Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
File:                     bZOet0q7zSInwhkqoqN-bcuJjlM.mft (raw, json)
Hash identifier:          jqNdbwae9SSgAUvitMSzp8WLpbeTZ4CCEslHQcJsu0M=
Subject key identifier:   39:63:BD:0A:E4:6F:F2:F1:4E:48:1D:B5:C7:19:D8:A1:0B:80:81:51
Authority key identifier: 6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53
Certificate issuer:       /CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53
Certificate serial:       01962F74A5062FF0C9567F38F0D4C5C1A710
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:35 +0000
Files and hashes:         1: O1oreHXoGfE0x_DduepnzXbv1jQ.roa (hash: YJRrGXYLhqb/8S1lAURaXg16hfYVh9EAfo6ckQiEqy0=)
                          2: bZOet0q7zSInwhkqoqN-bcuJjlM.crl (hash: PYOk2ReD0R3Wh+f+K2WwEtValERLb0Q7H7A8meL+ihs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a5:06:2f:f0:c9:56:7f:38:f0:d4:c5:c1:a7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53
        Validity
            Not Before: Apr 13 14:01:35 2025 GMT
            Not After : Apr 14 14:01:35 2025 GMT
        Subject: CN=3963bd0ae46ff2f14e481db5c719d8a10b808151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ed:73:49:f3:e7:e6:d5:6b:f0:be:48:d8:3b:
                    85:6d:7d:a5:ca:56:5c:c4:51:bd:fb:19:79:bb:7f:
                    ed:e5:ed:02:6a:89:47:5b:35:53:44:12:3f:24:a2:
                    19:a3:23:d5:fb:c4:e8:0b:93:da:d3:b3:06:4e:d7:
                    3a:bc:be:23:6e:45:99:7d:d8:0a:e7:c8:6d:c3:8d:
                    4f:94:c3:1d:78:98:0e:14:58:2e:0b:91:44:cc:c5:
                    60:83:d8:41:45:50:d9:6b:43:c7:90:e9:1b:79:62:
                    6d:fc:1e:60:ca:3d:88:db:0d:6b:df:72:56:34:48:
                    e0:c6:37:92:36:52:ff:67:8a:d9:13:c2:17:85:c7:
                    5b:82:d4:b0:0b:f6:67:a2:1b:1d:27:83:c8:20:b8:
                    48:17:68:6b:c3:64:c5:fd:d6:21:23:7d:e8:40:16:
                    ed:0b:d3:fb:d8:b0:5e:fc:7d:03:6b:6e:ed:90:56:
                    44:83:76:e0:ed:5e:0e:25:5c:59:10:77:1f:2a:46:
                    f7:19:84:41:22:03:88:6c:41:19:ac:ab:48:0b:d1:
                    56:07:c1:2b:49:2c:42:c4:90:d8:1a:39:e2:c8:29:
                    74:48:37:51:49:48:28:a9:b5:3d:c0:2f:c9:19:1a:
                    27:64:0b:00:22:8b:80:62:6e:9d:8e:50:58:65:71:
                    49:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:63:BD:0A:E4:6F:F2:F1:4E:48:1D:B5:C7:19:D8:A1:0B:80:81:51
            X509v3 Authority Key Identifier:
                keyid:6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:64:d8:1a:df:58:7f:55:d7:e2:70:69:d0:c8:9b:77:bf:7f:
         f5:ef:ab:31:6b:65:2a:20:65:04:1b:26:49:8a:90:08:da:41:
         2a:c1:a2:5b:fe:23:33:01:77:c5:aa:e2:93:5f:b7:22:59:e1:
         a5:48:10:f1:99:53:e3:03:a5:30:6e:0c:92:4f:70:40:6f:d9:
         00:6c:4f:fa:ae:8a:e0:0d:a9:ed:5f:48:54:f8:7e:a1:bc:4f:
         79:c2:10:b4:61:8c:34:23:24:10:e0:cb:1e:c9:c5:67:77:a9:
         d2:10:46:aa:79:37:22:a9:3f:23:c7:d2:32:72:0c:2d:34:fe:
         de:00:f7:83:da:68:80:bf:60:f7:60:d8:0f:6b:8d:58:25:e8:
         d4:a8:67:76:e2:3c:71:d4:f3:28:62:81:c5:96:c0:09:a6:0e:
         95:4e:10:11:13:fc:84:2a:8a:81:f9:de:ce:1c:4a:e5:54:89:
         55:5c:78:c6:bd:74:58:1b:c4:ae:65:87:72:d5:fc:95:56:9a:
         77:73:5d:0b:d9:1f:99:8c:12:8a:be:41:48:a0:29:86:11:03:
         7a:90:32:ce:e8:51:59:a0:63:a8:13:8e:d2:b6:6b:db:9b:bf:
         82:fe:d7:e2:75:3e:35:76:75:a5:40:a3:e7:2b:90:63:1c:48:
         85:e5:d8:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdKUGL/DJVn848NTFwacQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkOTM5ZWI3NGFiYmNkMjIyN2MyMTkyYWEyYTM3ZTZkY2I4
OThlNTMwHhcNMjUwNDEzMTQwMTM1WhcNMjUwNDE0MTQwMTM1WjAzMTEwLwYDVQQD
EygzOTYzYmQwYWU0NmZmMmYxNGU0ODFkYjVjNzE5ZDhhMTBiODA4MTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve1zSfPn5tVr8L5I2DuFbX2lylZc
xFG9+xl5u3/t5e0CaolHWzVTRBI/JKIZoyPV+8ToC5Pa07MGTtc6vL4jbkWZfdgK
58htw41PlMMdeJgOFFguC5FEzMVgg9hBRVDZa0PHkOkbeWJt/B5gyj2I2w1r33JW
NEjgxjeSNlL/Z4rZE8IXhcdbgtSwC/ZnohsdJ4PIILhIF2hrw2TF/dYhI33oQBbt
C9P72LBe/H0Da27tkFZEg3bg7V4OJVxZEHcfKkb3GYRBIgOIbEEZrKtIC9FWB8Er
SSxCxJDYGjniyCl0SDdRSUgoqbU9wC/JGRonZAsAIouAYm6djlBYZXFJDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDljvQrkb/LxTkgdtccZ2KELgIFRMB8GA1UdIwQY
MBaAFG2TnrdKu80iJ8IZKqKjfm3LiY5TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlpPZXQwcTd6U0lud2hrcW9xTi1iY3VKamxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mZmMzYzYtZjY0Zi00MDkwLTgyOTIt
ZTk1ZTJkM2QyM2UwLzEvYlpPZXQwcTd6U0lud2hrcW9xTi1iY3VKamxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mZmMzYzYtZjY0Zi00MDkwLTgyOTItZTk1ZTJkM2QyM2Uw
LzEvYlpPZXQwcTd6U0lud2hrcW9xTi1iY3VKamxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmTYGt9Y
f1XX4nBp0Mibd79/9e+rMWtlKiBlBBsmSYqQCNpBKsGiW/4jMwF3xarik1+3Ilnh
pUgQ8ZlT4wOlMG4Mkk9wQG/ZAGxP+q6K4A2p7V9IVPh+obxPecIQtGGMNCMkEODL
HsnFZ3ep0hBGqnk3Iqk/I8fSMnIMLTT+3gD3g9pogL9g92DYD2uNWCXo1KhnduI8
cdTzKGKBxZbACaYOlU4QERP8hCqKgfnezhxK5VSJVVx4xr10WBvErmWHctX8lVaa
d3NdC9kfmYwSir5BSKAphhEDepAyzuhRWaBjqBOO0rZr25u/gv7X4nU+NXZ1pUCj
5yuQYxxIheXYlQ==
-----END CERTIFICATE-----