Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
File:                     aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft (raw, json)
Hash identifier:          UtTmUxgTHYJj9M6V8LTIVek5/3jBGXF/6sOViunnrSY=
Subject key identifier:   85:61:65:82:9A:29:8B:3F:AD:48:BD:D6:0C:81:EE:D7:69:54:D6:17
Authority key identifier: 68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52
Certificate issuer:       /CN=6851a3fee77e924146177123dd6753b06fde2452
Certificate serial:       01962ECF6219A738D83EA498D002F3ABC444
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 11:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:05 +0000
Files and hashes:         1: aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl (hash: pC/h4/x8ShjkAeQKOPy7RgjEV7u8Ms+yqc1ug8C2YmE=)
                          2: rFvQ7kKYqXPkmLuwIzu6v_5kUm4.roa (hash: sOutQCKMagct2n7Im9fbDePApSglLVIsuSmVsFlE9uM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:62:19:a7:38:d8:3e:a4:98:d0:02:f3:ab:c4:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6851a3fee77e924146177123dd6753b06fde2452
        Validity
            Not Before: Apr 13 11:01:05 2025 GMT
            Not After : Apr 14 11:01:05 2025 GMT
        Subject: CN=856165829a298b3fad48bdd60c81eed76954d617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4c:16:b7:04:8f:79:93:30:15:5b:af:66:1c:
                    c5:35:d0:d8:57:93:88:dd:0e:cf:bf:6e:e5:5b:72:
                    51:31:a6:ff:1a:04:42:5e:04:82:37:98:01:7a:d5:
                    8f:9a:c2:b9:90:a8:68:17:0b:d3:f6:f4:da:f9:a0:
                    30:47:65:26:c4:d8:6c:02:c6:60:e2:6f:f4:10:0d:
                    09:b2:db:10:51:a3:66:2d:22:fa:17:53:eb:a1:24:
                    97:9d:82:c1:c3:6e:c1:7d:e8:63:5e:a9:af:8b:fe:
                    1d:43:21:6a:6a:4a:b0:5a:2f:8a:ce:41:e0:bc:56:
                    7b:ae:fb:dc:4d:f7:18:a1:f1:ad:19:50:a5:0b:1d:
                    1a:bb:26:19:cb:cb:5a:a6:20:58:d6:2a:91:2c:dd:
                    f3:fc:f9:6f:27:d4:66:2b:88:95:5a:d7:e7:3f:4c:
                    8b:60:4f:e8:20:c8:a0:1b:a2:0e:8a:bf:ca:57:91:
                    f7:14:9a:3c:f4:dc:33:0c:b7:7f:1d:7b:3f:ff:62:
                    80:cd:96:07:ce:eb:66:4c:d4:91:9e:dc:94:b2:be:
                    c8:97:ba:2f:ca:d1:9e:b6:6f:e1:76:9f:bb:b5:8e:
                    16:44:49:4c:6a:19:8b:b4:79:14:3c:29:3d:ca:38:
                    4e:ed:72:36:d1:6a:7b:4e:19:85:4b:4d:f0:7e:7f:
                    65:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:61:65:82:9A:29:8B:3F:AD:48:BD:D6:0C:81:EE:D7:69:54:D6:17
            X509v3 Authority Key Identifier:
                keyid:68:51:A3:FE:E7:7E:92:41:46:17:71:23:DD:67:53:B0:6F:DE:24:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/0059b5-f637-4265-a3e4-a3b58628060d/1/aFGj_ud-kkFGF3Ej3WdTsG_eJFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c0:56:96:42:51:ab:ad:c4:83:a0:c6:10:e1:3a:a8:e8:dc:
         d2:70:eb:68:9d:58:89:aa:25:a3:45:e2:59:99:79:df:eb:6a:
         25:8d:c9:41:0d:b8:ab:a7:70:72:30:b2:f1:f4:28:1b:71:09:
         29:68:4b:09:4b:fc:c2:c0:28:07:a7:22:dc:ae:74:2d:37:2a:
         93:0f:ac:59:d0:6f:2d:ad:4f:13:33:c4:03:4e:5a:8a:de:7d:
         46:32:de:92:f6:bc:d6:50:26:c0:b5:85:1a:a1:e2:3c:a7:16:
         64:51:7e:6f:d6:5f:c5:29:dd:2d:fb:45:15:4a:b3:41:6d:82:
         11:23:0b:fb:d6:47:b7:ed:85:fe:07:0a:5d:d9:1b:36:30:ca:
         bd:5c:3a:12:03:e6:c4:1a:df:05:c5:f7:ce:7e:42:3b:bd:a1:
         e5:20:b4:7c:d0:10:10:22:c0:f3:55:05:11:f2:dd:58:bf:a6:
         13:1d:80:3b:cb:40:5f:21:a1:6f:29:a6:16:c6:49:90:e1:d1:
         75:d9:ea:56:6f:01:58:11:ff:36:23:b9:8f:d5:9b:12:59:e5:
         00:0b:70:b8:6b:98:16:be:67:44:23:c4:bc:cd:b4:72:3a:08:
         b5:4c:3f:ea:90:fd:5f:27:eb:83:d9:39:c3:b8:72:62:10:c6:
         9d:2a:11:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz2IZpzjYPqSY0ALzq8REMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NTFhM2ZlZTc3ZTkyNDE0NjE3NzEyM2RkNjc1M2IwNmZk
ZTI0NTIwHhcNMjUwNDEzMTEwMTA1WhcNMjUwNDE0MTEwMTA1WjAzMTEwLwYDVQQD
Eyg4NTYxNjU4MjlhMjk4YjNmYWQ0OGJkZDYwYzgxZWVkNzY5NTRkNjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUwWtwSPeZMwFVuvZhzFNdDYV5OI
3Q7Pv27lW3JRMab/GgRCXgSCN5gBetWPmsK5kKhoFwvT9vTa+aAwR2UmxNhsAsZg
4m/0EA0JstsQUaNmLSL6F1ProSSXnYLBw27BfehjXqmvi/4dQyFqakqwWi+KzkHg
vFZ7rvvcTfcYofGtGVClCx0auyYZy8tapiBY1iqRLN3z/PlvJ9RmK4iVWtfnP0yL
YE/oIMigG6IOir/KV5H3FJo89NwzDLd/HXs//2KAzZYHzutmTNSRntyUsr7Il7ov
ytGetm/hdp+7tY4WRElMahmLtHkUPCk9yjhO7XI20Wp7ThmFS03wfn9lqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVhZYKaKYs/rUi91gyB7tdpVNYXMB8GA1UdIwQY
MBaAFGhRo/7nfpJBRhdxI91nU7Bv3iRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUZHal91ZC1ra0ZHRjNFajNXZFRzR19lSkZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8wMDU5YjUtZjYzNy00MjY1LWEzZTQt
YTNiNTg2MjgwNjBkLzEvYUZHal91ZC1ra0ZHRjNFajNXZFRzR19lSkZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8wMDU5YjUtZjYzNy00MjY1LWEzZTQtYTNiNTg2MjgwNjBk
LzEvYUZHal91ZC1ra0ZHRjNFajNXZFRzR19lSkZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg8BWlkJR
q63Eg6DGEOE6qOjc0nDraJ1Yiaolo0XiWZl53+tqJY3JQQ24q6dwcjCy8fQoG3EJ
KWhLCUv8wsAoB6ci3K50LTcqkw+sWdBvLa1PEzPEA05ait59RjLekva81lAmwLWF
GqHiPKcWZFF+b9ZfxSndLftFFUqzQW2CESML+9ZHt+2F/gcKXdkbNjDKvVw6EgPm
xBrfBcX3zn5CO72h5SC0fNAQECLA81UFEfLdWL+mEx2AO8tAXyGhbymmFsZJkOHR
ddnqVm8BWBH/NiO5j9WbElnlAAtwuGuYFr5nRCPEvM20cjoItUw/6pD9Xyfrg9k5
w7hyYhDGnSoRUA==
-----END CERTIFICATE-----