Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
File:                     bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft (raw, json)
Hash identifier:          SWSlnKb4MMcte0hFYwBQWbaNXWA5rBBxffK3mQdJIgY=
Subject key identifier:   23:57:F7:74:8D:76:58:D5:DA:C0:5B:AB:9E:30:A6:33:FB:D5:EC:05
Authority key identifier: 6C:29:24:4A:C4:02:67:EE:C4:7A:91:70:8F:89:CF:53:66:EA:A8:D7
Certificate issuer:       /CN=6c29244ac40267eec47a91708f89cf5366eaa8d7
Certificate serial:       01962E98B861E4B05ED2BC89D2C4BB292B9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft
Manifest number:          0D7E
Signing time:             Sun 13 Apr 2025 10:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:22 +0000
Files and hashes:         1: bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl (hash: RONGmRHplPDcpvVlFXE15LX5IVImS8jdy99DB+HcZDs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b8:61:e4:b0:5e:d2:bc:89:d2:c4:bb:29:2b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c29244ac40267eec47a91708f89cf5366eaa8d7
        Validity
            Not Before: Apr 13 10:01:22 2025 GMT
            Not After : Apr 14 10:01:22 2025 GMT
        Subject: CN=2357f7748d7658d5dac05bab9e30a633fbd5ec05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:52:01:75:3e:6f:a4:cf:9b:b3:1b:74:1e:1d:
                    f6:1a:53:71:2d:63:70:fd:92:59:5b:ea:a9:dd:70:
                    8d:f9:9f:09:a1:16:23:0a:5e:b6:fa:66:33:cc:ca:
                    bc:27:2d:2c:39:f9:90:be:62:a5:4d:7c:8f:4d:92:
                    25:88:fe:32:d3:51:f0:4e:e4:7f:2d:55:4d:d1:bb:
                    dc:76:25:c7:8f:1d:80:09:28:83:07:3c:59:85:91:
                    44:a2:b3:19:b7:da:50:43:c1:0d:2f:8b:23:1f:f1:
                    c9:af:ad:58:34:c2:e4:5e:10:ed:5c:2c:fb:49:3b:
                    3f:5e:c0:7e:82:e0:64:b0:5e:99:70:22:7b:19:a8:
                    a7:17:18:93:c6:c6:07:c7:a4:1d:89:18:fc:6e:1b:
                    c8:13:cf:b6:3e:ab:70:0f:36:a3:1c:78:cb:1a:ce:
                    75:30:60:21:47:35:23:0b:a2:76:8b:52:a8:28:12:
                    02:64:95:05:a8:59:38:d8:f1:1d:d8:d8:c7:08:46:
                    82:66:68:44:0b:ac:96:fe:65:78:59:4a:91:1f:cc:
                    ea:3a:c2:6b:e9:a6:ac:59:5b:50:df:59:24:b7:c5:
                    67:33:a8:28:3e:b4:b1:00:31:8a:e9:26:cf:a4:45:
                    33:65:a8:65:4c:40:f1:71:87:d9:a7:91:25:64:66:
                    fc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:57:F7:74:8D:76:58:D5:DA:C0:5B:AB:9E:30:A6:33:FB:D5:EC:05
            X509v3 Authority Key Identifier:
                keyid:6C:29:24:4A:C4:02:67:EE:C4:7A:91:70:8F:89:CF:53:66:EA:A8:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCkkSsQCZ-7EepFwj4nPU2bqqNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1f4e7e-c42f-44f2-bbee-e36966ba005c/1/bCkkSsQCZ-7EepFwj4nPU2bqqNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:b1:69:30:49:eb:8f:99:89:0c:5b:69:fc:33:50:e7:e5:f4:
         ce:41:82:4c:85:6b:94:d9:93:cd:0a:79:ba:51:e4:e8:91:1e:
         f1:7d:7b:f8:e1:49:87:be:10:c0:cc:fa:60:30:2a:30:27:e4:
         76:43:6a:54:00:dc:74:cc:87:24:ef:6f:31:ac:0b:0f:a5:24:
         62:cf:98:7f:fb:5a:5d:2c:fa:ec:14:58:b1:be:f2:00:ea:87:
         70:51:7b:6c:95:a9:28:05:7f:34:56:97:94:99:83:b2:12:df:
         71:7c:e9:9d:91:2d:00:5b:35:08:3f:97:41:be:29:8a:4f:bb:
         3f:09:1f:cd:c7:5a:91:eb:3e:63:a2:a0:be:2c:ae:b5:05:6f:
         7c:3d:1a:41:b4:b6:9c:8d:7f:bc:3d:f4:bf:f1:c4:57:98:d1:
         eb:96:c9:ad:02:01:88:bc:68:8f:9c:56:85:ca:cb:10:f0:76:
         41:19:40:40:64:b1:a0:d7:9b:38:2d:90:b4:3e:7e:72:9c:d4:
         ea:fb:60:7e:5e:38:77:84:9e:9e:cf:8c:15:d2:e3:c7:d7:c9:
         3e:8d:f7:65:b2:7a:8e:43:ad:3a:07:b0:f1:8d:38:68:fe:79:
         8d:1d:37:bd:b0:d3:ad:4b:c8:bd:70:4e:1b:0c:20:de:2d:14:
         ca:14:90:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumLhh5LBe0ryJ0sS7KSueMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMjkyNDRhYzQwMjY3ZWVjNDdhOTE3MDhmODljZjUzNjZl
YWE4ZDcwHhcNMjUwNDEzMTAwMTIyWhcNMjUwNDE0MTAwMTIyWjAzMTEwLwYDVQQD
EygyMzU3Zjc3NDhkNzY1OGQ1ZGFjMDViYWI5ZTMwYTYzM2ZiZDVlYzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1IBdT5vpM+bsxt0Hh32GlNxLWNw
/ZJZW+qp3XCN+Z8JoRYjCl62+mYzzMq8Jy0sOfmQvmKlTXyPTZIliP4y01HwTuR/
LVVN0bvcdiXHjx2ACSiDBzxZhZFEorMZt9pQQ8ENL4sjH/HJr61YNMLkXhDtXCz7
STs/XsB+guBksF6ZcCJ7GainFxiTxsYHx6QdiRj8bhvIE8+2PqtwDzajHHjLGs51
MGAhRzUjC6J2i1KoKBICZJUFqFk42PEd2NjHCEaCZmhEC6yW/mV4WUqRH8zqOsJr
6aasWVtQ31kkt8VnM6goPrSxADGK6SbPpEUzZahlTEDxcYfZp5ElZGb8EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNX93SNdljV2sBbq54wpjP71ewFMB8GA1UdIwQY
MBaAFGwpJErEAmfuxHqRcI+Jz1Nm6qjXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkNra1NzUUNaLTdFZXBGd2o0blBVMmJxcU5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8xZjRlN2UtYzQyZi00NGYyLWJiZWUt
ZTM2OTY2YmEwMDVjLzEvYkNra1NzUUNaLTdFZXBGd2o0blBVMmJxcU5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC8xZjRlN2UtYzQyZi00NGYyLWJiZWUtZTM2OTY2YmEwMDVj
LzEvYkNra1NzUUNaLTdFZXBGd2o0blBVMmJxcU5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfLFpMEnr
j5mJDFtp/DNQ5+X0zkGCTIVrlNmTzQp5ulHk6JEe8X17+OFJh74QwMz6YDAqMCfk
dkNqVADcdMyHJO9vMawLD6UkYs+Yf/taXSz67BRYsb7yAOqHcFF7bJWpKAV/NFaX
lJmDshLfcXzpnZEtAFs1CD+XQb4pik+7Pwkfzcdakes+Y6KgviyutQVvfD0aQbS2
nI1/vD30v/HEV5jR65bJrQIBiLxoj5xWhcrLEPB2QRlAQGSxoNebOC2QtD5+cpzU
6vtgfl44d4Sens+MFdLjx9fJPo33ZbJ6jkOtOgew8Y04aP55jR03vbDTrUvIvXBO
Gwwg3i0UyhSQTQ==
-----END CERTIFICATE-----