Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
File:                     bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft (raw, json)
Hash identifier:          bSHW/6cdVEl+zPajFg+ht3tK/DDL+gQe9yeuQPa6CHA=
Subject key identifier:   81:9C:B5:7B:7F:C2:3C:78:8B:70:0F:05:D3:9F:28:32:38:9E:19:CE
Authority key identifier: 6D:36:5F:0D:9B:EE:48:4C:08:5C:F3:FE:33:8A:D0:35:C3:F9:84:79
Certificate issuer:       /CN=6d365f0d9bee484c085cf3fe338ad035c3f98479
Certificate serial:       01962F3DF46E51685BBCBC7CA0E1D5E83B26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
Manifest number:          04A3
Signing time:             Sun 13 Apr 2025 13:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:51 +0000
Files and hashes:         1: bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl (hash: +dn4wqFwCaU6tVA1bffm4RcJ/VgQ2YVEbTE0x/I68wU=)
                          2: kepUhm0anFry8RwMMkqJayre0fg.roa (hash: HEBHciDc0e+f+TYCTKlbfrh1hJ9IXR8LLwkK0vX0JYA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:f4:6e:51:68:5b:bc:bc:7c:a0:e1:d5:e8:3b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d365f0d9bee484c085cf3fe338ad035c3f98479
        Validity
            Not Before: Apr 13 13:01:51 2025 GMT
            Not After : Apr 14 13:01:51 2025 GMT
        Subject: CN=819cb57b7fc23c788b700f05d39f2832389e19ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:af:55:3b:50:cd:4a:de:6d:62:95:6a:17:a7:
                    54:17:f5:1e:7f:a3:5d:55:b3:b1:50:f9:15:b0:ca:
                    39:52:b0:23:a7:17:3f:0a:3d:06:7c:9d:76:b2:ff:
                    cc:2c:00:ea:8d:83:cc:8b:45:f8:19:b9:79:2d:1a:
                    5e:b2:24:fb:92:76:ca:f9:67:76:48:b3:7a:26:07:
                    f4:b2:cf:5f:62:68:10:e9:e3:f0:16:dc:a8:fe:82:
                    6b:2a:67:09:3c:ae:b8:91:74:4a:cd:f1:0d:1f:07:
                    bc:e7:0b:e2:47:d0:83:7b:cf:d9:a4:c2:1c:83:79:
                    2f:a0:2d:8a:2b:47:ca:39:ee:98:08:6b:4c:43:b6:
                    ed:e7:9d:d2:07:30:45:54:4a:a1:c4:80:1b:d0:77:
                    ca:e9:88:f4:49:85:ac:51:69:95:6e:7a:f5:cb:41:
                    ac:df:fb:a1:f9:cb:d0:30:b3:45:32:64:a2:85:9e:
                    17:85:cb:67:22:91:81:7d:02:30:d0:4c:b6:5c:0e:
                    13:6d:b3:94:2d:0e:ec:38:8b:35:12:87:f6:8d:03:
                    2c:28:41:4a:2b:29:0d:3a:4a:e3:9d:c6:57:68:a5:
                    17:82:b0:cb:f9:55:07:d5:b9:e2:b6:86:eb:ee:46:
                    33:79:7d:11:01:ad:a7:3d:65:3c:7e:1c:84:cb:33:
                    21:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:9C:B5:7B:7F:C2:3C:78:8B:70:0F:05:D3:9F:28:32:38:9E:19:CE
            X509v3 Authority Key Identifier:
                keyid:6D:36:5F:0D:9B:EE:48:4C:08:5C:F3:FE:33:8A:D0:35:C3:F9:84:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:1f:ec:b3:90:03:78:63:ca:11:18:1a:45:1e:72:b2:7f:94:
         60:b4:b2:da:b7:4b:dc:69:6b:28:cd:32:f1:58:29:4b:e6:a5:
         a5:ed:4a:c3:34:c7:65:b3:0c:dc:e9:03:c6:05:04:48:3e:d4:
         5f:ea:61:73:3b:f3:67:12:fb:6d:83:4c:41:f7:31:5c:80:2a:
         03:87:49:72:92:26:cc:64:9c:d1:74:e5:99:63:f3:d4:2d:f2:
         78:e4:3b:a9:25:e1:b0:e6:17:5c:27:f3:7a:42:33:0b:1b:5a:
         dd:f4:27:3b:5b:49:fa:0f:4f:4b:48:52:ee:34:5a:20:4b:21:
         18:ad:40:97:12:7e:43:d0:22:e3:41:e5:75:56:68:a1:9e:c1:
         87:9c:70:b6:ce:32:11:58:dd:68:80:1b:e0:45:dc:d9:ae:33:
         c3:96:46:fb:88:c5:19:40:b7:8b:34:9e:78:79:ef:d5:14:6a:
         05:cf:4a:85:aa:d9:67:c9:9d:d7:71:0f:09:9e:1f:eb:6f:70:
         0b:d9:b5:40:42:9d:fc:e2:04:fb:21:b5:cc:15:6a:2e:e5:91:
         27:11:2a:58:88:03:76:84:4e:56:a2:e8:30:cb:59:bb:ed:07:
         80:82:07:cd:8e:f0:14:71:01:00:39:aa:b8:b9:a3:1b:55:f4:
         79:bc:c3:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPfRuUWhbvLx8oOHV6DsmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMzY1ZjBkOWJlZTQ4NGMwODVjZjNmZTMzOGFkMDM1YzNm
OTg0NzkwHhcNMjUwNDEzMTMwMTUxWhcNMjUwNDE0MTMwMTUxWjAzMTEwLwYDVQQD
Eyg4MTljYjU3YjdmYzIzYzc4OGI3MDBmMDVkMzlmMjgzMjM4OWUxOWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0a9VO1DNSt5tYpVqF6dUF/Uef6Nd
VbOxUPkVsMo5UrAjpxc/Cj0GfJ12sv/MLADqjYPMi0X4Gbl5LRpesiT7knbK+Wd2
SLN6Jgf0ss9fYmgQ6ePwFtyo/oJrKmcJPK64kXRKzfENHwe85wviR9CDe8/ZpMIc
g3kvoC2KK0fKOe6YCGtMQ7bt553SBzBFVEqhxIAb0HfK6Yj0SYWsUWmVbnr1y0Gs
3/uh+cvQMLNFMmSihZ4XhctnIpGBfQIw0Ey2XA4TbbOULQ7sOIs1Eof2jQMsKEFK
KykNOkrjncZXaKUXgrDL+VUH1bnitobr7kYzeX0RAa2nPWU8fhyEyzMhjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGctXt/wjx4i3APBdOfKDI4nhnOMB8GA1UdIwQY
MBaAFG02Xw2b7khMCFzz/jOK0DXD+YR5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlRaZkRadnVTRXdJWFBQLU00clFOY1A1aEhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xYjRiZGYtNjdhZC00ZjBlLTgxZWQt
OWU1Yzg1YWY5M2E1LzEvYlRaZkRadnVTRXdJWFBQLU00clFOY1A1aEhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8xYjRiZGYtNjdhZC00ZjBlLTgxZWQtOWU1Yzg1YWY5M2E1
LzEvYlRaZkRadnVTRXdJWFBQLU00clFOY1A1aEhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFR/ss5AD
eGPKERgaRR5ysn+UYLSy2rdL3GlrKM0y8VgpS+alpe1KwzTHZbMM3OkDxgUESD7U
X+phczvzZxL7bYNMQfcxXIAqA4dJcpImzGSc0XTlmWPz1C3yeOQ7qSXhsOYXXCfz
ekIzCxta3fQnO1tJ+g9PS0hS7jRaIEshGK1AlxJ+Q9Ai40HldVZooZ7Bh5xwts4y
EVjdaIAb4EXc2a4zw5ZG+4jFGUC3izSeeHnv1RRqBc9KharZZ8md13EPCZ4f629w
C9m1QEKd/OIE+yG1zBVqLuWRJxEqWIgDdoROVqLoMMtZu+0HgIIHzY7wFHEBADmq
uLmjG1X0ebzDfw==
-----END CERTIFICATE-----