Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft
File:                     bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft (raw, json)
Hash identifier:          z6DbScmXzytM3I4RR1rmpF2iIqzeNIsy03DILgVPHLQ=
Subject key identifier:   B7:3D:CA:2D:9E:C7:FD:41:7D:92:36:C8:C5:4E:25:52:29:A6:DC:FC
Authority key identifier: 6D:3F:44:39:C9:DD:0B:60:03:E0:94:D3:1A:43:E5:30:9F:4F:FE:F5
Certificate issuer:       /CN=6d3f4439c9dd0b6003e094d31a43e5309f4ffef5
Certificate serial:       01962E2AE2057BE409F4EBB7DE9812CB9DAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bT9EOcndC2AD4JTTGkPlMJ9P_vU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft
Manifest number:          0175
Signing time:             Sun 13 Apr 2025 08:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:24 +0000
Files and hashes:         1: 7f6247ytrAn8qHZ3lg8x0Jbg3pU.roa (hash: wQjiNc4CCIKnGkmgdVYRMnPV1+DQiNnrix3wCvH87Fs=)
                          2: bT9EOcndC2AD4JTTGkPlMJ9P_vU.crl (hash: AcXoWcIuiIGO1FDq6sYHGYbmymuqkHChvxgTH+exclw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e2:05:7b:e4:09:f4:eb:b7:de:98:12:cb:9d:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d3f4439c9dd0b6003e094d31a43e5309f4ffef5
        Validity
            Not Before: Apr 13 08:01:24 2025 GMT
            Not After : Apr 14 08:01:24 2025 GMT
        Subject: CN=b73dca2d9ec7fd417d9236c8c54e255229a6dcfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:83:5e:84:88:5c:09:ae:21:34:44:40:83:ad:
                    57:17:f9:08:77:3d:02:30:49:d5:67:db:1c:41:e3:
                    7d:fc:68:a3:ad:b3:d3:85:01:a3:96:29:ab:0a:ee:
                    32:2f:ca:d2:1f:d1:8f:f5:a9:d5:7a:ab:23:77:4b:
                    1b:5a:47:70:5c:b8:81:05:d0:ce:59:30:69:df:e4:
                    9e:84:80:24:a0:b0:ca:49:ef:c8:c0:ac:98:22:bd:
                    c3:2a:b3:0d:98:66:be:86:a7:17:c0:13:ee:b5:ea:
                    5c:ac:c2:f6:ed:fc:64:99:d0:c3:13:8a:2e:02:bc:
                    6a:8a:b1:0e:2a:29:55:a8:45:28:be:d6:01:df:d8:
                    ad:99:c1:28:ac:d3:45:2e:3f:26:c1:64:be:6e:dc:
                    ff:85:46:56:e7:aa:86:fb:ea:e7:1a:b7:cd:48:a5:
                    df:fc:b5:39:63:f9:dd:ba:c3:b7:ac:23:e1:63:ab:
                    2e:ab:5c:42:6e:4b:38:18:53:0f:76:3e:d6:c0:2c:
                    ae:6a:22:f2:93:d8:16:4e:ab:ae:08:f4:59:a2:60:
                    63:ff:21:c7:9f:41:d7:38:62:ff:92:fc:a9:d0:94:
                    05:21:d7:4e:97:1c:0d:09:c2:f2:44:e9:2e:8a:76:
                    4e:70:18:f7:d9:cd:99:e8:39:5e:c0:c6:88:0f:32:
                    2a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3D:CA:2D:9E:C7:FD:41:7D:92:36:C8:C5:4E:25:52:29:A6:DC:FC
            X509v3 Authority Key Identifier:
                keyid:6D:3F:44:39:C9:DD:0B:60:03:E0:94:D3:1A:43:E5:30:9F:4F:FE:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bT9EOcndC2AD4JTTGkPlMJ9P_vU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c47e41-71b8-4d00-a5a7-5d91b37bd82e/1/bT9EOcndC2AD4JTTGkPlMJ9P_vU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:d1:93:6d:ab:b8:81:f8:ac:0d:a9:4a:02:55:55:89:5b:2e:
         26:5f:8e:25:d0:f5:9a:0d:5f:86:53:8e:25:ce:85:f0:a1:90:
         3c:b8:42:03:49:50:d9:1d:36:68:08:08:3e:1a:51:8b:65:25:
         bb:3d:1b:2e:ab:22:13:65:7f:d4:36:84:c0:76:1a:e3:05:c4:
         af:c0:2a:5f:e1:73:78:aa:20:38:fe:4f:8b:b9:cf:68:c5:48:
         eb:36:11:27:e1:75:0e:ef:ad:ca:88:6d:ca:ee:5f:52:c0:00:
         e6:0b:ef:90:c6:8e:5b:5a:43:b3:0f:1c:23:73:0f:ab:14:5f:
         0b:7c:32:a9:2b:0b:d0:15:b6:61:0f:7c:42:c9:87:f9:e4:26:
         5e:4a:c2:f6:70:b3:06:ae:43:e2:f3:47:bc:bc:ef:c6:be:5d:
         54:4e:83:c8:59:71:68:f7:51:8b:74:7a:3e:94:a6:c7:9a:42:
         ad:c1:2b:6d:0b:e5:18:3f:75:26:72:3e:cf:38:34:4c:3c:37:
         1e:b4:db:40:c7:4b:ba:08:d4:b4:d0:2c:6b:24:12:39:c7:87:
         9f:f9:fa:a7:be:7f:e2:de:76:85:ea:63:87:2e:d8:a2:0a:72:
         79:ae:aa:4e:3b:a2:53:13:d7:e8:6a:05:11:d7:7e:48:ba:8b:
         f6:d5:e4:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKuIFe+QJ9Ou33pgSy52sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkM2Y0NDM5YzlkZDBiNjAwM2UwOTRkMzFhNDNlNTMwOWY0
ZmZlZjUwHhcNMjUwNDEzMDgwMTI0WhcNMjUwNDE0MDgwMTI0WjAzMTEwLwYDVQQD
EyhiNzNkY2EyZDllYzdmZDQxN2Q5MjM2YzhjNTRlMjU1MjI5YTZkY2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54NehIhcCa4hNERAg61XF/kIdz0C
MEnVZ9scQeN9/GijrbPThQGjlimrCu4yL8rSH9GP9anVeqsjd0sbWkdwXLiBBdDO
WTBp3+SehIAkoLDKSe/IwKyYIr3DKrMNmGa+hqcXwBPutepcrML27fxkmdDDE4ou
ArxqirEOKilVqEUovtYB39itmcEorNNFLj8mwWS+btz/hUZW56qG++rnGrfNSKXf
/LU5Y/ndusO3rCPhY6suq1xCbks4GFMPdj7WwCyuaiLyk9gWTquuCPRZomBj/yHH
n0HXOGL/kvyp0JQFIddOlxwNCcLyROkuinZOcBj32c2Z6DlewMaIDzIqUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLc9yi2ex/1BfZI2yMVOJVIpptz8MB8GA1UdIwQY
MBaAFG0/RDnJ3QtgA+CU0xpD5TCfT/71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlQ5RU9jbmRDMkFENEpUVEdrUGxNSjlQX3ZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jNDdlNDEtNzFiOC00ZDAwLWE1YTct
NWQ5MWIzN2JkODJlLzEvYlQ5RU9jbmRDMkFENEpUVEdrUGxNSjlQX3ZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9jNDdlNDEtNzFiOC00ZDAwLWE1YTctNWQ5MWIzN2JkODJl
LzEvYlQ5RU9jbmRDMkFENEpUVEdrUGxNSjlQX3ZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjtGTbau4
gfisDalKAlVViVsuJl+OJdD1mg1fhlOOJc6F8KGQPLhCA0lQ2R02aAgIPhpRi2Ul
uz0bLqsiE2V/1DaEwHYa4wXEr8AqX+FzeKogOP5Pi7nPaMVI6zYRJ+F1Du+tyoht
yu5fUsAA5gvvkMaOW1pDsw8cI3MPqxRfC3wyqSsL0BW2YQ98QsmH+eQmXkrC9nCz
Bq5D4vNHvLzvxr5dVE6DyFlxaPdRi3R6PpSmx5pCrcErbQvlGD91JnI+zzg0TDw3
HrTbQMdLugjUtNAsayQSOceHn/n6p75/4t52hepjhy7Yogpyea6qTjuiUxPX6GoF
Edd+SLqL9tXktw==
-----END CERTIFICATE-----