Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
File:                     u9ky9wZLH96aEiXzMnefwi5nMjk.mft (raw, json)
Hash identifier:          ymjmwi6IcsIbgayElGyhr6FzN53AB525Y1j4c4slD8w=
Subject key identifier:   2F:B4:80:65:DD:6D:82:99:2E:01:53:1F:FC:25:A3:8C:95:F3:14:E6
Authority key identifier: BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
Certificate issuer:       /CN=bbd932f7064b1fde9a1225f332779fc22e673239
Certificate serial:       01962F07321BC52DC34FF89C978D8A5F37B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:02:02 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:02 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:02 +0000
Files and hashes:         1: IeGYeKSb1mNrsDIK_MI2sgH59I8.roa (hash: oXG5f/ORp1JUaZ43fOOSU/ciwmtq1CAOULwIZj8cXsU=)
                          2: eXtnT82vLrkQIX6pAwLJMLSD-bg.roa (hash: Rihs3zkVa6kI7f06D37U5dnfsQw2ilSm2htFUgyMqTU=)
                          3: u9ky9wZLH96aEiXzMnefwi5nMjk.crl (hash: FSm7J4iPLpLEnfqXCmEx6KcDwscPEb3Z3xoBncnr2Nc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:32:1b:c5:2d:c3:4f:f8:9c:97:8d:8a:5f:37:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbd932f7064b1fde9a1225f332779fc22e673239
        Validity
            Not Before: Apr 13 12:02:02 2025 GMT
            Not After : Apr 14 12:02:02 2025 GMT
        Subject: CN=2fb48065dd6d82992e01531ffc25a38c95f314e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:58:54:8e:c0:42:db:d6:28:a2:7a:1c:d6:c4:
                    4f:a8:55:fc:e8:b3:a1:99:9f:a1:bb:7d:fd:f5:8e:
                    8c:79:f7:b5:ce:30:da:da:78:a0:f2:3c:8f:fd:72:
                    3b:46:15:ca:4c:fb:16:93:6c:4a:20:1f:fc:59:33:
                    5a:d2:37:de:9f:92:ef:31:79:85:7a:2a:2c:c7:75:
                    5c:e0:b6:31:8d:03:35:86:0d:1c:03:d8:7b:d6:b6:
                    54:0a:58:c5:f2:99:0c:8a:59:46:0f:80:83:5e:01:
                    21:71:4f:24:27:fa:24:0d:ea:32:50:d7:57:58:26:
                    26:61:66:4c:5f:ab:2f:d9:49:45:1f:64:dd:62:8a:
                    9c:33:25:0e:3e:38:d9:92:87:29:dc:7e:6c:45:59:
                    86:e0:fc:21:be:97:5c:13:63:67:c6:f9:4d:ab:60:
                    e1:63:3a:58:e7:b8:80:14:a4:8b:d4:a6:31:63:fe:
                    25:9f:49:4b:9f:bc:aa:6b:23:bf:70:8c:75:d0:dc:
                    9c:c5:14:a2:71:87:5d:f9:8e:dd:c8:8a:1b:0c:48:
                    75:01:2e:76:c4:d6:c3:f0:51:a6:94:19:85:17:6f:
                    d8:cf:88:56:74:a9:8e:35:1a:26:9e:14:d2:fe:24:
                    3f:b9:ac:2b:d8:73:bf:88:03:70:83:c1:70:ca:da:
                    d8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B4:80:65:DD:6D:82:99:2E:01:53:1F:FC:25:A3:8C:95:F3:14:E6
            X509v3 Authority Key Identifier:
                keyid:BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a4:00:6b:32:65:a2:ac:8c:29:55:a6:78:d4:ad:4f:62:a7:
         d9:53:a0:ff:6a:9f:45:85:78:e8:9d:02:fe:8f:b5:a7:cf:0a:
         41:5c:83:aa:be:92:67:5d:4a:fc:c9:4a:19:47:5d:5e:c4:28:
         01:f0:4d:8d:0b:aa:49:2d:7e:42:a6:c1:f5:de:9e:ed:8f:e3:
         14:4a:85:fa:0f:a7:8a:93:4b:1c:4f:82:4a:ea:23:ca:b5:98:
         63:d5:c3:7d:09:ef:fd:86:c9:67:a7:ab:fc:8e:0a:16:7f:3a:
         84:28:ac:b1:66:3c:59:93:44:cc:53:03:e9:e7:45:9c:6e:fd:
         6a:71:b0:a6:63:35:9d:2c:0c:38:8e:3e:99:b5:ac:12:cb:01:
         b3:29:9b:d6:51:5e:d0:4e:13:ea:5e:20:ee:1d:04:fb:a7:95:
         93:e7:f6:f1:ff:ee:50:02:01:b0:b3:94:ba:3d:fb:da:99:23:
         c7:f6:c2:6c:4b:3b:1b:5f:b3:77:73:9d:32:7e:a4:5f:4e:91:
         e1:35:94:f2:d3:21:0c:46:49:b7:2d:5c:84:54:da:2d:55:fa:
         e0:e6:ed:dc:e0:ad:34:66:ac:bc:c1:16:38:dc:e8:68:38:00:
         91:78:bc:4c:8b:a4:c6:29:bf:1a:05:74:b1:19:4e:5a:cb:c6:
         4c:36:23:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBzIbxS3DT/icl42KXzewMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZDkzMmY3MDY0YjFmZGU5YTEyMjVmMzMyNzc5ZmMyMmU2
NzMyMzkwHhcNMjUwNDEzMTIwMjAyWhcNMjUwNDE0MTIwMjAyWjAzMTEwLwYDVQQD
EygyZmI0ODA2NWRkNmQ4Mjk5MmUwMTUzMWZmYzI1YTM4Yzk1ZjMxNGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlhUjsBC29Yoonoc1sRPqFX86LOh
mZ+hu3399Y6Mefe1zjDa2nig8jyP/XI7RhXKTPsWk2xKIB/8WTNa0jfen5LvMXmF
eiosx3Vc4LYxjQM1hg0cA9h71rZUCljF8pkMillGD4CDXgEhcU8kJ/okDeoyUNdX
WCYmYWZMX6sv2UlFH2TdYoqcMyUOPjjZkocp3H5sRVmG4PwhvpdcE2NnxvlNq2Dh
YzpY57iAFKSL1KYxY/4ln0lLn7yqayO/cIx10NycxRSicYdd+Y7dyIobDEh1AS52
xNbD8FGmlBmFF2/Yz4hWdKmONRomnhTS/iQ/uawr2HO/iANwg8FwytrYqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+0gGXdbYKZLgFTH/wlo4yV8xTmMB8GA1UdIwQY
MBaAFLvZMvcGSx/emhIl8zJ3n8IuZzI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTlreTl3WkxIOTZhRWlYek1uZWZ3aTVuTWprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hNThiZGUtYzQ2MS00ODNmLTkxMWIt
ZDE3OTg4MWQwNjE4LzEvdTlreTl3WkxIOTZhRWlYek1uZWZ3aTVuTWprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9hNThiZGUtYzQ2MS00ODNmLTkxMWItZDE3OTg4MWQwNjE4
LzEvdTlreTl3WkxIOTZhRWlYek1uZWZ3aTVuTWprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF6QAazJl
oqyMKVWmeNStT2Kn2VOg/2qfRYV46J0C/o+1p88KQVyDqr6SZ11K/MlKGUddXsQo
AfBNjQuqSS1+QqbB9d6e7Y/jFEqF+g+nipNLHE+CSuojyrWYY9XDfQnv/YbJZ6er
/I4KFn86hCissWY8WZNEzFMD6edFnG79anGwpmM1nSwMOI4+mbWsEssBsymb1lFe
0E4T6l4g7h0E+6eVk+f28f/uUAIBsLOUuj372pkjx/bCbEs7G1+zd3OdMn6kX06R
4TWU8tMhDEZJty1chFTaLVX64Obt3OCtNGasvMEWONzoaDgAkXi8TIukxim/GgV0
sRlOWsvGTDYjNg==
-----END CERTIFICATE-----