Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
File:                     sf_ufb9_RWbqnjBUaywqLnM28vQ.mft (raw, json)
Hash identifier:          u8M6cYOiiGDkvmqiPKRQmwWfyrBkjjAvFjP4Fa+133g=
Subject key identifier:   B1:52:68:B4:AE:CF:AB:8C:9C:21:BE:FE:21:07:CE:74:49:A0:2C:37
Authority key identifier: B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4
Certificate issuer:       /CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
Certificate serial:       01962E98FDB87B03495A0F59E0828EB957C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:40 +0000
Files and hashes:         1: DNhIHCVoBglUmAVlCkJ5G-L36yg.roa (hash: 31245JAwO/UkCcpQa4UanpWYM+ItoRpnBX/McoOb5tQ=)
                          2: FfGHuB6Qf_cay6wn_ZrJC4SPGUg.roa (hash: DYs9L8yM8et51Ym0pIsTXdtN2ADOJkVDLkBPalnCV9A=)
                          3: fIN0CuyWjIdLGQA-5hoaOxgsCEU.roa (hash: NyCjKtY4yfk/Nsn/Ck5PkA1Ia9CEltJSbyJgOPEbXmk=)
                          4: iipSuvIjR47VudmgbPEDa9JY9oY.roa (hash: UNIVy+xZ2R8yR9G0m1INDMtIUCeoWGaMGRk0QvHxxTQ=)
                          5: sf_ufb9_RWbqnjBUaywqLnM28vQ.crl (hash: EeMR3P8iBGex3/GK4MatupcSAGI9aeHTNTt5EtVgpw8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:fd:b8:7b:03:49:5a:0f:59:e0:82:8e:b9:57:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
        Validity
            Not Before: Apr 13 10:01:40 2025 GMT
            Not After : Apr 14 10:01:40 2025 GMT
        Subject: CN=b15268b4aecfab8c9c21befe2107ce7449a02c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:91:29:35:f2:90:7f:8f:8e:6e:4a:12:ab:70:
                    a3:27:c7:d2:5c:4a:72:b4:9b:37:61:96:a2:34:24:
                    9c:31:fd:ca:3f:36:f3:a7:46:fc:df:53:8f:dd:9a:
                    81:33:30:35:e0:63:fa:4d:d9:11:a3:8e:7b:b5:af:
                    40:65:3c:48:31:4f:19:e2:59:b8:38:2a:13:87:83:
                    97:af:68:7d:15:df:5e:d4:aa:11:ae:20:67:b8:e7:
                    86:ea:8e:4d:a4:23:0f:83:8c:06:95:c2:22:76:e3:
                    3a:c8:02:4d:65:b5:6c:4c:cb:c4:a1:6a:c9:f6:f9:
                    a0:96:43:94:29:65:7a:70:b0:ef:91:e1:72:8f:18:
                    b7:7d:43:b3:96:ae:02:e1:dc:98:7c:60:3d:e3:a1:
                    c0:00:00:25:bb:e0:a2:e5:82:ea:6c:99:0b:a9:b5:
                    59:c3:67:00:25:f2:01:20:62:25:4b:01:5b:0d:b1:
                    f3:ac:41:e7:d4:dd:f8:f4:71:96:31:14:7d:9c:de:
                    36:35:31:d7:b2:09:f5:1a:b2:7d:57:17:e8:fb:64:
                    56:b4:92:fe:63:76:30:c4:64:7f:f8:94:51:3d:8a:
                    36:9b:e9:7d:8b:4f:01:2a:48:e2:dc:e3:99:e9:36:
                    d9:d6:4a:81:05:d9:e6:dd:92:3d:a3:fd:97:ce:2e:
                    69:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:52:68:B4:AE:CF:AB:8C:9C:21:BE:FE:21:07:CE:74:49:A0:2C:37
            X509v3 Authority Key Identifier:
                keyid:B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:4f:b8:59:f7:04:5d:01:4f:98:3f:39:c7:c3:91:bf:5a:f8:
         41:13:d1:81:20:6b:f2:ca:d7:00:2a:9f:98:fc:67:65:43:7a:
         54:54:97:5e:53:c8:79:20:eb:41:7b:d7:34:13:af:af:bb:42:
         da:75:41:8a:61:eb:8c:2a:85:73:04:48:a7:55:98:ba:0d:c2:
         72:96:dc:ba:25:67:30:e4:97:61:f8:6e:08:2f:fe:f8:73:83:
         6d:b4:c3:bd:2f:50:fc:a4:14:71:ed:f4:28:ac:1c:9b:55:b3:
         79:e5:c3:71:b2:48:e8:8f:a2:a1:0d:09:84:f9:8b:70:6c:8d:
         bd:0a:ad:a4:fc:59:72:7e:21:a2:e2:54:29:bd:50:ed:d8:ad:
         29:82:b0:1e:4b:6d:a9:10:76:1f:f3:80:ea:82:a7:b8:d4:59:
         36:a6:4b:3d:1a:38:c1:64:8f:65:8d:a9:9d:34:cb:5a:18:2e:
         cf:7f:1f:2b:8c:05:b8:bc:5c:7b:f2:ba:19:82:8d:97:ae:05:
         bb:61:49:4d:21:cc:ce:24:8d:59:87:7a:dd:3c:35:21:25:9b:
         7c:2d:a5:38:88:68:16:17:fb:cb:cd:65:ca:ae:e4:3c:ea:2e:
         85:c7:86:c1:66:6e:82:55:61:e8:b8:cd:08:90:0d:5f:4a:fe:
         90:42:ae:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumP24ewNJWg9Z4IKOuVfFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZmZlZTdkYmY3ZjQ1NjZlYTllMzA1NDZiMmMyYTJlNzMz
NmYyZjQwHhcNMjUwNDEzMTAwMTQwWhcNMjUwNDE0MTAwMTQwWjAzMTEwLwYDVQQD
EyhiMTUyNjhiNGFlY2ZhYjhjOWMyMWJlZmUyMTA3Y2U3NDQ5YTAyYzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5EpNfKQf4+ObkoSq3CjJ8fSXEpy
tJs3YZaiNCScMf3KPzbzp0b831OP3ZqBMzA14GP6TdkRo457ta9AZTxIMU8Z4lm4
OCoTh4OXr2h9Fd9e1KoRriBnuOeG6o5NpCMPg4wGlcIiduM6yAJNZbVsTMvEoWrJ
9vmglkOUKWV6cLDvkeFyjxi3fUOzlq4C4dyYfGA946HAAAAlu+Ci5YLqbJkLqbVZ
w2cAJfIBIGIlSwFbDbHzrEHn1N349HGWMRR9nN42NTHXsgn1GrJ9Vxfo+2RWtJL+
Y3YwxGR/+JRRPYo2m+l9i08BKkji3OOZ6TbZ1kqBBdnm3ZI9o/2Xzi5pwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFSaLSuz6uMnCG+/iEHznRJoCw3MB8GA1UdIwQY
MBaAFLH/7n2/f0Vm6p4wVGssKi5zNvL0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2ZfdWZiOV9SV2JxbmpCVWF5d3FMbk0yOHZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8yZmNiYjItYzNjMC00YjFlLThhZDUt
N2Y1Zjc4MzQ2ZDZmLzEvc2ZfdWZiOV9SV2JxbmpCVWF5d3FMbk0yOHZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8yZmNiYjItYzNjMC00YjFlLThhZDUtN2Y1Zjc4MzQ2ZDZm
LzEvc2ZfdWZiOV9SV2JxbmpCVWF5d3FMbk0yOHZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHE+4WfcE
XQFPmD85x8ORv1r4QRPRgSBr8srXACqfmPxnZUN6VFSXXlPIeSDrQXvXNBOvr7tC
2nVBimHrjCqFcwRIp1WYug3CcpbcuiVnMOSXYfhuCC/++HODbbTDvS9Q/KQUce30
KKwcm1WzeeXDcbJI6I+ioQ0JhPmLcGyNvQqtpPxZcn4houJUKb1Q7ditKYKwHktt
qRB2H/OA6oKnuNRZNqZLPRo4wWSPZY2pnTTLWhguz38fK4wFuLxce/K6GYKNl64F
u2FJTSHMziSNWYd63Tw1ISWbfC2lOIhoFhf7y81lyq7kPOouhceGwWZuglVh6LjN
CJANX0r+kEKuKw==
-----END CERTIFICATE-----