Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
File:                     vfegoEi2jsz6TUnqtPFtx5LA0xg.mft (raw, json)
Hash identifier:          RDsTA1xCyHtbRfMsZTvYUcx9CB3S/TRK1nK57FrO9zQ=
Subject key identifier:   0C:B3:96:F0:78:BC:CD:EB:15:4F:66:AD:7C:2C:EB:B8:6E:63:C0:A9
Authority key identifier: BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
Certificate issuer:       /CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Certificate serial:       01962F748B1BE5D782A759DADF96350D7074
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:28 +0000
Files and hashes:         1: GKC-zruGo7Y0lHBj7AqmYPwzc8c.roa (hash: u2pwVxzKoBKyV0Dimg3sj9jXDAo9fvdhwaO1o32GlnA=)
                          2: X_m5ZAvxIpZScImZ01eKwHRPNDY.roa (hash: beEA3W7SColLkSlnHacB1waBPlogRmM3jPPLz78ItOg=)
                          3: v1Kwwfd8ZjjCs2Mu7l5Mtdf-PVI.roa (hash: ulU0aPB2ZxGebVfubT+AGsI+A+WmNT0R9PT7Ovu3cU0=)
                          4: vfegoEi2jsz6TUnqtPFtx5LA0xg.crl (hash: sO6n7uLbPXglAsbLKWTfZSCJU/SHeyiT2zv2+Dmnocg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:8b:1b:e5:d7:82:a7:59:da:df:96:35:0d:70:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
        Validity
            Not Before: Apr 13 14:01:28 2025 GMT
            Not After : Apr 14 14:01:28 2025 GMT
        Subject: CN=0cb396f078bccdeb154f66ad7c2cebb86e63c0a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:da:5d:91:89:89:4e:03:7e:05:2a:7f:39:bf:
                    6b:ec:27:fb:47:d8:2c:52:0c:4f:cd:4a:ef:3e:5c:
                    e4:d4:e2:22:af:1e:f9:83:8c:e7:23:5f:30:40:22:
                    b1:a0:b6:0b:ad:c9:82:ab:0b:99:39:bd:dc:72:87:
                    e9:57:f2:e6:94:9c:fc:49:1d:51:4d:ad:16:6e:86:
                    75:dc:38:00:ba:7b:09:c4:9b:47:56:13:35:92:a3:
                    3e:45:2f:dd:f0:2d:70:80:4b:d7:93:1d:e1:6d:95:
                    17:5e:34:95:f4:ad:5d:66:5e:1a:fc:8c:12:a6:aa:
                    5e:35:ad:df:87:0b:f2:43:23:c0:fa:1e:bf:7c:73:
                    d9:be:71:df:f2:3c:3c:a5:84:09:47:18:7b:b0:14:
                    56:bb:ff:06:b2:73:ec:31:26:70:84:fd:35:91:d4:
                    b4:56:5e:db:02:33:12:5d:da:53:d8:a3:84:3b:d2:
                    a6:7f:f9:f2:95:9c:f8:2a:63:00:2f:1d:ce:a9:ac:
                    69:6d:89:cf:bd:b2:98:03:72:c0:88:bd:45:09:51:
                    fb:32:68:1a:96:9b:e2:21:87:02:30:5a:b8:26:9b:
                    3d:47:fa:f8:b6:ce:c2:b8:e5:d2:b6:6b:a5:01:86:
                    ef:4a:1a:c0:43:13:43:d2:9b:10:16:71:79:7e:4f:
                    1e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B3:96:F0:78:BC:CD:EB:15:4F:66:AD:7C:2C:EB:B8:6E:63:C0:A9
            X509v3 Authority Key Identifier:
                keyid:BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:88:e6:08:46:dc:be:38:e2:8e:f8:d2:3b:4e:7a:ac:f5:c7:
         9f:cf:5e:fd:3c:91:12:8c:31:aa:95:08:87:9c:4f:3f:bd:2a:
         13:e7:de:76:e6:f3:7e:b4:99:a4:00:b7:97:7d:85:7c:c5:d4:
         2c:82:f5:56:c1:29:37:22:52:e1:4d:3e:6f:78:31:dc:15:48:
         28:17:d9:96:56:f2:22:26:fd:a0:3c:9c:29:c6:6e:5e:85:b2:
         86:16:aa:61:15:82:cc:3a:72:75:38:09:2f:a6:cb:a3:dc:f1:
         a4:94:e7:c6:08:02:a8:94:40:80:a3:04:aa:62:3b:cc:13:07:
         ef:2d:d8:9b:cb:45:d6:33:6d:ae:e2:4f:bc:23:ed:82:40:cd:
         a4:87:42:83:e6:f0:53:a2:5f:79:58:a0:4a:a5:ad:d8:0f:58:
         ca:63:8d:55:cd:50:e2:e0:76:b2:33:f6:0c:da:21:c1:c5:08:
         67:64:49:10:ca:5a:d8:3a:13:18:23:4d:34:a4:21:58:6c:a0:
         fc:db:54:9a:d5:76:4f:a5:ba:be:03:e3:6a:0b:d1:51:32:21:
         ff:a3:9c:ca:ae:34:df:8a:e3:ba:21:85:ca:6a:80:59:ca:36:
         e0:48:fd:7c:0b:e8:c6:85:42:6f:cd:8a:09:e5:a1:e6:e5:78:
         fb:24:39:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdIsb5deCp1na35Y1DXB0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZjdhMGEwNDhiNjhlY2NmYTRkNDllYWI0ZjE2ZGM3OTJj
MGQzMTgwHhcNMjUwNDEzMTQwMTI4WhcNMjUwNDE0MTQwMTI4WjAzMTEwLwYDVQQD
EygwY2IzOTZmMDc4YmNjZGViMTU0ZjY2YWQ3YzJjZWJiODZlNjNjMGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdpdkYmJTgN+BSp/Ob9r7Cf7R9gs
UgxPzUrvPlzk1OIirx75g4znI18wQCKxoLYLrcmCqwuZOb3ccofpV/LmlJz8SR1R
Ta0WboZ13DgAunsJxJtHVhM1kqM+RS/d8C1wgEvXkx3hbZUXXjSV9K1dZl4a/IwS
pqpeNa3fhwvyQyPA+h6/fHPZvnHf8jw8pYQJRxh7sBRWu/8GsnPsMSZwhP01kdS0
Vl7bAjMSXdpT2KOEO9Kmf/nylZz4KmMALx3OqaxpbYnPvbKYA3LAiL1FCVH7Mmga
lpviIYcCMFq4Jps9R/r4ts7CuOXStmulAYbvShrAQxND0psQFnF5fk8egwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAyzlvB4vM3rFU9mrXws67huY8CpMB8GA1UdIwQY
MBaAFL33oKBIto7M+k1J6rTxbceSwNMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmZlZ29FaTJqc3o2VFVucXRQRnR4NUxBMHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9lMTZjYjYtYjQ1NC00OGQ2LWJkYzgt
MzUxNjE5MWE5ZDY4LzEvdmZlZ29FaTJqc3o2VFVucXRQRnR4NUxBMHhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9lMTZjYjYtYjQ1NC00OGQ2LWJkYzgtMzUxNjE5MWE5ZDY4
LzEvdmZlZ29FaTJqc3o2VFVucXRQRnR4NUxBMHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAYjmCEbc
vjjijvjSO056rPXHn89e/TyREowxqpUIh5xPP70qE+fedubzfrSZpAC3l32FfMXU
LIL1VsEpNyJS4U0+b3gx3BVIKBfZllbyIib9oDycKcZuXoWyhhaqYRWCzDpydTgJ
L6bLo9zxpJTnxggCqJRAgKMEqmI7zBMH7y3Ym8tF1jNtruJPvCPtgkDNpIdCg+bw
U6JfeVigSqWt2A9YymONVc1Q4uB2sjP2DNohwcUIZ2RJEMpa2DoTGCNNNKQhWGyg
/NtUmtV2T6W6vgPjagvRUTIh/6Ocyq4034rjuiGFymqAWco24Ej9fAvoxoVCb82K
CeWh5uV4+yQ5zg==
-----END CERTIFICATE-----