Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
File:                     MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft (raw, json)
Hash identifier:          QYW9mRsmE559UcQK/mFJUMuk/jI08AkV9kw59xTOoXk=
Subject key identifier:   4F:B5:89:4D:B3:60:11:D6:C9:3C:16:94:94:46:EC:6C:C8:B4:8F:C8
Authority key identifier: 30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC
Certificate issuer:       /CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
Certificate serial:       01962F06E6084789A22795BC8EE4A7B702C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft
Manifest number:          103C
Signing time:             Sun 13 Apr 2025 12:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:43 +0000
Files and hashes:         1: DIrH-kP5nT3HJlZe7jZz_CkvjFY.roa (hash: gKZZgzAyp+INbVPVuZgOHUrKZ9VQYbL1/WwPWyMWDfc=)
                          2: MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl (hash: YlzvMhY7LoJihO7oQPW0vCyE/NB5uMMlz+0JIwMD/8g=)
                          3: gD2PrMpYBnq5bkywvcg86wYgyi0.roa (hash: ZloCpzZ4hxZcPRO4MDOIHc0MdVfMRoHKIu3JaQVOrkU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e6:08:47:89:a2:27:95:bc:8e:e4:a7:b7:02:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30309941a6d84fa4dbddaf0f4ecd99f9f043cfdc
        Validity
            Not Before: Apr 13 12:01:43 2025 GMT
            Not After : Apr 14 12:01:43 2025 GMT
        Subject: CN=4fb5894db36011d6c93c16949446ec6cc8b48fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4f:ef:f0:5b:17:d6:6e:af:83:6b:31:be:64:
                    75:23:ba:7c:0f:6b:41:7e:c8:f1:57:f9:5a:be:b8:
                    19:20:b1:3b:5d:c5:f1:91:f6:1c:79:f6:9b:45:34:
                    be:a6:1b:b8:8a:83:d6:e6:eb:45:16:c2:ba:25:49:
                    8a:12:24:83:7e:ad:d8:61:05:4e:b0:fd:ce:c9:87:
                    82:1e:a7:08:00:73:bc:38:46:71:d8:e7:a3:2a:a7:
                    78:51:a3:5a:f4:ec:a1:b6:64:b5:b6:fc:6c:57:23:
                    a6:72:ab:38:5b:60:90:bb:23:9f:03:28:ba:db:2e:
                    13:44:3b:a5:1d:0f:99:a0:f7:5d:64:51:5e:70:19:
                    3e:68:d0:fe:f2:3f:d3:ee:ba:71:b7:55:35:9b:e2:
                    2d:6c:f2:3e:a8:5f:c4:b9:bf:3d:6e:ee:9f:83:65:
                    dc:5f:27:7c:62:3c:38:52:15:b5:fe:45:ba:fc:89:
                    e5:8f:b9:5d:15:f2:48:9c:8f:f6:52:c3:28:d2:14:
                    86:27:ba:72:1d:70:23:39:46:e7:0b:23:4e:bd:63:
                    df:de:e8:d9:73:ea:03:8b:be:41:50:dd:9e:80:64:
                    73:93:a1:eb:bb:e6:25:57:70:8c:c5:0a:0a:6f:06:
                    22:b5:c0:b6:1c:76:5e:75:ce:60:62:2e:7c:fe:6a:
                    8f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B5:89:4D:B3:60:11:D6:C9:3C:16:94:94:46:EC:6C:C8:B4:8F:C8
            X509v3 Authority Key Identifier:
                keyid:30:30:99:41:A6:D8:4F:A4:DB:DD:AF:0F:4E:CD:99:F9:F0:43:CF:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f1af90-355c-484b-b923-d31d4cb1b129/1/MDCZQabYT6Tb3a8PTs2Z-fBDz9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:16:e7:c9:09:df:5f:f1:f1:84:82:f3:cf:47:58:a1:d8:86:
         19:fc:00:33:98:a9:0d:2a:fa:dc:a4:b3:e3:ee:2d:9f:e3:4a:
         17:4a:57:93:af:26:89:b6:86:8c:c0:f8:10:06:37:aa:29:c2:
         f1:5f:17:ae:b6:bd:9a:8f:6e:80:88:a0:a3:37:fe:33:bb:ea:
         09:f2:16:38:7f:5b:57:75:87:86:94:ec:52:20:23:74:c1:6d:
         d3:64:46:d6:5a:ae:3b:79:35:be:a7:77:0e:8f:e5:4e:ea:24:
         72:42:a6:05:5e:cd:19:2c:9e:a7:0b:41:97:8a:6e:c3:b7:df:
         e2:e5:30:f3:8d:05:de:83:b8:ad:64:2f:6a:a3:fe:df:cb:4e:
         f9:44:04:05:ed:9e:13:ee:a1:17:f5:b8:6f:29:70:b1:a4:9c:
         43:bd:1a:53:a8:46:2b:aa:a3:a0:ce:af:23:fb:9c:c6:4e:0a:
         7a:8c:51:c2:6f:0c:59:56:64:3b:71:9e:5c:ff:7b:16:7b:91:
         93:4a:58:c1:4b:cc:c1:c3:0d:c8:08:6b:e1:71:52:3f:bc:26:
         53:17:49:ee:9c:a2:88:e1:bd:5f:cf:e7:2d:8d:8a:5a:cd:13:
         f1:bf:ad:1d:c1:8b:8f:6a:29:0f:a1:a6:c4:9e:98:e7:2c:22:
         2c:d4:53:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBuYIR4miJ5W8juSntwLIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMzA5OTQxYTZkODRmYTRkYmRkYWYwZjRlY2Q5OWY5ZjA0
M2NmZGMwHhcNMjUwNDEzMTIwMTQzWhcNMjUwNDE0MTIwMTQzWjAzMTEwLwYDVQQD
Eyg0ZmI1ODk0ZGIzNjAxMWQ2YzkzYzE2OTQ5NDQ2ZWM2Y2M4YjQ4ZmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk/v8FsX1m6vg2sxvmR1I7p8D2tB
fsjxV/lavrgZILE7XcXxkfYcefabRTS+phu4ioPW5utFFsK6JUmKEiSDfq3YYQVO
sP3OyYeCHqcIAHO8OEZx2OejKqd4UaNa9OyhtmS1tvxsVyOmcqs4W2CQuyOfAyi6
2y4TRDulHQ+ZoPddZFFecBk+aND+8j/T7rpxt1U1m+ItbPI+qF/Eub89bu6fg2Xc
Xyd8Yjw4UhW1/kW6/Inlj7ldFfJInI/2UsMo0hSGJ7pyHXAjOUbnCyNOvWPf3ujZ
c+oDi75BUN2egGRzk6Hru+YlV3CMxQoKbwYitcC2HHZedc5gYi58/mqPIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+1iU2zYBHWyTwWlJRG7GzItI/IMB8GA1UdIwQY
MBaAFDAwmUGm2E+k292vD07NmfnwQ8/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTURDWlFhYllUNlRiM2E4UFRzMlotZkJEejl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9mMWFmOTAtMzU1Yy00ODRiLWI5MjMt
ZDMxZDRjYjFiMTI5LzEvTURDWlFhYllUNlRiM2E4UFRzMlotZkJEejl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9mMWFmOTAtMzU1Yy00ODRiLWI5MjMtZDMxZDRjYjFiMTI5
LzEvTURDWlFhYllUNlRiM2E4UFRzMlotZkJEejl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhBbnyQnf
X/HxhILzz0dYodiGGfwAM5ipDSr63KSz4+4tn+NKF0pXk68mibaGjMD4EAY3qinC
8V8Xrra9mo9ugIigozf+M7vqCfIWOH9bV3WHhpTsUiAjdMFt02RG1lquO3k1vqd3
Do/lTuokckKmBV7NGSyepwtBl4puw7ff4uUw840F3oO4rWQvaqP+38tO+UQEBe2e
E+6hF/W4bylwsaScQ70aU6hGK6qjoM6vI/ucxk4KeoxRwm8MWVZkO3GeXP97FnuR
k0pYwUvMwcMNyAhr4XFSP7wmUxdJ7pyiiOG9X8/nLY2KWs0T8b+tHcGLj2opD6Gm
xJ6Y5ywiLNRTBA==
-----END CERTIFICATE-----