Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
File:                     bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft (raw, json)
Hash identifier:          j5Rto9v0Sy4d3JFFLIpuA9aV4vao58yrql2qeRNjRWU=
Subject key identifier:   E5:7F:1A:A5:10:E5:32:98:A4:95:72:1C:80:81:A3:91:BF:F1:A0:CF
Authority key identifier: 6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75
Certificate issuer:       /CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675
Certificate serial:       01962FAB3D2E36DBF61DE0BEEA1B6BF6B8E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft
Manifest number:          7D
Signing time:             Sun 13 Apr 2025 15:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:13 +0000
Files and hashes:         1: MB79B-8QZwUqYrXc2Ibwogq_qLQ.roa (hash: bNBfBbjDpqRStExCWEma6tP6lj9BYj7p2ZAmcoBXfmY=)
                          2: bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl (hash: zT7ynnZx3AserG2eafmcLYopR5y9cX2JL/56HhxnPKk=)
                          3: jf4WdQ24BygRnLqj51WchS5928k.roa (hash: /f6JdSqZIG39wyf+D4unjoQWcyolGzjFS4yjumA6E0g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:3d:2e:36:db:f6:1d:e0:be:ea:1b:6b:f6:b8:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675
        Validity
            Not Before: Apr 13 15:01:13 2025 GMT
            Not After : Apr 14 15:01:13 2025 GMT
        Subject: CN=e57f1aa510e53298a495721c8081a391bff1a0cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e8:7b:d5:e3:85:cc:e3:1c:c0:9f:38:f4:d8:
                    42:1c:81:77:5d:e6:3f:0d:8b:c0:71:6c:e8:64:9f:
                    28:49:60:ff:ab:0c:7e:43:92:d0:36:8e:55:08:9d:
                    fb:29:1d:80:c6:ac:29:68:39:47:70:ec:44:ad:e2:
                    50:20:32:a4:a3:9a:47:bb:6c:dd:a3:f0:a5:a4:b0:
                    cb:3b:77:a9:66:ad:d0:92:14:68:2d:e1:c1:b1:1e:
                    ec:9b:b3:3a:ac:0f:4c:8f:19:e4:42:7f:58:3a:3d:
                    3b:d5:dc:d4:c2:33:7e:3e:e1:20:8e:7e:29:09:f8:
                    8e:60:e0:35:30:da:13:2e:e2:1c:64:a0:7c:77:18:
                    7d:a5:03:72:05:c1:55:e9:30:20:33:2b:6c:c7:db:
                    7d:db:5a:ec:02:4c:b5:74:91:76:9c:62:15:ec:9b:
                    64:fe:31:e5:b2:47:bc:f0:bc:b1:15:33:d2:6f:fa:
                    85:25:76:b7:35:63:f1:c7:2d:85:37:e8:3a:d8:bd:
                    b6:20:3b:31:c2:b1:5b:8b:2a:18:20:7d:48:50:d9:
                    a0:5b:dd:c3:8b:d1:fb:61:e1:87:f7:92:f0:1d:e1:
                    6c:21:28:24:2b:0a:42:26:ab:5a:94:9c:3c:4f:48:
                    52:d4:c5:78:7a:d7:3e:60:ba:6f:f5:4d:e7:d4:1d:
                    75:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7F:1A:A5:10:E5:32:98:A4:95:72:1C:80:81:A3:91:BF:F1:A0:CF
            X509v3 Authority Key Identifier:
                keyid:6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ac:ab:5e:31:6a:26:b4:89:5a:d5:2e:ca:16:a6:99:e0:9c:
         95:f2:45:eb:34:ae:f7:97:02:86:e8:1f:03:a0:e6:bf:c5:be:
         3a:c9:fe:a5:90:74:92:45:04:b9:87:5e:13:f4:c1:a8:c9:83:
         66:9f:cd:bd:83:43:49:1b:e6:83:1b:5a:c6:6e:c1:12:64:a0:
         f6:d7:17:ed:57:01:e5:c9:0c:f5:45:cf:15:54:ac:f0:0d:39:
         74:17:a9:ed:02:1a:81:75:84:38:d8:3f:ee:ae:95:f3:8a:8b:
         ef:5e:38:26:da:ad:e4:84:c3:1a:93:14:cb:94:df:e1:47:e7:
         56:fb:55:32:96:ab:81:b9:a2:de:c4:0f:c2:ec:f0:06:17:d6:
         b8:b6:e5:1a:44:d8:e8:7a:5e:05:f0:60:43:f0:b6:5f:d0:4b:
         f9:4d:cb:46:a1:ed:b4:11:85:2f:99:04:b8:fb:0c:57:01:d1:
         1a:7d:9b:21:2e:c1:d9:be:63:bd:f0:27:68:51:63:ec:83:a1:
         d1:e7:c6:32:27:a4:c2:2c:d2:47:d4:0c:82:df:cb:84:8e:df:
         85:dd:c6:1e:8e:6e:52:0a:b7:a9:6c:34:9b:d4:a5:33:89:98:
         81:a8:72:33:0d:04:68:a1:33:3d:ed:de:98:9c:bf:7a:db:13:
         e4:ed:28:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqz0uNtv2HeC+6htr9rjjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMTk1YjliZDQ3MDAxZWFiNTBmZGJhMWRlMGQyZDNmNDUy
N2Y2NzUwHhcNMjUwNDEzMTUwMTEzWhcNMjUwNDE0MTUwMTEzWjAzMTEwLwYDVQQD
EyhlNTdmMWFhNTEwZTUzMjk4YTQ5NTcyMWM4MDgxYTM5MWJmZjFhMGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOh71eOFzOMcwJ849NhCHIF3XeY/
DYvAcWzoZJ8oSWD/qwx+Q5LQNo5VCJ37KR2AxqwpaDlHcOxEreJQIDKko5pHu2zd
o/ClpLDLO3epZq3QkhRoLeHBsR7sm7M6rA9MjxnkQn9YOj071dzUwjN+PuEgjn4p
CfiOYOA1MNoTLuIcZKB8dxh9pQNyBcFV6TAgMytsx9t921rsAky1dJF2nGIV7Jtk
/jHlske88LyxFTPSb/qFJXa3NWPxxy2FN+g62L22IDsxwrFbiyoYIH1IUNmgW93D
i9H7YeGH95LwHeFsISgkKwpCJqtalJw8T0hS1MV4etc+YLpv9U3n1B11TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOV/GqUQ5TKYpJVyHICBo5G/8aDPMB8GA1UdIwQY
MBaAFGwZW5vUcAHqtQ/bod4NLT9FJ/Z1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8wMTBkM2QtMWJhOC00YTk2LTgyMTIt
OTRhYzhhZjFiZmNmLzEvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8wMTBkM2QtMWJhOC00YTk2LTgyMTItOTRhYzhhZjFiZmNm
LzEvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANayrXjFq
JrSJWtUuyhammeCclfJF6zSu95cChugfA6Dmv8W+Osn+pZB0kkUEuYdeE/TBqMmD
Zp/NvYNDSRvmgxtaxm7BEmSg9tcX7VcB5ckM9UXPFVSs8A05dBep7QIagXWEONg/
7q6V84qL7144Jtqt5ITDGpMUy5Tf4UfnVvtVMpargbmi3sQPwuzwBhfWuLblGkTY
6HpeBfBgQ/C2X9BL+U3LRqHttBGFL5kEuPsMVwHRGn2bIS7B2b5jvfAnaFFj7IOh
0efGMiekwizSR9QMgt/LhI7fhd3GHo5uUgq3qWw0m9SlM4mYgahyMw0EaKEzPe3e
mJy/etsT5O0o7A==
-----END CERTIFICATE-----