Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft
File:                     vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft (raw, json)
Hash identifier:          SXlHTfIZSuXU0QTWcuFPKm69bjdH5tDEs5Mwzf0lXHo=
Subject key identifier:   04:D7:C6:E5:F7:25:45:44:FE:50:00:8D:D8:27:35:73:B8:69:22:AF
Authority key identifier: BC:10:6E:4D:82:FB:AE:34:C1:52:A3:5D:43:D0:FD:F4:9D:54:BE:9E
Certificate issuer:       /CN=bc106e4d82fbae34c152a35d43d0fdf49d54be9e
Certificate serial:       01962F74A0380205B4118E917F1B4D6871F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 14:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:34 +0000
Files and hashes:         1: vBBuTYL7rjTBUqNdQ9D99J1Uvp4.crl (hash: t0wWWG2axIkja8VaGxZgkbuDbNVEe9v/KM0Tgge4yEo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a0:38:02:05:b4:11:8e:91:7f:1b:4d:68:71:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc106e4d82fbae34c152a35d43d0fdf49d54be9e
        Validity
            Not Before: Apr 13 14:01:34 2025 GMT
            Not After : Apr 14 14:01:34 2025 GMT
        Subject: CN=04d7c6e5f7254544fe50008dd8273573b86922af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ad:e2:87:a7:99:8f:ea:c7:04:0e:be:c1:9a:
                    1b:48:7b:61:6f:bb:3f:a1:1c:1d:e4:f7:47:a1:35:
                    77:15:2d:07:15:6b:b1:34:cf:83:62:1e:91:9b:8a:
                    3d:13:1e:ff:7d:24:c6:c7:fd:34:2c:9c:56:23:da:
                    f1:99:f1:6e:7d:43:27:30:4a:0b:17:49:34:96:9c:
                    48:1e:c0:df:b8:af:55:ab:76:44:7e:34:8c:7b:9f:
                    f1:f7:36:2e:1f:d6:24:a2:99:8f:b9:55:e9:85:45:
                    2c:04:c1:6b:7b:9b:f3:2a:3d:02:1a:d8:af:77:40:
                    c5:20:ed:27:29:20:d0:7d:03:3a:47:66:77:f7:63:
                    9b:4b:2f:11:5b:91:62:e7:6f:d4:27:b5:ee:ed:8b:
                    ac:37:84:ad:ab:d0:01:af:c6:78:10:d0:f5:23:99:
                    77:b2:76:42:0d:2e:da:8a:5f:47:c5:81:fb:b7:cc:
                    40:ea:db:31:00:28:ae:9b:07:62:4b:63:57:79:ae:
                    0f:d3:e0:a1:7a:bc:41:a5:a9:4b:95:3e:a2:ca:ce:
                    e7:f3:d9:9e:6f:1a:45:d9:cb:5a:f5:44:9a:fa:ed:
                    49:fa:0f:d6:3e:c7:12:2f:2f:0f:6c:b7:6a:6c:48:
                    de:76:01:22:ec:2f:32:a9:ed:8c:81:42:21:0b:49:
                    f5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D7:C6:E5:F7:25:45:44:FE:50:00:8D:D8:27:35:73:B8:69:22:AF
            X509v3 Authority Key Identifier:
                keyid:BC:10:6E:4D:82:FB:AE:34:C1:52:A3:5D:43:D0:FD:F4:9D:54:BE:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a9:e9:37:10:ce:f7:70:86:90:91:aa:bd:97:d9:7c:f9:7f:
         fe:79:d6:38:38:e2:f6:6f:fd:6e:58:f3:44:19:f0:45:38:35:
         6e:df:76:05:f7:f6:b8:a4:ae:6b:b8:27:7d:17:ac:c8:bd:1e:
         f7:40:d7:ed:77:93:ed:d8:94:30:a8:ef:d0:4a:c0:9a:a9:07:
         28:db:dd:d5:e1:eb:77:a7:8d:56:b7:f4:a6:10:f4:03:6c:2d:
         08:09:2f:09:57:28:be:b0:6f:4a:ea:3b:08:f6:70:24:78:72:
         ba:e3:0c:06:37:1b:22:b6:2a:bd:81:77:fa:56:95:21:e0:f4:
         cd:b7:fc:0c:3e:6c:fa:a6:0b:53:2a:c6:b7:4c:a9:b3:b8:3e:
         1d:4a:e4:c8:7f:e1:38:6d:bb:ed:99:fe:69:fa:49:cc:1a:5b:
         e6:02:38:94:7d:70:c8:e9:e4:60:44:a4:7e:17:73:f3:65:01:
         dc:bf:5a:80:27:31:4c:18:a5:cf:e7:5f:f5:e1:88:d3:a1:a4:
         05:97:aa:cc:1c:3f:26:d7:ea:06:da:77:40:ed:44:ab:aa:c6:
         c3:b7:3b:4c:1f:2b:80:c6:da:95:55:59:a6:6e:85:cd:5d:6a:
         ca:2a:d0:51:d4:93:fb:95:3b:93:b2:08:79:ae:97:3c:d6:b1:
         0f:6d:a3:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdKA4AgW0EY6RfxtNaHH0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMTA2ZTRkODJmYmFlMzRjMTUyYTM1ZDQzZDBmZGY0OWQ1
NGJlOWUwHhcNMjUwNDEzMTQwMTM0WhcNMjUwNDE0MTQwMTM0WjAzMTEwLwYDVQQD
EygwNGQ3YzZlNWY3MjU0NTQ0ZmU1MDAwOGRkODI3MzU3M2I4NjkyMmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK3ih6eZj+rHBA6+wZobSHthb7s/
oRwd5PdHoTV3FS0HFWuxNM+DYh6Rm4o9Ex7/fSTGx/00LJxWI9rxmfFufUMnMEoL
F0k0lpxIHsDfuK9Vq3ZEfjSMe5/x9zYuH9YkopmPuVXphUUsBMFre5vzKj0CGtiv
d0DFIO0nKSDQfQM6R2Z392ObSy8RW5Fi52/UJ7Xu7YusN4Stq9ABr8Z4END1I5l3
snZCDS7ail9HxYH7t8xA6tsxACiumwdiS2NXea4P0+CherxBpalLlT6iys7n89me
bxpF2cta9USa+u1J+g/WPscSLy8PbLdqbEjedgEi7C8yqe2MgUIhC0n1GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATXxuX3JUVE/lAAjdgnNXO4aSKvMB8GA1UdIwQY
MBaAFLwQbk2C+640wVKjXUPQ/fSdVL6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkJCdVRZTDdyalRCVXFOZFE5RDk5SjFVdnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wODRiNmQtNTIzZi00OGMwLWEwMzct
NjM0OWExN2FiYjQzLzEvdkJCdVRZTDdyalRCVXFOZFE5RDk5SjFVdnA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8wODRiNmQtNTIzZi00OGMwLWEwMzctNjM0OWExN2FiYjQz
LzEvdkJCdVRZTDdyalRCVXFOZFE5RDk5SjFVdnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqnpNxDO
93CGkJGqvZfZfPl//nnWODji9m/9bljzRBnwRTg1bt92Bff2uKSua7gnfResyL0e
90DX7XeT7diUMKjv0ErAmqkHKNvd1eHrd6eNVrf0phD0A2wtCAkvCVcovrBvSuo7
CPZwJHhyuuMMBjcbIrYqvYF3+laVIeD0zbf8DD5s+qYLUyrGt0yps7g+HUrkyH/h
OG277Zn+afpJzBpb5gI4lH1wyOnkYESkfhdz82UB3L9agCcxTBilz+df9eGI06Gk
BZeqzBw/JtfqBtp3QO1Eq6rGw7c7TB8rgMbalVVZpm6FzV1qyirQUdST+5U7k7II
ea6XPNaxD22jZw==
-----END CERTIFICATE-----