Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/119c70-3950-4636-8395-2fc486015564/1/bHDW7sK1YF-LG-bOhDlfJGxC3xw.mft
File:                     bHDW7sK1YF-LG-bOhDlfJGxC3xw.mft (raw, json)
Hash identifier:          eZslWSFBNoHhkZeRhVDmImaTGgiz8BXjpJ+Bp4UzYzA=
Subject key identifier:   D1:FF:A6:8B:C2:AD:98:17:20:59:23:89:34:D4:2A:FE:2A:65:E5:77
Authority key identifier: 6C:70:D6:EE:C2:B5:60:5F:8B:1B:E6:CE:84:39:5F:24:6C:42:DF:1C
Certificate issuer:       /CN=6c70d6eec2b5605f8b1be6ce84395f246c42df1c
Certificate serial:       01962E61E69521DF69CABA46C13B990C575C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bHDW7sK1YF-LG-bOhDlfJGxC3xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/119c70-3950-4636-8395-2fc486015564/1/bHDW7sK1YF-LG-bOhDlfJGxC3xw.mft
Manifest number:          0309
Signing time:             Sun 13 Apr 2025 09:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:30 +0000
Files and hashes:         1: bHDW7sK1YF-LG-bOhDlfJGxC3xw.crl (hash: g3FqkVpZqbYFKpj1K4+Bisk1CFIPeLD/0FnSOI7bCNA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e6:95:21:df:69:ca:ba:46:c1:3b:99:0c:57:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c70d6eec2b5605f8b1be6ce84395f246c42df1c
        Validity
            Not Before: Apr 13 09:01:30 2025 GMT
            Not After : Apr 14 09:01:30 2025 GMT
        Subject: CN=d1ffa68bc2ad98172059238934d42afe2a65e577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6d:f1:89:c7:94:72:e4:33:7b:2b:93:53:4f:
                    7a:e1:7b:5d:94:6d:d7:8e:12:25:28:7c:e2:2e:36:
                    c6:da:50:a0:4c:2f:a6:29:c4:df:80:68:85:c2:97:
                    27:7e:e2:49:d4:73:f0:78:47:cd:cf:ea:eb:a0:b6:
                    88:40:22:26:0d:5f:6e:88:18:1c:9e:fd:36:db:25:
                    ee:b8:b0:39:c3:fa:02:78:7c:d1:e7:cf:e6:79:71:
                    a9:c6:ef:19:58:2a:df:10:2b:d9:76:0f:c2:b1:89:
                    53:12:a9:4d:47:d8:26:38:f1:ad:05:98:f3:85:b1:
                    bc:3d:05:a1:69:9f:f7:0c:55:4a:0a:38:f9:54:8e:
                    da:7f:5d:38:2e:56:c5:fb:a5:b6:53:e2:eb:a2:30:
                    58:ac:0f:65:22:58:86:b6:c7:a5:37:19:5a:75:30:
                    d2:71:3e:18:e0:57:38:d5:6b:45:e5:01:2e:f9:e4:
                    23:1c:1d:04:31:f1:8a:b6:01:79:d1:e8:9d:71:b2:
                    04:36:9f:d2:ce:61:20:a2:e4:8e:93:a8:01:f4:47:
                    ff:ba:58:22:0a:35:a1:17:5b:a2:02:5b:05:2a:32:
                    9c:1a:df:eb:2e:a0:1b:9c:2e:ee:36:26:99:fd:d6:
                    79:25:d6:30:68:83:04:ed:dd:e1:7d:74:fe:c8:bc:
                    06:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:FF:A6:8B:C2:AD:98:17:20:59:23:89:34:D4:2A:FE:2A:65:E5:77
            X509v3 Authority Key Identifier:
                keyid:6C:70:D6:EE:C2:B5:60:5F:8B:1B:E6:CE:84:39:5F:24:6C:42:DF:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHDW7sK1YF-LG-bOhDlfJGxC3xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/119c70-3950-4636-8395-2fc486015564/1/bHDW7sK1YF-LG-bOhDlfJGxC3xw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/119c70-3950-4636-8395-2fc486015564/1/bHDW7sK1YF-LG-bOhDlfJGxC3xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:81:ad:c8:74:85:1b:c9:70:44:b6:81:d8:5c:58:c9:52:1f:
         82:d9:41:2e:01:16:32:00:54:a7:fa:fd:51:08:20:65:88:87:
         ef:15:62:10:57:1b:f7:86:3e:f5:5d:76:5b:3a:53:b4:56:6a:
         d6:5b:b3:99:9d:7a:90:41:f1:b6:eb:83:48:2c:c9:07:4f:67:
         ab:6c:e2:11:29:37:5b:1e:3e:f2:59:2d:69:93:12:ea:28:97:
         2f:ac:46:13:47:c4:7b:54:38:bd:14:88:5d:30:bd:33:a1:77:
         38:fa:da:bb:90:75:87:ef:05:26:6c:85:16:8d:f8:8b:42:a6:
         9a:2a:f6:84:b4:f6:f0:34:9f:99:fb:89:fb:e1:11:ba:4d:47:
         c1:c9:65:41:3a:be:09:6d:dd:87:12:0d:95:8b:be:83:08:41:
         99:be:eb:9b:a3:d7:8a:e7:7c:b7:9c:6f:ba:53:66:07:08:95:
         fa:22:9e:ee:9c:32:55:da:21:0f:33:31:83:c5:6b:b5:fe:98:
         e7:50:cb:d6:3b:fd:a1:e2:4d:a0:ac:a0:2c:9b:9f:4f:97:20:
         4c:97:c9:02:97:8b:6b:b6:75:db:d0:e7:ba:20:58:8a:c7:6f:
         3e:5f:8a:89:8a:41:90:6e:68:ba:a4:77:6d:b0:38:a3:69:c6:
         3b:f3:82:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYeaVId9pyrpGwTuZDFdcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNzBkNmVlYzJiNTYwNWY4YjFiZTZjZTg0Mzk1ZjI0NmM0
MmRmMWMwHhcNMjUwNDEzMDkwMTMwWhcNMjUwNDE0MDkwMTMwWjAzMTEwLwYDVQQD
EyhkMWZmYTY4YmMyYWQ5ODE3MjA1OTIzODkzNGQ0MmFmZTJhNjVlNTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2m3xiceUcuQzeyuTU0964XtdlG3X
jhIlKHziLjbG2lCgTC+mKcTfgGiFwpcnfuJJ1HPweEfNz+rroLaIQCImDV9uiBgc
nv022yXuuLA5w/oCeHzR58/meXGpxu8ZWCrfECvZdg/CsYlTEqlNR9gmOPGtBZjz
hbG8PQWhaZ/3DFVKCjj5VI7af104LlbF+6W2U+LrojBYrA9lIliGtselNxladTDS
cT4Y4Fc41WtF5QEu+eQjHB0EMfGKtgF50eidcbIENp/SzmEgouSOk6gB9Ef/ulgi
CjWhF1uiAlsFKjKcGt/rLqAbnC7uNiaZ/dZ5JdYwaIME7d3hfXT+yLwGHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNH/povCrZgXIFkjiTTUKv4qZeV3MB8GA1UdIwQY
MBaAFGxw1u7CtWBfixvmzoQ5XyRsQt8cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkhEVzdzSzFZRi1MRy1iT2hEbGZKR3hDM3h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8xMTljNzAtMzk1MC00NjM2LTgzOTUt
MmZjNDg2MDE1NTY0LzEvYkhEVzdzSzFZRi1MRy1iT2hEbGZKR3hDM3h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8xMTljNzAtMzk1MC00NjM2LTgzOTUtMmZjNDg2MDE1NTY0
LzEvYkhEVzdzSzFZRi1MRy1iT2hEbGZKR3hDM3h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF4GtyHSF
G8lwRLaB2FxYyVIfgtlBLgEWMgBUp/r9UQggZYiH7xViEFcb94Y+9V12WzpTtFZq
1luzmZ16kEHxtuuDSCzJB09nq2ziESk3Wx4+8lktaZMS6iiXL6xGE0fEe1Q4vRSI
XTC9M6F3OPrau5B1h+8FJmyFFo34i0Kmmir2hLT28DSfmfuJ++ERuk1HwcllQTq+
CW3dhxINlYu+gwhBmb7rm6PXiud8t5xvulNmBwiV+iKe7pwyVdohDzMxg8Vrtf6Y
51DL1jv9oeJNoKygLJufT5cgTJfJApeLa7Z129DnuiBYisdvPl+KiYpBkG5ouqR3
bbA4o2nGO/OCIw==
-----END CERTIFICATE-----