Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
File:                     bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft (raw, json)
Hash identifier:          /zCNupPaozJw7JASSQi1AZN1DOMJ4BygzIA0ODImjc4=
Subject key identifier:   6F:0C:EB:F3:AE:34:09:02:60:6B:B8:81:E9:EE:9A:AD:8A:FC:74:99
Authority key identifier: 6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D
Certificate issuer:       /CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d
Certificate serial:       01962F744EF79C61FBED8DB9E3903E6C3222
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 14:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:13 +0000
Files and hashes:         1: bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl (hash: XBVcvWRLyDBVoanD4FoKb9LOjdHEaGU7qbDGCZAb9xI=)
                          2: f0mlI3uPHkGxNxppJH1FzET7hkE.roa (hash: fzr3RtH6R3YRfxpidUV64dO9I/Erlus13YAGX+wIcwA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4e:f7:9c:61:fb:ed:8d:b9:e3:90:3e:6c:32:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d
        Validity
            Not Before: Apr 13 14:01:13 2025 GMT
            Not After : Apr 14 14:01:13 2025 GMT
        Subject: CN=6f0cebf3ae340902606bb881e9ee9aad8afc7499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:01:02:af:06:c8:c9:94:88:db:c6:5f:ee:8e:
                    07:51:6c:42:af:18:a3:f7:43:4d:0c:9c:42:a2:7e:
                    de:47:cf:cf:3e:1d:49:d8:b6:ef:df:b7:b7:7e:ba:
                    f2:0f:4b:94:bb:0b:ad:c6:6a:30:f2:d2:62:fe:94:
                    76:29:7a:e2:5c:de:eb:97:2b:45:8b:5e:cf:7b:f4:
                    99:2e:17:ea:f7:c0:e0:b2:49:ed:12:cb:c1:04:a4:
                    0b:64:75:5b:32:b8:dc:57:4f:8f:ad:7b:77:97:6c:
                    14:e0:23:66:fd:40:f0:9c:e5:4d:71:cd:53:74:b2:
                    c3:24:46:8d:e8:be:c6:6d:d4:ad:98:74:fa:3b:bc:
                    6c:f8:a8:61:f9:41:98:b0:93:31:63:ab:8c:ca:f3:
                    ed:0c:08:74:91:b0:2a:09:08:86:73:db:ae:0e:ea:
                    1b:ac:39:23:cd:bb:48:5e:39:5d:4d:be:b7:4e:ad:
                    37:3d:e3:8a:0b:17:4c:34:56:d2:f2:0a:e5:f2:0f:
                    f9:9c:0e:ba:94:a6:8d:2a:d6:12:22:56:b7:8f:26:
                    f5:d5:c4:fe:6b:c8:6f:45:74:21:0d:65:4f:a7:98:
                    2a:3a:a3:1d:93:2a:25:18:65:17:ef:11:f9:49:bf:
                    7c:d2:a1:04:ec:05:4f:dd:9c:13:fa:c3:3b:ce:57:
                    e2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0C:EB:F3:AE:34:09:02:60:6B:B8:81:E9:EE:9A:AD:8A:FC:74:99
            X509v3 Authority Key Identifier:
                keyid:6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:71:d9:3e:87:b3:60:3d:67:4e:1d:ee:e0:53:55:48:cf:f9:
         a8:3c:94:56:a0:9e:ec:86:73:73:0e:1a:7a:dc:ed:cb:1b:89:
         2c:7f:1f:d0:ff:8b:f7:14:2a:e0:ec:23:b7:08:76:cd:9b:09:
         ac:21:73:e5:21:dc:16:e1:a2:21:2c:ec:6f:1c:ef:ac:2d:f8:
         5f:a3:71:98:fd:d4:14:ec:ed:65:b6:f4:86:75:a8:b7:fa:01:
         63:d9:13:53:e2:e9:5b:80:0e:c1:14:ab:6e:57:f7:d1:71:eb:
         c0:6d:b6:68:f0:2d:b6:b5:2e:e4:19:b0:7e:c5:7f:0a:df:a3:
         43:f4:60:96:b1:8c:15:9f:56:4d:f6:14:9f:2a:7d:3e:52:0c:
         30:93:8b:74:24:6e:0a:5a:e3:c3:5a:ae:81:25:8d:dc:c5:3f:
         4e:c9:95:d5:c1:4c:c2:85:50:ed:42:bf:ec:ca:e3:6e:53:3e:
         b4:34:04:65:c3:c6:9e:c8:d2:d3:85:03:9a:7d:59:fd:64:29:
         da:6c:bd:a8:33:02:99:93:78:57:10:bf:ff:96:63:e2:10:2a:
         58:33:bd:ee:8a:b6:39:92:73:97:c4:eb:84:32:6e:b0:e0:72:
         2f:09:51:03:45:83:b3:1f:4d:8b:5a:fe:ad:33:a3:19:e5:f1:
         1e:a1:18:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdE73nGH77Y2545A+bDIiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNDNkNTJjZjVjNzIxNjE2NjM4YTFhYjljM2Q4OWZhOWE5
N2RjNmQwHhcNMjUwNDEzMTQwMTEzWhcNMjUwNDE0MTQwMTEzWjAzMTEwLwYDVQQD
Eyg2ZjBjZWJmM2FlMzQwOTAyNjA2YmI4ODFlOWVlOWFhZDhhZmM3NDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQECrwbIyZSI28Zf7o4HUWxCrxij
90NNDJxCon7eR8/PPh1J2Lbv37e3frryD0uUuwutxmow8tJi/pR2KXriXN7rlytF
i17Pe/SZLhfq98DgskntEsvBBKQLZHVbMrjcV0+PrXt3l2wU4CNm/UDwnOVNcc1T
dLLDJEaN6L7GbdStmHT6O7xs+Khh+UGYsJMxY6uMyvPtDAh0kbAqCQiGc9uuDuob
rDkjzbtIXjldTb63Tq03PeOKCxdMNFbS8grl8g/5nA66lKaNKtYSIla3jyb11cT+
a8hvRXQhDWVPp5gqOqMdkyolGGUX7xH5Sb980qEE7AVP3ZwT+sM7zlfiAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG8M6/OuNAkCYGu4genumq2K/HSZMB8GA1UdIwQY
MBaAFG5D1Sz1xyFhZjihq5w9ifqal9xtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmtQVkxQWEhJV0ZtT0tHcm5EMkotcHFYM0cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ZDAzZWEtODcwMi00YjRjLWExMTct
NmIxYzgyY2U3MTZkLzEvYmtQVkxQWEhJV0ZtT0tHcm5EMkotcHFYM0cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi83ZDAzZWEtODcwMi00YjRjLWExMTctNmIxYzgyY2U3MTZk
LzEvYmtQVkxQWEhJV0ZtT0tHcm5EMkotcHFYM0cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwXHZPoez
YD1nTh3u4FNVSM/5qDyUVqCe7IZzcw4aetztyxuJLH8f0P+L9xQq4Owjtwh2zZsJ
rCFz5SHcFuGiISzsbxzvrC34X6NxmP3UFOztZbb0hnWot/oBY9kTU+LpW4AOwRSr
blf30XHrwG22aPAttrUu5BmwfsV/Ct+jQ/RglrGMFZ9WTfYUnyp9PlIMMJOLdCRu
Clrjw1qugSWN3MU/TsmV1cFMwoVQ7UK/7MrjblM+tDQEZcPGnsjS04UDmn1Z/WQp
2my9qDMCmZN4VxC//5Zj4hAqWDO97oq2OZJzl8TrhDJusOByLwlRA0WDsx9Ni1r+
rTOjGeXxHqEYpw==
-----END CERTIFICATE-----