Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/bXoBv9NLsT37elNXId7EAc2TEtk.mft
File:                     bXoBv9NLsT37elNXId7EAc2TEtk.mft (raw, json)
Hash identifier:          f7cpYt8PWGimYZ/B/yCwNoN+l/SHBhGqGR8tsZVq4Dg=
Subject key identifier:   28:E4:A7:1B:9D:7B:FC:C8:53:94:1C:3C:93:8F:F3:6A:05:97:80:86
Authority key identifier: 6D:7A:01:BF:D3:4B:B1:3D:FB:7A:53:57:21:DE:C4:01:CD:93:12:D9
Certificate issuer:       /CN=6d7a01bfd34bb13dfb7a535721dec401cd9312d9
Certificate serial:       01962F06DE4D08EE7BD14B7382D648FF53A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bXoBv9NLsT37elNXId7EAc2TEtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/bXoBv9NLsT37elNXId7EAc2TEtk.mft
Manifest number:          0DEB
Signing time:             Sun 13 Apr 2025 12:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:41 +0000
Files and hashes:         1: J1daZ0b9QqDyeaqVSA6rdJN33m0.roa (hash: m2mGCz+ed0huZCoFC3yQqfv0T01L6xVokVoZSaSYXMo=)
                          2: bXoBv9NLsT37elNXId7EAc2TEtk.crl (hash: 5pgW6G4TReGnxrhtwWocFrPYXXC4H/zByGcHNGkhkvQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:de:4d:08:ee:7b:d1:4b:73:82:d6:48:ff:53:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d7a01bfd34bb13dfb7a535721dec401cd9312d9
        Validity
            Not Before: Apr 13 12:01:41 2025 GMT
            Not After : Apr 14 12:01:41 2025 GMT
        Subject: CN=28e4a71b9d7bfcc853941c3c938ff36a05978086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:19:3d:f9:8f:9f:dc:ea:bb:0c:ed:25:fa:52:
                    40:10:59:c2:9e:8c:a6:cd:e1:14:3e:d3:db:aa:88:
                    cf:d1:a8:ce:9e:31:c1:98:4d:60:e7:f6:1d:6c:c1:
                    60:8f:63:bf:01:93:4f:f3:4c:fb:c4:01:56:6c:17:
                    b8:28:50:c4:c1:3c:44:41:a0:9b:83:5f:db:b7:0f:
                    b5:b0:57:6e:ee:27:df:1d:81:f9:0d:96:a2:1c:0a:
                    e8:78:16:f0:c4:9d:a5:30:0c:10:d6:f5:35:88:51:
                    84:6c:4d:56:14:b8:dd:85:21:a4:51:5d:ab:f9:42:
                    43:4b:16:67:de:88:4b:4a:79:56:df:b1:b2:8c:a8:
                    64:18:4f:e0:5c:25:0d:8b:75:ff:bf:c1:41:c6:57:
                    b2:fd:85:98:3d:c1:cc:d6:95:57:74:5b:55:86:0b:
                    7c:af:81:3f:e1:99:80:d9:5e:53:8c:e0:ff:d9:c0:
                    46:97:f0:0f:51:ee:a3:6f:e0:ca:4c:cc:bb:7a:bc:
                    98:e9:e0:1c:ee:e3:82:a4:e1:1c:ed:28:f0:b9:fd:
                    28:41:77:45:4e:b8:83:4f:d9:15:d4:00:2a:a4:1a:
                    c5:2f:77:ad:1d:de:52:3e:e2:75:54:2a:83:20:2a:
                    37:55:1c:ec:56:89:b0:bd:7a:0b:72:df:54:58:45:
                    c8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E4:A7:1B:9D:7B:FC:C8:53:94:1C:3C:93:8F:F3:6A:05:97:80:86
            X509v3 Authority Key Identifier:
                keyid:6D:7A:01:BF:D3:4B:B1:3D:FB:7A:53:57:21:DE:C4:01:CD:93:12:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXoBv9NLsT37elNXId7EAc2TEtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/bXoBv9NLsT37elNXId7EAc2TEtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/bXoBv9NLsT37elNXId7EAc2TEtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:0b:fb:ca:0b:5b:15:70:fb:06:92:8b:f7:ae:51:26:f9:1e:
         47:42:36:4e:e2:d3:ff:4f:4b:60:e8:8e:b7:ca:c2:b3:e5:03:
         0b:fe:61:09:b3:47:17:ad:3b:ec:b5:63:85:93:20:d8:68:1b:
         3a:9a:e3:3b:3f:1b:73:a2:32:b9:ba:42:bb:4d:b0:37:98:d3:
         96:42:84:fd:71:06:91:f7:6f:82:87:2a:f5:50:72:08:c1:01:
         4a:44:6e:30:f5:24:9a:a1:2b:24:ba:87:72:db:87:4c:f4:88:
         09:22:13:89:26:2c:7d:9d:e2:e1:f4:6e:e4:7b:02:8a:2b:7a:
         df:f9:7e:00:47:23:e6:8b:b9:3a:c2:ce:46:cd:f0:fc:63:b5:
         c0:99:6a:40:95:23:4e:86:ea:df:86:4a:0b:fb:8f:f9:27:64:
         4e:ca:fb:08:8c:03:d4:5f:50:28:c1:85:21:7b:06:da:29:e2:
         4f:a5:a1:b4:e0:c0:6b:6a:34:a6:e3:d8:bc:a2:38:05:23:b1:
         a7:bc:d9:1b:0c:1a:94:a1:7d:e2:93:78:87:6d:50:27:eb:42:
         c9:b3:75:89:f1:d2:6b:4f:2b:b7:4d:bc:a4:6f:1a:b4:19:91:
         4f:34:5f:e7:7c:59:4d:cf:f7:11:28:b0:dc:30:45:43:98:38:
         02:7b:b9:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBt5NCO570UtzgtZI/1OoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkN2EwMWJmZDM0YmIxM2RmYjdhNTM1NzIxZGVjNDAxY2Q5
MzEyZDkwHhcNMjUwNDEzMTIwMTQxWhcNMjUwNDE0MTIwMTQxWjAzMTEwLwYDVQQD
EygyOGU0YTcxYjlkN2JmY2M4NTM5NDFjM2M5MzhmZjM2YTA1OTc4MDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRk9+Y+f3Oq7DO0l+lJAEFnCnoym
zeEUPtPbqojP0ajOnjHBmE1g5/YdbMFgj2O/AZNP80z7xAFWbBe4KFDEwTxEQaCb
g1/btw+1sFdu7iffHYH5DZaiHAroeBbwxJ2lMAwQ1vU1iFGEbE1WFLjdhSGkUV2r
+UJDSxZn3ohLSnlW37GyjKhkGE/gXCUNi3X/v8FBxley/YWYPcHM1pVXdFtVhgt8
r4E/4ZmA2V5TjOD/2cBGl/APUe6jb+DKTMy7eryY6eAc7uOCpOEc7Sjwuf0oQXdF
TriDT9kV1AAqpBrFL3etHd5SPuJ1VCqDICo3VRzsVomwvXoLct9UWEXIaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjkpxude/zIU5QcPJOP82oFl4CGMB8GA1UdIwQY
MBaAFG16Ab/TS7E9+3pTVyHexAHNkxLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlhvQnY5TkxzVDM3ZWxOWElkN0VBYzJURXRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS81MWQ2ZGQtNmNlOC00NjZkLWEyZDQt
ZGMxN2U1M2NhY2NiLzEvYlhvQnY5TkxzVDM3ZWxOWElkN0VBYzJURXRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS81MWQ2ZGQtNmNlOC00NjZkLWEyZDQtZGMxN2U1M2NhY2Ni
LzEvYlhvQnY5TkxzVDM3ZWxOWElkN0VBYzJURXRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADgv7ygtb
FXD7BpKL965RJvkeR0I2TuLT/09LYOiOt8rCs+UDC/5hCbNHF6077LVjhZMg2Ggb
OprjOz8bc6IyubpCu02wN5jTlkKE/XEGkfdvgocq9VByCMEBSkRuMPUkmqErJLqH
ctuHTPSICSITiSYsfZ3i4fRu5HsCiit63/l+AEcj5ou5OsLORs3w/GO1wJlqQJUj
Tobq34ZKC/uP+SdkTsr7CIwD1F9QKMGFIXsG2iniT6WhtODAa2o0puPYvKI4BSOx
p7zZGwwalKF94pN4h21QJ+tCybN1ifHSa08rt028pG8atBmRTzRf53xZTc/3ESiw
3DBFQ5g4Anu5CA==
-----END CERTIFICATE-----