Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
File:                     a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft (raw, json)
Hash identifier:          1+Eg+Y+JMR/qH3goULytkJVpipZpCpqPaPuEMhwkMBY=
Subject key identifier:   9D:5C:3D:97:99:CE:F8:B5:29:64:44:F1:52:3C:A6:77:AA:28:85:12
Authority key identifier: 6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96
Certificate issuer:       /CN=6b57c5dff70ebfe67a400d55f259db2c37192196
Certificate serial:       01962E61D78A29402588D5581C6D332F30F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft
Manifest number:          02AA
Signing time:             Sun 13 Apr 2025 09:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:26 +0000
Files and hashes:         1: DXY1aPZOR4ljjfKNnTzK-ui2GtQ.roa (hash: HmRJXl6KdbWQ5yFSi3ORZiwzeQcQdEBbSpqG5+7FJoc=)
                          2: a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl (hash: skDu3D89Wjdir+AWW3CQmvxVRo7lpffiyj/pNzH2gBM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d7:8a:29:40:25:88:d5:58:1c:6d:33:2f:30:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b57c5dff70ebfe67a400d55f259db2c37192196
        Validity
            Not Before: Apr 13 09:01:26 2025 GMT
            Not After : Apr 14 09:01:26 2025 GMT
        Subject: CN=9d5c3d9799cef8b5296444f1523ca677aa288512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0c:6e:09:3f:22:b1:7b:4b:5d:09:95:af:b7:
                    d0:d5:d3:5b:7d:98:2b:89:ca:47:d8:5b:47:50:92:
                    b7:4a:e3:7b:24:26:e2:c1:9f:95:9f:cd:18:5c:08:
                    5f:d4:d8:d1:f8:34:e5:34:a6:b4:a4:af:43:b5:75:
                    2f:30:80:44:fc:5c:d8:5a:18:fb:d1:9f:92:7a:8b:
                    c0:ae:85:d2:c8:86:34:19:c1:46:99:ff:64:4e:54:
                    b3:3b:b4:fe:26:c8:ea:42:9a:e6:2c:7f:c6:e9:b2:
                    cd:cc:9a:30:4f:c4:69:83:b7:1a:4e:a0:7c:ba:3f:
                    c7:b9:40:e9:ca:47:9a:d7:26:42:94:b0:43:c7:c6:
                    d1:8c:97:9f:62:ea:10:49:37:1b:60:38:48:b8:a8:
                    ea:dc:f7:2d:e3:e7:0b:7f:3d:c5:e4:99:38:da:4a:
                    bc:8f:9c:70:3a:f1:17:f8:80:7c:fa:b7:af:76:f7:
                    8a:12:7c:8a:e3:8c:fe:c9:c8:5f:e4:84:cd:ea:e9:
                    0b:33:e3:67:bd:dc:ad:da:55:94:f8:7f:43:d2:48:
                    34:11:e4:85:48:ea:10:89:2e:a3:32:b4:1d:76:89:
                    ba:36:43:f7:81:0d:f0:1a:e4:a3:79:e5:f9:89:9c:
                    84:7a:b4:43:4d:73:9e:e9:7a:f1:11:97:f9:01:d6:
                    44:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:5C:3D:97:99:CE:F8:B5:29:64:44:F1:52:3C:A6:77:AA:28:85:12
            X509v3 Authority Key Identifier:
                keyid:6B:57:C5:DF:F7:0E:BF:E6:7A:40:0D:55:F2:59:DB:2C:37:19:21:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/a1fF3_cOv-Z6QA1V8lnbLDcZIZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:a8:18:e2:1b:4e:60:1d:f8:22:8e:3f:81:b5:26:b5:90:e0:
         e9:42:3e:52:c9:df:2d:6d:92:12:7b:8f:45:03:39:26:c0:9d:
         30:70:dd:01:a0:b6:7c:12:c3:03:ad:c2:0c:67:f2:92:43:ab:
         d0:0d:5a:04:88:12:e4:2a:6f:81:06:d3:8b:8c:62:26:31:97:
         0c:d2:0f:e8:95:19:9c:7d:2e:24:c4:6b:52:1d:4c:20:57:85:
         e1:d1:f5:cc:5c:81:cc:af:a0:da:04:dd:b7:cc:e3:7f:62:67:
         e2:8b:76:58:6a:49:d9:43:b9:db:57:8a:6a:db:33:27:46:38:
         90:ff:23:bb:f2:f7:71:fa:e7:2e:37:3c:0f:ab:91:a5:d8:fe:
         8a:0e:54:d6:56:1d:b7:3e:d9:52:d9:6d:d8:fa:9d:49:28:b8:
         06:ba:0e:fc:92:f8:6e:21:43:97:2c:6e:1e:8b:63:94:25:7e:
         eb:37:08:3d:c5:27:33:86:52:ef:e9:2b:d9:5c:dd:dd:50:c4:
         c8:f4:e7:54:96:84:d0:31:32:6a:e5:dc:a1:9e:5b:07:0c:85:
         1e:c3:11:c4:80:06:83:df:fe:be:18:32:fd:1b:3b:fa:4f:6c:
         4c:94:dc:1d:37:e4:65:48:e7:9c:68:8c:7a:4e:3e:a0:8a:b6:
         c5:3a:5b:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYdeKKUAliNVYHG0zLzD4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNTdjNWRmZjcwZWJmZTY3YTQwMGQ1NWYyNTlkYjJjMzcx
OTIxOTYwHhcNMjUwNDEzMDkwMTI2WhcNMjUwNDE0MDkwMTI2WjAzMTEwLwYDVQQD
Eyg5ZDVjM2Q5Nzk5Y2VmOGI1Mjk2NDQ0ZjE1MjNjYTY3N2FhMjg4NTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAxuCT8isXtLXQmVr7fQ1dNbfZgr
icpH2FtHUJK3SuN7JCbiwZ+Vn80YXAhf1NjR+DTlNKa0pK9DtXUvMIBE/FzYWhj7
0Z+SeovAroXSyIY0GcFGmf9kTlSzO7T+JsjqQprmLH/G6bLNzJowT8Rpg7caTqB8
uj/HuUDpykea1yZClLBDx8bRjJefYuoQSTcbYDhIuKjq3Pct4+cLfz3F5Jk42kq8
j5xwOvEX+IB8+revdveKEnyK44z+ychf5ITN6ukLM+Nnvdyt2lWU+H9D0kg0EeSF
SOoQiS6jMrQddom6NkP3gQ3wGuSjeeX5iZyEerRDTXOe6XrxEZf5AdZEYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1cPZeZzvi1KWRE8VI8pneqKIUSMB8GA1UdIwQY
MBaAFGtXxd/3Dr/mekANVfJZ2yw3GSGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTFmRjNfY092LVo2UUExVjhsbmJMRGNaSVpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82YWU1OGMtNzYxOC00MWJhLWEzNDMt
YzQ2ZDdiYWMwMmZjLzEvYTFmRjNfY092LVo2UUExVjhsbmJMRGNaSVpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS82YWU1OGMtNzYxOC00MWJhLWEzNDMtYzQ2ZDdiYWMwMmZj
LzEvYTFmRjNfY092LVo2UUExVjhsbmJMRGNaSVpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqgY4htO
YB34Io4/gbUmtZDg6UI+UsnfLW2SEnuPRQM5JsCdMHDdAaC2fBLDA63CDGfykkOr
0A1aBIgS5CpvgQbTi4xiJjGXDNIP6JUZnH0uJMRrUh1MIFeF4dH1zFyBzK+g2gTd
t8zjf2Jn4ot2WGpJ2UO521eKatszJ0Y4kP8ju/L3cfrnLjc8D6uRpdj+ig5U1lYd
tz7ZUtlt2PqdSSi4BroO/JL4biFDlyxuHotjlCV+6zcIPcUnM4ZS7+kr2Vzd3VDE
yPTnVJaE0DEyauXcoZ5bBwyFHsMRxIAGg9/+vhgy/Rs7+k9sTJTcHTfkZUjnnGiM
ek4+oIq2xTpb6g==
-----END CERTIFICATE-----