Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
File:                     ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft (raw, json)
Hash identifier:          4znI1sbN086Y/CwC3OdqDDvDPJbxu9B9LDT3ufSH4TI=
Subject key identifier:   4A:CF:47:F9:3B:A5:AB:DD:64:6A:11:A8:FC:1B:18:17:76:D0:FC:AC
Authority key identifier: BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94
Certificate issuer:       /CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
Certificate serial:       01962DF39DCC91DBB6C95DB701A1027F0D3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
Manifest number:          0BAD
Signing time:             Sun 13 Apr 2025 07:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:02 +0000
Files and hashes:         1: Q2LTA1GKdHj7d0i_1GvyqSIwjxQ.roa (hash: xu02NdCI991FR8WiB+pSZuZa9Qgpw7qq1Oeg+OkFXG4=)
                          2: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl (hash: DV54bI1o6DWXIkB8UM3YqV/IpeoUndcVkwWeSFC2oJY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:9d:cc:91:db:b6:c9:5d:b7:01:a1:02:7f:0d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
        Validity
            Not Before: Apr 13 07:01:02 2025 GMT
            Not After : Apr 14 07:01:02 2025 GMT
        Subject: CN=4acf47f93ba5abdd646a11a8fc1b181776d0fcac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b3:e9:06:bb:b3:38:93:10:f0:04:ea:51:98:
                    3b:5a:9f:b6:b3:41:20:21:42:78:33:3c:08:03:08:
                    4a:55:b6:41:0d:06:4c:6e:e7:f7:10:df:95:dd:9f:
                    e7:c7:c9:73:bb:47:1c:74:00:c3:a3:25:30:a0:53:
                    0c:3c:fd:b5:b7:17:6b:e5:a6:6b:27:0e:52:de:d6:
                    e1:e8:3a:7a:b3:7f:64:c7:9d:bb:e5:7d:86:b3:4b:
                    b7:02:2c:66:a5:39:b8:57:03:3c:2c:16:22:b8:75:
                    de:97:b4:df:2a:48:2d:81:1e:36:a9:42:03:06:93:
                    e8:a5:01:b2:64:02:53:b1:11:f4:0f:d3:d6:45:4c:
                    d1:7c:a0:f6:cf:b3:79:72:59:f7:73:be:0d:f8:9b:
                    3d:c8:6f:12:a2:93:34:fb:44:f0:94:60:c4:86:7d:
                    a5:45:cb:0c:33:cb:61:ad:c3:a1:82:f9:8f:ce:35:
                    47:72:bc:24:db:06:3c:b3:8e:70:8b:13:ab:2d:e1:
                    ea:6e:fe:47:cf:2b:0d:d9:57:c5:cf:ff:5c:28:c4:
                    50:43:c4:e2:ed:f1:80:d8:96:ff:7c:d9:a5:23:0c:
                    7d:ee:17:61:83:55:ba:63:17:49:b4:34:fa:b8:15:
                    57:fd:ba:75:45:70:85:99:6b:c3:10:ed:e3:df:ad:
                    7c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CF:47:F9:3B:A5:AB:DD:64:6A:11:A8:FC:1B:18:17:76:D0:FC:AC
            X509v3 Authority Key Identifier:
                keyid:BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:6f:f4:82:c8:80:94:b4:71:be:40:ac:2e:e7:bd:2d:9d:08:
         d2:d3:5a:f4:d1:a2:c9:da:80:c1:ae:cd:f0:b6:42:c7:e2:cc:
         6d:aa:ea:b1:ee:72:95:c8:84:75:40:b3:0f:04:3a:a4:a9:68:
         73:39:6f:e9:da:d6:42:1e:32:d3:a8:fa:db:a3:14:bb:ab:70:
         60:14:27:92:f9:d5:5e:24:11:c6:17:d3:41:25:10:72:24:3b:
         87:9f:41:14:bf:23:6f:25:25:12:01:e9:1a:8b:3b:d8:a6:10:
         93:57:6a:76:45:99:ec:9b:cb:2a:18:a0:4a:53:4a:4b:af:75:
         fb:e3:0f:53:4d:a5:7d:e4:da:19:bd:02:8a:65:b9:5b:c8:e1:
         f0:d7:5e:da:00:b4:2b:48:26:95:95:b5:f5:7f:1f:84:f2:47:
         f4:74:c8:1b:3b:19:05:a0:29:b5:61:72:76:30:67:06:f1:32:
         3c:c2:38:0b:07:e4:5f:12:24:6a:39:30:0f:d5:92:48:b6:77:
         26:68:9a:aa:2a:05:23:4f:41:6a:02:49:b4:40:d2:9a:3c:96:
         6a:5b:03:bd:92:28:e2:bd:f8:d7:2c:4d:74:4b:31:f1:cc:22:
         8a:02:0d:3a:f5:2d:7d:f0:ed:bb:fe:ad:d5:e7:65:6e:23:bd:
         34:17:a3:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt853Mkdu2yV23AaECfw07MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNTE1ODM2YWYzMDBmN2M3MWY3MWRkMThiOWMzZjUxYzI1
MmJiOTQwHhcNMjUwNDEzMDcwMTAyWhcNMjUwNDE0MDcwMTAyWjAzMTEwLwYDVQQD
Eyg0YWNmNDdmOTNiYTVhYmRkNjQ2YTExYThmYzFiMTgxNzc2ZDBmY2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7PpBruzOJMQ8ATqUZg7Wp+2s0Eg
IUJ4MzwIAwhKVbZBDQZMbuf3EN+V3Z/nx8lzu0ccdADDoyUwoFMMPP21txdr5aZr
Jw5S3tbh6Dp6s39kx5275X2Gs0u3AixmpTm4VwM8LBYiuHXel7TfKkgtgR42qUID
BpPopQGyZAJTsRH0D9PWRUzRfKD2z7N5cln3c74N+Js9yG8SopM0+0TwlGDEhn2l
RcsMM8thrcOhgvmPzjVHcrwk2wY8s45wixOrLeHqbv5HzysN2VfFz/9cKMRQQ8Ti
7fGA2Jb/fNmlIwx97hdhg1W6YxdJtDT6uBVX/bp1RXCFmWvDEO3j3618hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFErPR/k7pavdZGoRqPwbGBd20PysMB8GA1UdIwQY
MBaAFLpRWDavMA98cfcd0YucP1HCUruUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWxGWU5xOHdEM3h4OXgzUmk1d19VY0pTdTVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8zZjkwODctNTcyYS00YzZjLTgwYmUt
YmM5MTM0NjZkNDNkLzEvdWxGWU5xOHdEM3h4OXgzUmk1d19VY0pTdTVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8zZjkwODctNTcyYS00YzZjLTgwYmUtYmM5MTM0NjZkNDNk
LzEvdWxGWU5xOHdEM3h4OXgzUmk1d19VY0pTdTVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2/0gsiA
lLRxvkCsLue9LZ0I0tNa9NGiydqAwa7N8LZCx+LMbarqse5ylciEdUCzDwQ6pKlo
czlv6drWQh4y06j626MUu6twYBQnkvnVXiQRxhfTQSUQciQ7h59BFL8jbyUlEgHp
Gos72KYQk1dqdkWZ7JvLKhigSlNKS691++MPU02lfeTaGb0CimW5W8jh8Nde2gC0
K0gmlZW19X8fhPJH9HTIGzsZBaAptWFydjBnBvEyPMI4CwfkXxIkajkwD9WSSLZ3
JmiaqioFI09BagJJtEDSmjyWalsDvZIo4r341yxNdEsx8cwiigINOvUtffDtu/6t
1edlbiO9NBejig==
-----END CERTIFICATE-----