Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
File:                     L6TocLw3rJcx_m_PloLrZX5QvKM.mft (raw, json)
Hash identifier:          xfG9HbqKTjB7KznLBx9zcoWK6ZGcFMLmccKZkOl80xk=
Subject key identifier:   A0:D6:20:B8:F4:7E:2C:2F:DB:00:07:5F:37:CB:84:A9:BD:B6:69:5D
Authority key identifier: 2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3
Certificate issuer:       /CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3
Certificate serial:       01962FAB7EC9B4A25E76E300D10530E9D5DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft
Manifest number:          1008
Signing time:             Sun 13 Apr 2025 15:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:30 +0000
Files and hashes:         1: L6TocLw3rJcx_m_PloLrZX5QvKM.crl (hash: wUOHHWzTV8BrCnzl3AXgJUek4vR4WxurVFbbRSrEo0M=)
                          2: m7j41yWDEfLAx4I6fuINswAyiXA.roa (hash: dDqFpGebxjdBoXgviJqZBlxaNfM8q5rLJMGVfhQeHKs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7e:c9:b4:a2:5e:76:e3:00:d1:05:30:e9:d5:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa4e870bc37ac9731fe6fcf9682eb657e50bca3
        Validity
            Not Before: Apr 13 15:01:30 2025 GMT
            Not After : Apr 14 15:01:30 2025 GMT
        Subject: CN=a0d620b8f47e2c2fdb00075f37cb84a9bdb6695d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:90:21:d1:d0:c4:39:ba:95:2f:e8:e1:76:f0:
                    d7:38:3c:04:03:96:d4:da:d5:96:fb:dc:3c:34:4a:
                    9b:d1:6a:70:22:53:dc:4c:4c:e5:09:db:ec:48:6c:
                    6c:aa:9d:d3:da:cb:c4:ab:45:36:45:f9:f2:07:27:
                    30:7f:02:7d:ed:e1:51:80:3d:5b:c3:90:6d:46:15:
                    95:52:9d:dd:3a:95:a9:9f:42:0a:79:23:60:68:21:
                    e2:84:76:88:03:5a:76:61:f4:3e:03:b0:f4:1b:f0:
                    cf:1b:f4:be:be:64:44:03:de:65:78:02:bf:3e:c9:
                    db:36:cb:80:a8:da:22:a3:28:ac:34:ce:8d:eb:95:
                    f4:9a:e8:69:51:06:4f:73:fb:b9:72:24:09:dc:c5:
                    63:47:81:3e:4b:a9:18:b1:ff:d2:e3:71:33:db:4d:
                    68:cf:6e:78:4b:d8:bb:10:cf:bf:e5:69:7b:e5:6b:
                    31:53:25:64:60:b7:80:eb:1e:84:59:b3:b6:6c:40:
                    05:2a:2d:a2:ee:7f:f5:33:a6:f9:ce:a4:a4:83:e5:
                    4b:ce:45:b4:3d:42:c8:e0:0b:a5:6c:32:ca:07:47:
                    63:1e:8f:aa:7f:92:05:ab:a3:ec:a6:02:ec:f6:3b:
                    52:3c:8d:90:f0:2a:74:0c:6c:f2:ab:c5:92:53:16:
                    9a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D6:20:B8:F4:7E:2C:2F:DB:00:07:5F:37:CB:84:A9:BD:B6:69:5D
            X509v3 Authority Key Identifier:
                keyid:2F:A4:E8:70:BC:37:AC:97:31:FE:6F:CF:96:82:EB:65:7E:50:BC:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6TocLw3rJcx_m_PloLrZX5QvKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3f6310-f56b-4165-b8fe-9b87f2afbd7f/1/L6TocLw3rJcx_m_PloLrZX5QvKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:d6:58:47:93:06:64:95:f0:9e:4a:a9:76:d2:a3:8b:08:1e:
         8f:70:b9:95:2a:1c:4f:aa:e3:dc:b5:2a:fa:c3:9e:37:2d:2c:
         42:02:92:b9:7f:c1:5f:d0:91:14:d7:ab:8c:b3:99:99:eb:b5:
         86:4c:c8:d5:8e:eb:d4:68:a2:4f:4f:1c:9c:75:6f:09:75:ba:
         ef:d9:ea:eb:2d:96:09:db:39:49:d9:4c:38:c0:59:79:9d:c9:
         7e:71:55:9e:a4:02:9a:46:86:f7:ee:d5:c8:c5:48:e9:18:bd:
         0d:f6:be:1e:b6:91:18:be:a5:30:1f:c7:ca:df:00:61:5e:e3:
         ff:6f:29:34:1b:60:ed:45:45:fa:c3:fe:9e:3f:37:94:8c:a5:
         26:ff:a8:ea:c3:83:87:ea:c6:34:15:73:86:2c:fa:c6:a4:65:
         ad:4a:af:58:75:9b:77:a0:ff:97:7e:e9:89:0e:82:ef:fd:44:
         6d:20:5b:ce:30:0f:4b:9f:77:65:e1:28:fa:94:e2:bc:d1:4d:
         5f:2d:b3:41:2b:7d:1b:b5:6d:99:37:35:54:4a:df:fa:59:02:
         14:ce:2b:5c:37:f4:c2:37:01:47:ea:aa:55:30:26:1b:a2:12:
         42:58:03:ff:23:e2:db:36:38:1b:31:fc:16:42:d5:63:52:49:
         70:0a:1f:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvq37JtKJeduMA0QUw6dXdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTRlODcwYmMzN2FjOTczMWZlNmZjZjk2ODJlYjY1N2U1
MGJjYTMwHhcNMjUwNDEzMTUwMTMwWhcNMjUwNDE0MTUwMTMwWjAzMTEwLwYDVQQD
EyhhMGQ2MjBiOGY0N2UyYzJmZGIwMDA3NWYzN2NiODRhOWJkYjY2OTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZAh0dDEObqVL+jhdvDXODwEA5bU
2tWW+9w8NEqb0WpwIlPcTEzlCdvsSGxsqp3T2svEq0U2RfnyBycwfwJ97eFRgD1b
w5BtRhWVUp3dOpWpn0IKeSNgaCHihHaIA1p2YfQ+A7D0G/DPG/S+vmREA95leAK/
PsnbNsuAqNoioyisNM6N65X0muhpUQZPc/u5ciQJ3MVjR4E+S6kYsf/S43Ez201o
z254S9i7EM+/5Wl75WsxUyVkYLeA6x6EWbO2bEAFKi2i7n/1M6b5zqSkg+VLzkW0
PULI4AulbDLKB0djHo+qf5IFq6PspgLs9jtSPI2Q8Cp0DGzyq8WSUxaaXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKDWILj0fiwv2wAHXzfLhKm9tmldMB8GA1UdIwQY
MBaAFC+k6HC8N6yXMf5vz5aC62V+ULyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZUb2NMdzNySmN4X21fUGxvTHJaWDVRdktNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8zZjYzMTAtZjU2Yi00MTY1LWI4ZmUt
OWI4N2YyYWZiZDdmLzEvTDZUb2NMdzNySmN4X21fUGxvTHJaWDVRdktNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8zZjYzMTAtZjU2Yi00MTY1LWI4ZmUtOWI4N2YyYWZiZDdm
LzEvTDZUb2NMdzNySmN4X21fUGxvTHJaWDVRdktNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9ZYR5MG
ZJXwnkqpdtKjiwgej3C5lSocT6rj3LUq+sOeNy0sQgKSuX/BX9CRFNerjLOZmeu1
hkzI1Y7r1GiiT08cnHVvCXW679nq6y2WCds5SdlMOMBZeZ3JfnFVnqQCmkaG9+7V
yMVI6Ri9Dfa+HraRGL6lMB/Hyt8AYV7j/28pNBtg7UVF+sP+nj83lIylJv+o6sOD
h+rGNBVzhiz6xqRlrUqvWHWbd6D/l37piQ6C7/1EbSBbzjAPS593ZeEo+pTivNFN
Xy2zQSt9G7VtmTc1VErf+lkCFM4rXDf0wjcBR+qqVTAmG6ISQlgD/yPi2zY4GzH8
FkLVY1JJcAof2g==
-----END CERTIFICATE-----