Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
File:                     1ztArr-IwXsbViEopW9CRfLxVDg.mft (raw, json)
Hash identifier:          BaYi06PvCYoUgUhjPQOjRZ3Wnh4FsPSSJ+lM+/BCOWM=
Subject key identifier:   2B:C2:30:5F:F1:D4:75:F2:93:E4:D8:D6:8F:75:56:86:50:6F:68:B2
Authority key identifier: D7:3B:40:AE:BF:88:C1:7B:1B:56:21:28:A5:6F:42:45:F2:F1:54:38
Certificate issuer:       /CN=d73b40aebf88c17b1b562128a56f4245f2f15438
Certificate serial:       01962F7457C60B66B2A492D68D7F6C4ACF1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
Manifest number:          13C1
Signing time:             Sun 13 Apr 2025 14:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:15 +0000
Files and hashes:         1: 1ztArr-IwXsbViEopW9CRfLxVDg.crl (hash: yDcpM32YyolrjNqnnO8VOtHe/sFDw9w4NKvBk70OxPw=)
                          2: fAenkccYvoOHEDML32yn807Jw6Q.roa (hash: 3BpxdC7ljMXfXdlUeHh5VXiJ8eVP4DoTTn7sLwUeuhg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:57:c6:0b:66:b2:a4:92:d6:8d:7f:6c:4a:cf:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d73b40aebf88c17b1b562128a56f4245f2f15438
        Validity
            Not Before: Apr 13 14:01:15 2025 GMT
            Not After : Apr 14 14:01:15 2025 GMT
        Subject: CN=2bc2305ff1d475f293e4d8d68f755686506f68b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a1:aa:86:2c:a5:57:5a:e5:1c:32:6d:28:f7:
                    ce:73:d4:1c:81:78:a3:53:3a:8d:f8:b6:e6:86:9a:
                    b9:26:86:88:61:91:0e:a9:c2:d3:26:4f:35:05:e4:
                    5d:54:e7:1e:bd:3a:c2:8e:3c:cd:cd:57:15:e3:62:
                    a7:de:d7:f1:84:76:1d:7d:e2:71:e6:b7:26:d0:61:
                    08:b7:f2:8a:85:cf:7b:f8:19:a3:e0:05:ab:30:04:
                    1c:68:15:48:f9:0b:a0:26:dc:ae:ca:67:0f:ab:ce:
                    9c:c0:b9:96:91:96:cc:32:b3:92:38:f5:a8:68:6f:
                    04:5b:9c:00:46:9a:8f:a9:76:d0:e0:8a:03:ca:a5:
                    1a:25:4b:b6:dc:57:73:17:a5:da:23:8b:44:b3:19:
                    a3:cc:5a:88:74:88:8a:a7:7a:df:6d:ff:14:5f:1b:
                    52:c5:ec:44:fe:ff:21:f7:db:de:37:af:45:b4:57:
                    63:99:48:e8:be:6f:e6:de:51:39:ae:b3:2c:3e:16:
                    31:c5:53:bc:d1:9e:03:27:12:65:8d:f6:53:c2:d3:
                    90:60:ab:80:0c:31:9f:5e:d9:77:88:9a:97:18:15:
                    0f:4e:e2:d6:81:a4:21:39:c2:9f:0f:48:7e:11:49:
                    26:8a:aa:ab:3c:6a:ea:6c:ab:85:96:4a:49:7c:e1:
                    72:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C2:30:5F:F1:D4:75:F2:93:E4:D8:D6:8F:75:56:86:50:6F:68:B2
            X509v3 Authority Key Identifier:
                keyid:D7:3B:40:AE:BF:88:C1:7B:1B:56:21:28:A5:6F:42:45:F2:F1:54:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a5:16:aa:0a:8c:59:99:d1:8a:72:4b:a7:86:d6:7c:7d:32:
         53:8f:a6:bb:e8:21:21:b8:56:0c:f0:90:c6:9a:ab:13:08:31:
         a7:e0:d7:52:3a:2a:a4:82:be:9a:8a:b2:e3:6a:34:42:89:01:
         06:15:30:b5:3e:0a:8d:d5:45:89:3d:27:ad:ef:7e:7c:2e:11:
         83:e1:ed:9a:71:18:3a:ec:7a:35:9b:34:75:e8:a0:b6:47:fa:
         41:e7:ea:15:6d:63:7a:c2:3b:12:12:cb:bf:16:de:53:05:0d:
         2a:e0:a6:55:ee:e4:19:6d:af:a2:4c:e1:7d:b1:76:f9:c4:25:
         0b:0f:ca:75:bb:ae:38:62:4c:ee:6a:30:6f:14:67:fd:ef:a9:
         6c:75:63:d3:8f:76:7a:4a:2e:ff:6f:f0:ab:e8:aa:2b:17:c6:
         66:5e:f8:93:98:54:89:12:37:b1:74:75:df:9b:97:82:d1:49:
         2f:05:d4:db:68:18:80:d5:12:8b:30:6f:9c:29:f6:39:f4:c5:
         ab:bf:69:a6:d9:b0:c7:46:1b:04:48:73:6e:fd:db:32:88:51:
         cc:89:b7:ae:41:45:c7:0d:bb:5e:b0:8d:31:6d:1b:69:b6:4b:
         09:a4:3b:70:80:14:87:75:b4:ed:ac:ed:c7:aa:06:b0:ad:a5:
         e6:af:fe:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdFfGC2aypJLWjX9sSs8bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3M2I0MGFlYmY4OGMxN2IxYjU2MjEyOGE1NmY0MjQ1ZjJm
MTU0MzgwHhcNMjUwNDEzMTQwMTE1WhcNMjUwNDE0MTQwMTE1WjAzMTEwLwYDVQQD
EygyYmMyMzA1ZmYxZDQ3NWYyOTNlNGQ4ZDY4Zjc1NTY4NjUwNmY2OGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKGqhiylV1rlHDJtKPfOc9QcgXij
UzqN+Lbmhpq5JoaIYZEOqcLTJk81BeRdVOcevTrCjjzNzVcV42Kn3tfxhHYdfeJx
5rcm0GEIt/KKhc97+Bmj4AWrMAQcaBVI+QugJtyuymcPq86cwLmWkZbMMrOSOPWo
aG8EW5wARpqPqXbQ4IoDyqUaJUu23FdzF6XaI4tEsxmjzFqIdIiKp3rfbf8UXxtS
xexE/v8h99veN69FtFdjmUjovm/m3lE5rrMsPhYxxVO80Z4DJxJljfZTwtOQYKuA
DDGfXtl3iJqXGBUPTuLWgaQhOcKfD0h+EUkmiqqrPGrqbKuFlkpJfOFybQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvCMF/x1HXyk+TY1o91VoZQb2iyMB8GA1UdIwQY
MBaAFNc7QK6/iMF7G1YhKKVvQkXy8VQ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXp0QXJyLUl3WHNiVmlFb3BXOUNSZkx4VkRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9hZmUyYjktZjlhNS00YzZiLWFiNWUt
YjlkN2Y0MWZjMTg5LzEvMXp0QXJyLUl3WHNiVmlFb3BXOUNSZkx4VkRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9hZmUyYjktZjlhNS00YzZiLWFiNWUtYjlkN2Y0MWZjMTg5
LzEvMXp0QXJyLUl3WHNiVmlFb3BXOUNSZkx4VkRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT6UWqgqM
WZnRinJLp4bWfH0yU4+mu+ghIbhWDPCQxpqrEwgxp+DXUjoqpIK+moqy42o0QokB
BhUwtT4KjdVFiT0nre9+fC4Rg+HtmnEYOux6NZs0deigtkf6QefqFW1jesI7EhLL
vxbeUwUNKuCmVe7kGW2vokzhfbF2+cQlCw/KdbuuOGJM7mowbxRn/e+pbHVj0492
ekou/2/wq+iqKxfGZl74k5hUiRI3sXR135uXgtFJLwXU22gYgNUSizBvnCn2OfTF
q79pptmwx0YbBEhzbv3bMohRzIm3rkFFxw27XrCNMW0babZLCaQ7cIAUh3W07azt
x6oGsK2l5q/+YA==
-----END CERTIFICATE-----