Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
File:                     MhS0ivRv_G1W3QurOzGH3lPp6yM.mft (raw, json)
Hash identifier:          uKkCda7+Q2WvzIwoVLg/rYBUJNln/dLAQVqPrLffjZg=
Subject key identifier:   25:D3:AC:B0:E9:DA:85:5C:AE:E0:9D:BD:8A:48:EA:44:5A:B2:86:3F
Authority key identifier: 32:14:B4:8A:F4:6F:FC:6D:56:DD:0B:AB:3B:31:87:DE:53:E9:EB:23
Certificate issuer:       /CN=3214b48af46ffc6d56dd0bab3b3187de53e9eb23
Certificate serial:       01962FAB11A132F38E380C6DC69833F8AD4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft
Manifest number:          035A
Signing time:             Sun 13 Apr 2025 15:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:02 +0000
Files and hashes:         1: MhS0ivRv_G1W3QurOzGH3lPp6yM.crl (hash: ejikklGlGBQSaWH0gnB4XzQZLaWz68YCa+GjI29vug4=)
                          2: xjdC4ob7aRS2Ev-O6nidCaBCpZg.roa (hash: SBgN/gihku+/q5pAC+Vic8NfDHBeeV+OVc/nVKV8Vm4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:11:a1:32:f3:8e:38:0c:6d:c6:98:33:f8:ad:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3214b48af46ffc6d56dd0bab3b3187de53e9eb23
        Validity
            Not Before: Apr 13 15:01:02 2025 GMT
            Not After : Apr 14 15:01:02 2025 GMT
        Subject: CN=25d3acb0e9da855caee09dbd8a48ea445ab2863f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:af:f2:fc:99:30:74:6c:61:34:44:d1:e8:28:
                    15:21:6f:df:af:b7:35:20:3f:16:95:71:16:ad:9f:
                    b3:89:63:00:ff:75:1b:b9:6b:0b:86:81:4a:14:cf:
                    bb:95:d3:0f:41:81:c4:c2:d7:7b:8d:ce:b5:64:2d:
                    ef:56:0e:2e:88:c5:41:d2:6c:73:c7:63:38:8f:f1:
                    5f:94:59:66:72:81:66:1b:c5:c5:11:fe:a9:cd:50:
                    f1:cf:99:5b:a9:89:fe:92:37:61:cd:11:b3:bb:e7:
                    69:34:5c:5e:fc:97:b3:bd:a6:be:f1:cb:63:38:a6:
                    05:cd:54:96:a3:a5:f7:26:84:f6:d9:8c:01:b8:87:
                    ac:44:3e:be:63:bb:5e:da:a9:4d:45:bb:b9:10:26:
                    39:76:ae:ef:48:76:91:f7:7b:06:47:29:33:01:f6:
                    d4:31:f5:7c:52:12:ae:d9:fb:bd:60:19:a3:0d:34:
                    ae:6e:fe:e2:7d:cd:1f:8a:c9:b3:d6:0d:52:b1:77:
                    a3:06:eb:e2:8e:4b:ce:1b:8e:af:da:4b:eb:2a:52:
                    7e:0f:68:e7:e8:c2:65:e7:c7:cf:10:0c:d1:7a:e8:
                    6d:20:6a:84:68:19:11:72:5b:49:c7:af:11:82:64:
                    b6:3e:6a:07:30:ae:57:4c:63:76:fb:46:79:d7:0b:
                    b4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D3:AC:B0:E9:DA:85:5C:AE:E0:9D:BD:8A:48:EA:44:5A:B2:86:3F
            X509v3 Authority Key Identifier:
                keyid:32:14:B4:8A:F4:6F:FC:6D:56:DD:0B:AB:3B:31:87:DE:53:E9:EB:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:af:da:83:16:13:89:ee:f9:e4:e0:ca:10:e5:c1:35:73:fb:
         da:5e:4d:88:78:d4:16:26:2f:8f:51:0d:47:b1:ba:ca:2c:87:
         ff:04:2a:b3:e8:ca:14:d0:b8:92:79:87:d1:f9:bb:49:15:01:
         cd:8c:a6:e9:f4:b9:89:28:57:db:f7:05:ee:73:0c:74:f5:cf:
         56:a7:64:e4:33:a0:63:ab:c2:08:fe:6f:2d:14:63:68:f5:f2:
         85:57:9b:d2:14:e6:db:66:b6:d9:fc:ed:39:ab:a4:df:60:e5:
         e3:11:d0:f9:f5:90:c4:0d:1e:ec:71:b2:44:9b:0a:47:e9:cc:
         04:6e:1f:e3:f3:c3:55:ce:56:76:ca:56:66:65:f5:cd:a3:16:
         9b:21:16:32:f0:aa:41:3f:48:d6:91:33:0e:6d:dc:81:70:1c:
         3c:21:1e:fb:cb:61:cc:2d:01:2c:6f:6d:e6:f0:50:ef:c8:91:
         3f:6c:2f:6c:2f:86:e0:3b:0e:10:da:35:37:a9:c4:e5:ef:15:
         7a:ee:89:ff:23:3e:b1:33:45:bf:f6:99:4a:1f:9d:d2:ab:9b:
         07:52:ca:79:5d:f9:4a:b0:28:09:83:4c:78:97:75:56:82:ad:
         09:10:93:a3:85:54:98:6c:15:6c:04:53:2b:62:40:40:f2:43:
         0a:85:f3:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqxGhMvOOOAxtxpgz+K1KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMTRiNDhhZjQ2ZmZjNmQ1NmRkMGJhYjNiMzE4N2RlNTNl
OWViMjMwHhcNMjUwNDEzMTUwMTAyWhcNMjUwNDE0MTUwMTAyWjAzMTEwLwYDVQQD
EygyNWQzYWNiMGU5ZGE4NTVjYWVlMDlkYmQ4YTQ4ZWE0NDVhYjI4NjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxa/y/JkwdGxhNETR6CgVIW/fr7c1
ID8WlXEWrZ+ziWMA/3UbuWsLhoFKFM+7ldMPQYHEwtd7jc61ZC3vVg4uiMVB0mxz
x2M4j/FflFlmcoFmG8XFEf6pzVDxz5lbqYn+kjdhzRGzu+dpNFxe/Jezvaa+8ctj
OKYFzVSWo6X3JoT22YwBuIesRD6+Y7te2qlNRbu5ECY5dq7vSHaR93sGRykzAfbU
MfV8UhKu2fu9YBmjDTSubv7ifc0fismz1g1SsXejBuvijkvOG46v2kvrKlJ+D2jn
6MJl58fPEAzReuhtIGqEaBkRcltJx68RgmS2PmoHMK5XTGN2+0Z51wu0PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXTrLDp2oVcruCdvYpI6kRasoY/MB8GA1UdIwQY
MBaAFDIUtIr0b/xtVt0Lqzsxh95T6esjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWhTMGl2UnZfRzFXM1F1ck96R0gzbFBwNnlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wODRmNzEtOTI3YS00ZmE4LWJlYTUt
Y2Q4N2VlOTcwZTZmLzEvTWhTMGl2UnZfRzFXM1F1ck96R0gzbFBwNnlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8wODRmNzEtOTI3YS00ZmE4LWJlYTUtY2Q4N2VlOTcwZTZm
LzEvTWhTMGl2UnZfRzFXM1F1ck96R0gzbFBwNnlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsK/agxYT
ie755ODKEOXBNXP72l5NiHjUFiYvj1ENR7G6yiyH/wQqs+jKFNC4knmH0fm7SRUB
zYym6fS5iShX2/cF7nMMdPXPVqdk5DOgY6vCCP5vLRRjaPXyhVeb0hTm22a22fzt
Oauk32Dl4xHQ+fWQxA0e7HGyRJsKR+nMBG4f4/PDVc5WdspWZmX1zaMWmyEWMvCq
QT9I1pEzDm3cgXAcPCEe+8thzC0BLG9t5vBQ78iRP2wvbC+G4DsOENo1N6nE5e8V
eu6J/yM+sTNFv/aZSh+d0qubB1LKeV35SrAoCYNMeJd1VoKtCRCTo4VUmGwVbART
K2JAQPJDCoXziw==
-----END CERTIFICATE-----