2:1a:fc:42:6a:37:
                    95:2b:48:e2:4a:da:2a:51:54:ef:d6:37:b3:a9:5f:
                    90:63:c3:81:a0:b9:c6:0f:46:5a:e0:a4:c3:50:d3:
                    93:86:b3:f9:f9:c1:8d:c4:8e:4e:8c:dd:90:d7:3f:
                    83:72:9a:7d:71:c6:32:e0:8a:cb:0c:3f:6f:80:93:
                    a4:18:bd:22:28:f9:6f:2d:68:87:3a:f6:4a:e4:18:
                    12:cb:f2:c7:c3:b8:17:68:92:ec:5b:39:97:96:7e:
                    c2:cf:cf:4e:8b:c2:65:b6:b5:58:bc:a4:94:c3:10:
                    da:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:1E:AC:FD:0D:77:13:0E:AD:2C:75:4B:4B:6D:CD:C7:BF:C8:F8:84
            X509v3 Authority Key Identifier:
                keyid:04:B6:1E:51:40:CD:89:84:F7:FE:20:10:DB:59:EB:DB:2F:3E:D4:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLYeUUDNiYT3_iAQ21nr2y8-1OY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/d4ef16-2795-4f39-9be9-6175e83c6a2b/1/BLYeUUDNiYT3_iAQ21nr2y8-1OY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/d4ef16-2795-4f39-9be9-6175e83c6a2b/1/BLYeUUDNiYT3_iAQ21nr2y8-1OY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:a5:4c:94:9a:8e:41:f1:e4:5d:bc:f9:08:aa:73:4e:47:08:
         d4:39:fc:39:5f:f0:cb:90:e8:c3:b9:01:48:32:c8:7f:4e:7a:
         99:4a:da:e9:9f:bf:19:59:da:45:b7:29:c7:ab:ba:28:b8:d1:
         58:3c:35:cf:c3:d8:99:6c:7f:be:3b:6e:34:67:6c:e3:71:a5:
         4e:80:4b:0d:93:a9:6d:c2:e3:fa:0b:b7:b5:bc:52:07:46:bb:
         c2:d1:f0:df:c8:ec:ae:5a:6d:69:55:14:a5:ee:fb:19:af:b4:
         63:2f:27:37:7c:89:24:c8:3f:d2:5f:de:49:75:4a:50:38:32:
         45:2b:10:de:db:38:c3:1b:a9:a4:b2:89:63:dd:8b:03:d2:c7:
         e1:4f:96:fe:35:ae:bb:21:3f:df:0e:f5:73:6e:c2:ca:98:c3:
         a8:48:0f:89:c6:14:7a:0a:b4:bf:9f:5a:47:d4:4e:a1:1a:98:
         ae:a8:39:99:1b:ce:8c:e5:2e:f8:22:c9:e6:20:91:cc:c4:80:
         01:32:8c:3e:86:4a:aa:6d:41:e8:0c:40:f2:c3:4e:70:1a:e3:
         a5:89:a8:3c:78:20:9d:1f:db:1e:14:6d:cd:0d:66:ee:ad:48:
         5a:11:5c:90:ac:24:85:73:7a:7f:80:bb:dc:1f:23:79:73:ca:
         0e:24:1e:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumOfETbfDvt4iOaShy3wVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0YjYxZTUxNDBjZDg5ODRmN2ZlMjAxMGRiNTllYmRiMmYz
ZWQ0ZTYwHhcNMjUwNDEzMTAwMTM0WhcNMjUwNDE0MTAwMTM0WjAzMTEwLwYDVQQD
EygyODFlYWNmZDBkNzcxMzBlYWQyYzc1NGI0YjZkY2RjN2JmYzhmODg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0u4ZnbAouY66lhm+ok6MdjzizAnZ
CM/aAtpeTSmVfjCyW2l4bJDEybQMJPuCy7IYXYFcEVNy2fJPPQcghFhGP/d6EnuV
IhSQ9Jl9vdVJeTmthvJiRI6AhEMF9MwH3K98FFmx/yw3nlNRgZJ82Pw5n1D82oiF
JjjNvf6R3QZgG/ESQ8ShXZbhgRL/TlFU/3ziGvxCajeVK0jiStoqUVTv1jezqV+Q
Y8OBoLnGD0Za4KTDUNOThrP5+cGNxI5OjN2Q1z+Dcpp9ccYy4IrLDD9vgJOkGL0i
KPlvLWiHOvZK5BgSy/LHw7gXaJLsWzmXln7Cz89Oi8JltrVYvKSUwxDadwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgerP0NdxMOrSx1S0ttzce/yPiEMB8GA1UdIwQY
MBaAFAS2HlFAzYmE9/4gENtZ69svPtTmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkxZZVVVRE5pWVQzX2lBUTIxbnIyeTgtMU9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9kNGVmMTYtMjc5NS00ZjM5LTliZTkt
NjE3NWU4M2M2YTJiLzEvQkxZZVVVRE5pWVQzX2lBUTIxbnIyeTgtMU9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9kNGVmMTYtMjc5NS00ZjM5LTliZTktNjE3NWU4M2M2YTJi
LzEvQkxZZVVVRE5pWVQzX2lBUTIxbnIyeTgtMU9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaaVMlJqO
QfHkXbz5CKpzTkcI1Dn8OV/wy5Dow7kBSDLIf056mUra6Z+/GVnaRbcpx6u6KLjR
WDw1z8PYmWx/vjtuNGds43GlToBLDZOpbcLj+gu3tbxSB0a7wtHw38jsrlptaVUU
pe77Ga+0Yy8nN3yJJMg/0l/eSXVKUDgyRSsQ3ts4wxuppLKJY92LA9LH4U+W/jWu
uyE/3w71c27CypjDqEgPicYUegq0v59aR9ROoRqYrqg5mRvOjOUu+CLJ5iCRzMSA
ATKMPoZKqm1B6AxA8sNOcBrjpYmoPHggnR/bHhRtzQ1m7q1IWhFckKwkhXN6f4C7
3B8jeXPKDiQefw==
-----END CERTIFICATE-----