Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
File:                     v9gcqQzFIkWGr-urHHixeQJo1cE.mft (raw, json)
Hash identifier:          q99rMsAntKhjJ3h94IJLuk1fZBDWFtc0cTiJa3V+9Y8=
Subject key identifier:   63:3A:13:55:5F:7F:99:0D:28:21:CB:89:E9:AB:6F:05:F2:B4:57:1D
Authority key identifier: BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
Certificate issuer:       /CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Certificate serial:       01962DF3CCE0B66A64A9E5A8E71E2CE82A7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:14 +0000
Files and hashes:         1: 9UunLY0e7RvMMeMDRjD3u7_pf2Y.roa (hash: 7lRPIrPRKCCE3BPTd9dDNpxXDgXsPWg+ml+ju6JbueA=)
                          2: ncR4oR_y2D6exGXXU4466Dj_Hq0.roa (hash: QHWP1FBTjP+R0Pof3RRPjusJf04L/sCOEBJrDKRdhZ4=)
                          3: rOoYFHKRe7ghGBjkeruHV6kIlyA.roa (hash: elXY8PrAbFgsd98hRj7mkOX8iG0smL3sFgAD/6xBNtE=)
                          4: v9gcqQzFIkWGr-urHHixeQJo1cE.crl (hash: GvvopBoe8AGrsYvAy4Q3x08Xi0G9K3ApGKWaS+MMLN8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:cc:e0:b6:6a:64:a9:e5:a8:e7:1e:2c:e8:2a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
        Validity
            Not Before: Apr 13 07:01:14 2025 GMT
            Not After : Apr 14 07:01:14 2025 GMT
        Subject: CN=633a13555f7f990d2821cb89e9ab6f05f2b4571d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:30:d5:24:02:2d:18:9f:9b:40:c6:f0:6f:d8:
                    9f:bd:f9:74:b7:ea:5e:f2:2e:ad:a2:64:4f:2c:e1:
                    e8:3d:ab:d8:d6:e2:d5:a8:a7:ac:71:42:a6:b8:5a:
                    e1:1d:b3:05:98:8d:d6:60:9e:c9:25:2f:4b:fd:b1:
                    59:ca:8c:06:4d:38:1f:56:fa:7e:d5:1f:5e:f0:0a:
                    42:d2:5d:98:b0:8a:d5:44:b7:45:bb:15:5c:ea:a9:
                    79:9d:de:c1:ce:e4:57:9d:3e:86:9a:5d:a2:6e:85:
                    3d:f6:b2:94:38:d5:72:69:03:c6:f6:c8:3c:13:61:
                    0f:c8:7e:5c:72:61:98:06:98:10:9d:6c:82:14:0c:
                    84:7f:2b:8c:32:37:70:86:47:be:8b:94:98:c8:7a:
                    76:1e:a2:99:29:96:66:5d:15:a6:cf:a4:84:3f:f8:
                    81:35:63:6c:c9:e2:cc:c9:a2:d9:73:e6:c2:b9:ec:
                    81:7f:f3:1f:53:12:39:39:f1:c7:cc:73:51:82:58:
                    ac:c2:a9:3d:93:84:33:03:db:54:7a:a7:36:57:23:
                    1c:37:2f:6c:bd:af:a5:79:16:f3:f6:96:04:7b:f4:
                    4d:30:b7:85:98:db:0f:d4:9f:af:77:67:f7:99:22:
                    cd:88:90:b7:99:64:ca:a3:b3:81:89:ed:b5:f2:89:
                    e7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3A:13:55:5F:7F:99:0D:28:21:CB:89:E9:AB:6F:05:F2:B4:57:1D
            X509v3 Authority Key Identifier:
                keyid:BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ba:f7:c4:58:58:69:bb:3b:55:69:d7:1a:52:95:30:ca:3d:
         15:d6:a3:ca:d6:97:fb:d6:59:97:33:df:d2:d8:3a:97:f2:58:
         78:78:27:58:8f:6c:b1:4c:da:cd:18:cf:72:56:4f:44:b8:c2:
         7a:77:d2:c0:c5:3a:02:cf:12:34:3f:0d:bb:30:ca:fb:16:e5:
         7f:be:61:0b:25:ba:a0:f8:5e:de:72:13:0d:69:96:41:5c:66:
         6f:fc:76:13:4a:57:63:cf:9c:53:af:d3:5e:6e:f8:d6:fb:b4:
         40:e2:8d:ed:d4:a2:dc:08:df:96:8c:ab:cf:2b:33:84:e6:93:
         ae:2d:23:1f:74:16:9d:c0:ba:9e:bd:3b:71:cd:39:14:55:ba:
         38:78:61:bd:c9:8c:ce:8c:16:d2:30:48:28:61:68:8b:90:c5:
         94:28:96:ca:10:d8:a4:bb:b3:cd:13:34:5e:50:2c:fc:53:04:
         3b:9c:47:d6:61:2f:fb:7e:eb:59:c6:66:23:54:57:62:81:f2:
         f1:6f:86:57:5c:5f:3e:91:19:3b:5e:51:c2:2e:8b:d3:33:b6:
         97:1c:7f:02:4c:59:cb:92:84:4a:b0:c9:8e:7a:57:8a:54:72:
         11:4c:58:9f:ae:bc:0e:fe:6e:f8:95:88:70:91:34:dd:f3:7e:
         56:ba:26:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt88zgtmpkqeWo5x4s6Cp/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZDgxY2E5MGNjNTIyNDU4NmFmZWJhYjFjNzhiMTc5MDI2
OGQ1YzEwHhcNMjUwNDEzMDcwMTE0WhcNMjUwNDE0MDcwMTE0WjAzMTEwLwYDVQQD
Eyg2MzNhMTM1NTVmN2Y5OTBkMjgyMWNiODllOWFiNmYwNWYyYjQ1NzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzDVJAItGJ+bQMbwb9ifvfl0t+pe
8i6tomRPLOHoPavY1uLVqKescUKmuFrhHbMFmI3WYJ7JJS9L/bFZyowGTTgfVvp+
1R9e8ApC0l2YsIrVRLdFuxVc6ql5nd7BzuRXnT6Gml2iboU99rKUONVyaQPG9sg8
E2EPyH5ccmGYBpgQnWyCFAyEfyuMMjdwhke+i5SYyHp2HqKZKZZmXRWmz6SEP/iB
NWNsyeLMyaLZc+bCueyBf/MfUxI5OfHHzHNRgliswqk9k4QzA9tUeqc2VyMcNy9s
va+leRbz9pYEe/RNMLeFmNsP1J+vd2f3mSLNiJC3mWTKo7OBie218onnSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGM6E1Vff5kNKCHLiemrbwXytFcdMB8GA1UdIwQY
MBaAFL/YHKkMxSJFhq/rqxx4sXkCaNXBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjlnY3FRekZJa1dHci11ckhIaXhlUUpvMWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8yNWE1OWMtYzJmYy00ZmQ0LTk2Zjct
ODRhZGNiZjVhYzU1LzEvdjlnY3FRekZJa1dHci11ckhIaXhlUUpvMWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8yNWE1OWMtYzJmYy00ZmQ0LTk2ZjctODRhZGNiZjVhYzU1
LzEvdjlnY3FRekZJa1dHci11ckhIaXhlUUpvMWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANrr3xFhY
abs7VWnXGlKVMMo9FdajytaX+9ZZlzPf0tg6l/JYeHgnWI9ssUzazRjPclZPRLjC
enfSwMU6As8SND8NuzDK+xblf75hCyW6oPhe3nITDWmWQVxmb/x2E0pXY8+cU6/T
Xm741vu0QOKN7dSi3AjfloyrzyszhOaTri0jH3QWncC6nr07cc05FFW6OHhhvcmM
zowW0jBIKGFoi5DFlCiWyhDYpLuzzRM0XlAs/FMEO5xH1mEv+37rWcZmI1RXYoHy
8W+GV1xfPpEZO15Rwi6L0zO2lxx/AkxZy5KESrDJjnpXilRyEUxYn668Dv5u+JWI
cJE03fN+VromTg==
-----END CERTIFICATE-----