Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft
File:                     bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft (raw, json)
Hash identifier:          gvil6vsi7TSjBIxQvlbYM9Phz/0cq/tqhhmxjd7JY4c=
Subject key identifier:   50:8D:6C:A9:C8:F2:0C:8C:8D:B9:53:35:78:45:24:A8:AD:69:3E:F6
Authority key identifier: 6D:37:56:D5:40:E5:C1:7F:19:4C:45:CA:47:38:66:5D:51:AC:CB:6C
Certificate issuer:       /CN=6d3756d540e5c17f194c45ca4738665d51accb6c
Certificate serial:       01962ECFB847738ECBF7619C0D91985A206F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft
Manifest number:          0ADA
Signing time:             Sun 13 Apr 2025 11:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:27 +0000
Files and hashes:         1: WnnNCSNbQcMr5ycrnf-3odrRamo.roa (hash: CNZwx9BS6io+5OwCBW8g3opemfIgF6eCFyUvWkBYWDU=)
                          2: bTdW1UDlwX8ZTEXKRzhmXVGsy2w.crl (hash: 4Kvpm6eY3NihI27NJ06ic9vcwESiDue6IZ6oG/487f0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b8:47:73:8e:cb:f7:61:9c:0d:91:98:5a:20:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d3756d540e5c17f194c45ca4738665d51accb6c
        Validity
            Not Before: Apr 13 11:01:27 2025 GMT
            Not After : Apr 14 11:01:27 2025 GMT
        Subject: CN=508d6ca9c8f20c8c8db95335784524a8ad693ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b1:5d:1c:b4:90:8f:c9:5a:87:4b:be:0f:96:
                    5c:d3:c9:1d:b0:e9:b4:11:3b:2b:a5:f5:c3:d1:f7:
                    9b:6a:97:da:cc:2b:ae:1c:02:e0:06:38:2f:ab:30:
                    72:36:8d:57:8d:cf:73:73:a0:7b:a8:77:b5:65:1d:
                    07:05:0a:cd:ae:49:e8:1f:5a:9c:1b:bb:c4:0b:cb:
                    c1:b2:81:fe:df:87:2d:69:66:36:2c:66:66:c0:28:
                    5a:bc:a3:9f:b2:29:e2:90:e9:30:88:5a:43:08:06:
                    72:67:c0:e3:02:93:0f:4f:1e:c4:96:99:67:40:17:
                    05:00:02:a1:3b:34:c0:f8:bb:e8:aa:c5:61:94:1b:
                    3a:df:ab:17:71:49:54:fc:7d:a4:b1:ca:34:d1:17:
                    ee:69:a8:53:a6:12:11:16:20:f8:ff:3c:c8:90:f3:
                    4f:25:e5:7c:51:2b:8b:74:d0:a6:c5:2b:18:68:2b:
                    df:a1:04:6c:f7:b1:01:df:d6:06:78:f2:9c:84:7d:
                    1a:51:68:0e:05:eb:c7:c3:af:29:82:93:a4:bd:12:
                    d2:2f:73:24:22:f2:dc:25:d7:ab:05:6d:3d:59:05:
                    87:36:b5:b6:7d:cd:4f:1a:49:bf:ef:41:f7:78:fe:
                    75:12:ec:34:e3:ab:ab:03:83:06:3c:2c:8f:ac:ef:
                    3c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:8D:6C:A9:C8:F2:0C:8C:8D:B9:53:35:78:45:24:A8:AD:69:3E:F6
            X509v3 Authority Key Identifier:
                keyid:6D:37:56:D5:40:E5:C1:7F:19:4C:45:CA:47:38:66:5D:51:AC:CB:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/95f682-eade-4c18-ac52-c8a9e372c229/1/bTdW1UDlwX8ZTEXKRzhmXVGsy2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:98:d2:b9:dd:48:f9:b3:8a:70:da:a0:4b:0f:0c:05:aa:24:
         4d:a3:0a:2a:16:92:4b:b8:e5:e8:b3:a8:aa:f8:ba:67:e9:a5:
         66:69:f0:c5:34:60:99:8a:1b:62:80:82:28:96:27:08:63:14:
         41:db:f4:94:a8:60:c5:01:41:00:17:93:90:e9:db:74:e0:23:
         f1:62:d8:2d:74:2c:85:d9:88:9e:6c:68:39:80:28:56:e3:89:
         aa:10:b4:de:c9:67:27:4f:ae:b1:c8:5b:ea:0a:67:66:ef:2f:
         57:d0:04:34:ff:1a:d3:f7:f6:89:ff:ac:03:68:f7:25:f3:b0:
         7a:72:94:c8:ce:ba:4c:4d:99:d3:81:1d:d8:ce:b9:05:1f:5d:
         34:27:67:98:24:be:92:d0:7f:f5:74:ad:79:98:14:f7:7b:34:
         23:0e:66:0e:65:69:6a:1a:1d:6b:5c:b5:53:c1:50:bb:e2:4a:
         47:45:0b:9b:b5:e6:ad:d5:06:c8:5c:60:a5:69:8b:40:5d:b7:
         dd:86:10:73:0b:b1:22:eb:8a:aa:69:4e:69:46:d9:6b:f3:85:
         bb:82:10:31:bc:96:0e:a5:ab:ce:b1:f7:cf:2e:75:a5:cc:bd:
         e5:09:9a:f6:3b:49:b7:11:a5:63:f6:cd:3f:48:38:61:17:f1:
         e6:75:ea:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz7hHc47L92GcDZGYWiBvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMzc1NmQ1NDBlNWMxN2YxOTRjNDVjYTQ3Mzg2NjVkNTFh
Y2NiNmMwHhcNMjUwNDEzMTEwMTI3WhcNMjUwNDE0MTEwMTI3WjAzMTEwLwYDVQQD
Eyg1MDhkNmNhOWM4ZjIwYzhjOGRiOTUzMzU3ODQ1MjRhOGFkNjkzZWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77FdHLSQj8lah0u+D5Zc08kdsOm0
ETsrpfXD0febapfazCuuHALgBjgvqzByNo1Xjc9zc6B7qHe1ZR0HBQrNrknoH1qc
G7vEC8vBsoH+34ctaWY2LGZmwChavKOfsinikOkwiFpDCAZyZ8DjApMPTx7Elpln
QBcFAAKhOzTA+LvoqsVhlBs636sXcUlU/H2ksco00RfuaahTphIRFiD4/zzIkPNP
JeV8USuLdNCmxSsYaCvfoQRs97EB39YGePKchH0aUWgOBevHw68pgpOkvRLSL3Mk
IvLcJderBW09WQWHNrW2fc1PGkm/70H3eP51Euw046urA4MGPCyPrO88yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCNbKnI8gyMjblTNXhFJKitaT72MB8GA1UdIwQY
MBaAFG03VtVA5cF/GUxFykc4Zl1RrMtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlRkVzFVRGx3WDhaVEVYS1J6aG1YVkdzeTJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC85NWY2ODItZWFkZS00YzE4LWFjNTIt
YzhhOWUzNzJjMjI5LzEvYlRkVzFVRGx3WDhaVEVYS1J6aG1YVkdzeTJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC85NWY2ODItZWFkZS00YzE4LWFjNTItYzhhOWUzNzJjMjI5
LzEvYlRkVzFVRGx3WDhaVEVYS1J6aG1YVkdzeTJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJjSud1I
+bOKcNqgSw8MBaokTaMKKhaSS7jl6LOoqvi6Z+mlZmnwxTRgmYobYoCCKJYnCGMU
Qdv0lKhgxQFBABeTkOnbdOAj8WLYLXQshdmInmxoOYAoVuOJqhC03slnJ0+uschb
6gpnZu8vV9AENP8a0/f2if+sA2j3JfOwenKUyM66TE2Z04Ed2M65BR9dNCdnmCS+
ktB/9XSteZgU93s0Iw5mDmVpahoda1y1U8FQu+JKR0ULm7XmrdUGyFxgpWmLQF23
3YYQcwuxIuuKqmlOaUbZa/OFu4IQMbyWDqWrzrH3zy51pcy95Qma9jtJtxGlY/bN
P0g4YRfx5nXqOg==
-----END CERTIFICATE-----