Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
File:                     bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft (raw, json)
Hash identifier:          4sLZkUOY6NXIIXc/OWhrZCYICT9df0Nkt+EyUpELOe0=
Subject key identifier:   01:CB:C4:E8:CA:E6:88:0D:24:D6:58:D4:F9:4C:BB:68:49:63:37:69
Authority key identifier: 6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4
Certificate issuer:       /CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4
Certificate serial:       01962F7454567ED75608013BB2CE67E36019
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft
Manifest number:          06D3
Signing time:             Sun 13 Apr 2025 14:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:14 +0000
Files and hashes:         1: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl (hash: 1rFDUHVBrITydaETIPsF59WnAoYWlZ1gLNK1Dz51+kw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:54:56:7e:d7:56:08:01:3b:b2:ce:67:e3:60:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4
        Validity
            Not Before: Apr 13 14:01:14 2025 GMT
            Not After : Apr 14 14:01:14 2025 GMT
        Subject: CN=01cbc4e8cae6880d24d658d4f94cbb6849633769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:5b:68:65:36:cd:86:c5:6c:d1:89:a7:68:9d:
                    5e:f7:c6:c9:e1:be:c2:b7:42:3c:46:73:f6:18:af:
                    a1:9b:ca:4c:df:87:30:e7:33:10:1c:30:d3:16:37:
                    9f:27:7a:94:0d:cd:f6:26:7c:5c:5f:f0:dd:96:89:
                    82:04:5f:1f:91:87:4f:9c:ef:7b:d2:bd:d9:ca:7d:
                    77:b8:cc:b5:4c:8d:6d:63:08:67:77:c0:a0:70:c2:
                    7e:c9:a6:c9:bf:58:19:37:e8:fc:03:8b:27:18:82:
                    39:83:28:7d:cd:53:a3:38:0f:d5:1d:aa:b4:e2:67:
                    5d:3c:7e:03:09:83:1d:38:a9:cf:a5:35:c0:58:cb:
                    ad:70:e5:8d:9b:ba:c5:1c:10:40:7f:57:8a:ce:50:
                    51:53:e0:23:88:19:c5:6c:68:2c:6b:d5:cf:84:33:
                    22:80:50:a0:0d:3c:98:af:83:f1:33:84:88:dc:4e:
                    6d:d4:d7:8c:dc:53:dd:6f:b7:a9:67:95:a0:fb:f7:
                    a6:6f:bb:dc:4c:ee:66:c8:2e:dd:e9:77:e7:a3:0e:
                    c0:45:0f:21:71:8c:15:01:fb:a7:74:84:58:84:f6:
                    92:de:c2:21:e3:52:2a:d9:13:08:1f:2e:81:d6:fd:
                    21:75:3c:9f:09:95:25:57:82:41:43:09:42:0f:0f:
                    18:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:CB:C4:E8:CA:E6:88:0D:24:D6:58:D4:F9:4C:BB:68:49:63:37:69
            X509v3 Authority Key Identifier:
                keyid:6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:b9:16:66:73:bc:f8:0e:21:d6:74:35:59:57:f8:0d:4c:86:
         01:43:b1:b5:56:21:86:93:ca:9e:cd:35:fb:9b:8a:58:de:6e:
         71:26:4b:ce:27:ff:ac:79:b7:b7:0f:05:29:c7:80:bd:9c:fa:
         7f:47:07:e2:9d:c8:f8:c3:46:24:f4:54:0f:35:32:4a:e2:47:
         3f:9e:6d:8a:79:88:ad:e0:31:e7:9d:64:02:b9:96:44:6a:12:
         b6:cc:61:86:ed:43:10:a9:c0:db:c6:de:9a:81:00:01:12:ee:
         c3:63:d4:ba:e4:e8:3f:ae:1b:1e:c8:76:30:64:91:50:5a:cc:
         ad:f6:ec:5b:1a:ca:f0:02:fd:1c:c9:c2:a0:a9:19:6c:42:52:
         8b:cc:e6:fe:ec:ca:ce:28:5f:37:0e:9f:1b:ba:18:6b:70:90:
         6c:22:a3:c2:3c:8f:88:2e:3f:8e:6a:07:ba:24:8f:04:18:18:
         ad:f0:9a:24:96:ab:30:76:0c:8c:c2:18:6c:c8:32:39:3a:0e:
         46:3a:b1:8d:4c:34:0c:df:4f:23:b3:bb:4c:e4:fc:d2:1a:21:
         bb:1c:3c:49:06:d7:2a:09:b4:54:79:d7:c9:26:9a:e8:ed:95:
         f0:e6:0d:34:9f:6d:3e:61:0c:76:d0:57:45:52:dd:af:d2:35:
         ce:30:d8:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdFRWftdWCAE7ss5n42AZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZmMzZGEyYjhiMmU0OWNiNTMxMTcxZTkxMGVkY2VlNzlh
ZTU4YTQwHhcNMjUwNDEzMTQwMTE0WhcNMjUwNDE0MTQwMTE0WjAzMTEwLwYDVQQD
EygwMWNiYzRlOGNhZTY4ODBkMjRkNjU4ZDRmOTRjYmI2ODQ5NjMzNzY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51toZTbNhsVs0YmnaJ1e98bJ4b7C
t0I8RnP2GK+hm8pM34cw5zMQHDDTFjefJ3qUDc32JnxcX/DdlomCBF8fkYdPnO97
0r3Zyn13uMy1TI1tYwhnd8CgcMJ+yabJv1gZN+j8A4snGII5gyh9zVOjOA/VHaq0
4mddPH4DCYMdOKnPpTXAWMutcOWNm7rFHBBAf1eKzlBRU+AjiBnFbGgsa9XPhDMi
gFCgDTyYr4PxM4SI3E5t1NeM3FPdb7epZ5Wg+/emb7vcTO5myC7d6Xfnow7ARQ8h
cYwVAfundIRYhPaS3sIh41Iq2RMIHy6B1v0hdTyfCZUlV4JBQwlCDw8YzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHLxOjK5ogNJNZY1PlMu2hJYzdpMB8GA1UdIwQY
MBaAFG38PaK4suSctTEXHpEO3O55rlikMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmZ3OW9yaXk1SnkxTVJjZWtRN2M3bm11V0tRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS83ZDlhOTgtNWZmNy00MjgyLWI1ZmQt
ZGRkNGIwYTFiOWE2LzEvYmZ3OW9yaXk1SnkxTVJjZWtRN2M3bm11V0tRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS83ZDlhOTgtNWZmNy00MjgyLWI1ZmQtZGRkNGIwYTFiOWE2
LzEvYmZ3OW9yaXk1SnkxTVJjZWtRN2M3bm11V0tRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOrkWZnO8
+A4h1nQ1WVf4DUyGAUOxtVYhhpPKns01+5uKWN5ucSZLzif/rHm3tw8FKceAvZz6
f0cH4p3I+MNGJPRUDzUySuJHP55tinmIreAx551kArmWRGoStsxhhu1DEKnA28be
moEAARLuw2PUuuToP64bHsh2MGSRUFrMrfbsWxrK8AL9HMnCoKkZbEJSi8zm/uzK
zihfNw6fG7oYa3CQbCKjwjyPiC4/jmoHuiSPBBgYrfCaJJarMHYMjMIYbMgyOToO
RjqxjUw0DN9PI7O7TOT80hohuxw8SQbXKgm0VHnXySaa6O2V8OYNNJ9tPmEMdtBX
RVLdr9I1zjDY/w==
-----END CERTIFICATE-----