Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
File:                     bHOgSn0Ost9H2vDDn7p142XIhT0.mft (raw, json)
Hash identifier:          ckEUntZD50fxZN6zruiYFDU1jIc0rMQkhcNOh1AgWPo=
Subject key identifier:   FC:D3:49:4D:C3:16:98:20:9D:24:07:64:A4:36:F6:6D:2D:74:F4:C2
Authority key identifier: 6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D
Certificate issuer:       /CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d
Certificate serial:       01962F3DE4C4FEFA036E62ED9E9DC793B6DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
Manifest number:          0EBC
Signing time:             Sun 13 Apr 2025 13:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:47 +0000
Files and hashes:         1: 1g8u0Gir8yCyVBvzcuA27ZsMTcA.roa (hash: hLEqWjYzmOf232eRZFufaSm1niRcj5QeYBzcD6/dycc=)
                          2: bHOgSn0Ost9H2vDDn7p142XIhT0.crl (hash: WN909svaiMxd+/CZqxsLDi3wVsexb9Aor2eDSgXHdso=)
                          3: uSLH-6azWyM6_toWim6PNb4arp4.roa (hash: imwU+Zb8TWocoYkIF0ZGoxJDK+doen6jZopoR2zFVWE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:e4:c4:fe:fa:03:6e:62:ed:9e:9d:c7:93:b6:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d
        Validity
            Not Before: Apr 13 13:01:47 2025 GMT
            Not After : Apr 14 13:01:47 2025 GMT
        Subject: CN=fcd3494dc31698209d240764a436f66d2d74f4c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2c:a7:67:23:cd:24:61:6d:18:40:0b:a1:d4:
                    1f:14:4c:79:3a:d8:45:44:b1:ca:76:25:1d:13:dc:
                    d0:e6:df:78:3a:f2:1f:c4:53:2e:38:a9:6c:6b:19:
                    9b:6c:f4:29:30:ec:7a:09:c2:09:c2:3d:d0:2c:c3:
                    10:3f:5d:0e:be:49:3e:18:31:2f:61:66:ce:fb:64:
                    c0:56:6f:f7:b2:b5:8d:f9:64:f3:07:46:34:d7:ba:
                    01:6e:6d:b6:92:d8:5f:9c:03:3d:ac:e3:2c:99:ad:
                    33:86:b9:d8:58:3f:f2:78:3b:15:58:79:c0:7a:c5:
                    6b:f2:3a:31:9d:b2:22:1a:5d:45:02:7e:fb:15:63:
                    c2:ee:8c:f9:19:81:fc:f3:21:93:33:b4:d9:50:8b:
                    dc:cd:3b:84:4c:b7:df:7f:b6:79:67:e8:8b:11:c5:
                    89:6b:98:59:50:7c:0b:fd:21:be:71:46:a9:e9:78:
                    0e:3b:69:1a:61:1b:06:f4:4b:a4:ba:28:b7:fc:1a:
                    5c:70:0c:93:51:3b:83:f2:65:77:65:fa:5f:4e:10:
                    38:db:16:d1:02:5c:2c:22:5d:76:47:5e:94:85:7a:
                    7e:8b:7e:5a:41:a4:d7:9f:cf:ac:69:3f:29:aa:df:
                    dd:b4:17:4d:f4:6a:1c:66:74:41:d7:56:66:45:2a:
                    35:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D3:49:4D:C3:16:98:20:9D:24:07:64:A4:36:F6:6D:2D:74:F4:C2
            X509v3 Authority Key Identifier:
                keyid:6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:da:c6:d1:f8:58:cb:6a:6b:bb:96:98:40:c0:88:6c:6b:88:
         67:85:7c:05:f5:73:0b:d5:62:d6:b1:73:d6:28:72:fd:42:1f:
         f7:27:0d:4c:66:89:7a:0c:9d:5c:a4:d1:c2:e2:d0:63:57:1f:
         6e:c5:1e:b7:a7:9f:91:b0:d1:f4:32:2c:87:eb:29:c7:46:fa:
         72:66:49:da:75:6d:33:c6:34:3c:6a:43:07:5f:77:20:7f:77:
         c0:62:65:75:59:80:38:4f:9a:61:2a:1c:0e:72:f8:ca:c3:40:
         22:a4:ae:08:ec:b2:6b:03:f8:34:a5:0b:65:c7:35:3a:64:9a:
         f1:b8:12:e2:9a:ec:41:1c:64:31:15:fc:26:83:3b:a1:95:ae:
         9c:c6:61:ae:2e:b2:0a:b4:be:f5:e2:f4:ad:ce:72:3f:09:00:
         74:25:17:6c:7e:fa:d8:fd:ef:68:31:1b:71:97:23:38:3e:4f:
         1b:e6:2d:9a:c1:9c:36:24:65:a2:1e:de:e3:01:0d:94:65:a8:
         52:6d:2f:bb:b0:f8:9f:fb:a7:62:a5:57:72:af:23:f4:22:1e:
         77:28:c7:89:e7:c4:82:80:80:db:90:24:5d:4c:60:2e:23:4c:
         93:a8:e2:c2:f3:3d:bd:b5:5d:af:c9:96:f6:8b:32:9b:ae:9a:
         af:ac:34:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPeTE/voDbmLtnp3Hk7bdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNzNhMDRhN2QwZWIyZGY0N2RhZjBjMzlmYmE3NWUzNjVj
ODg1M2QwHhcNMjUwNDEzMTMwMTQ3WhcNMjUwNDE0MTMwMTQ3WjAzMTEwLwYDVQQD
EyhmY2QzNDk0ZGMzMTY5ODIwOWQyNDA3NjRhNDM2ZjY2ZDJkNzRmNGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCynZyPNJGFtGEALodQfFEx5OthF
RLHKdiUdE9zQ5t94OvIfxFMuOKlsaxmbbPQpMOx6CcIJwj3QLMMQP10Ovkk+GDEv
YWbO+2TAVm/3srWN+WTzB0Y017oBbm22kthfnAM9rOMsma0zhrnYWD/yeDsVWHnA
esVr8joxnbIiGl1FAn77FWPC7oz5GYH88yGTM7TZUIvczTuETLfff7Z5Z+iLEcWJ
a5hZUHwL/SG+cUap6XgOO2kaYRsG9Eukuii3/BpccAyTUTuD8mV3ZfpfThA42xbR
AlwsIl12R16UhXp+i35aQaTXn8+saT8pqt/dtBdN9GocZnRB11ZmRSo1KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzTSU3DFpggnSQHZKQ29m0tdPTCMB8GA1UdIwQY
MBaAFGxzoEp9DrLfR9rww5+6deNlyIU9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkhPZ1NuME9zdDlIMnZERG43cDE0MlhJaFQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi80MmFmMWUtZDU1My00ZmU2LTlmYzMt
Zjk2MzMyOTJjOTc3LzEvYkhPZ1NuME9zdDlIMnZERG43cDE0MlhJaFQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi80MmFmMWUtZDU1My00ZmU2LTlmYzMtZjk2MzMyOTJjOTc3
LzEvYkhPZ1NuME9zdDlIMnZERG43cDE0MlhJaFQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAONrG0fhY
y2pru5aYQMCIbGuIZ4V8BfVzC9Vi1rFz1ihy/UIf9ycNTGaJegydXKTRwuLQY1cf
bsUet6efkbDR9DIsh+spx0b6cmZJ2nVtM8Y0PGpDB193IH93wGJldVmAOE+aYSoc
DnL4ysNAIqSuCOyyawP4NKULZcc1OmSa8bgS4prsQRxkMRX8JoM7oZWunMZhri6y
CrS+9eL0rc5yPwkAdCUXbH762P3vaDEbcZcjOD5PG+YtmsGcNiRloh7e4wENlGWo
Um0vu7D4n/unYqVXcq8j9CIedyjHiefEgoCA25AkXUxgLiNMk6jiwvM9vbVdr8mW
9osym66ar6w0ig==
-----END CERTIFICATE-----