Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.mft
File:                     vPxPEoxMVoUbl1VNJMZq1e4j_Jw.mft (raw, json)
Hash identifier:          Y2txY7KwbpBlzTv2W8QIq41WiDepRNhoGDKtdcN8kyo=
Subject key identifier:   67:02:95:8A:C4:03:88:AB:BF:74:CB:65:67:2B:6F:C1:CA:23:F5:91
Authority key identifier: BC:FC:4F:12:8C:4C:56:85:1B:97:55:4D:24:C6:6A:D5:EE:23:FC:9C
Certificate issuer:       /CN=bcfc4f128c4c56851b97554d24c66ad5ee23fc9c
Certificate serial:       01962E99D485D121357A6D80D90F22F7B8DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.mft
Manifest number:          13FC
Signing time:             Sun 13 Apr 2025 10:02:35 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:35 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:35 +0000
Files and hashes:         1: vPxPEoxMVoUbl1VNJMZq1e4j_Jw.crl (hash: HteTMCimrgdovf/vRW/2+lPzArrn6aiyk7kP/MyZG0E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:d4:85:d1:21:35:7a:6d:80:d9:0f:22:f7:b8:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfc4f128c4c56851b97554d24c66ad5ee23fc9c
        Validity
            Not Before: Apr 13 10:02:35 2025 GMT
            Not After : Apr 14 10:02:35 2025 GMT
        Subject: CN=6702958ac40388abbf74cb65672b6fc1ca23f591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ba:09:ae:54:1b:22:33:b2:af:7d:8c:b8:4e:
                    a3:d7:85:1f:46:3c:94:f7:6c:0a:39:0e:34:d0:17:
                    b7:fc:cd:5c:32:3a:fb:53:b1:2c:73:78:00:72:a3:
                    f4:98:18:0c:6b:66:4a:c3:55:ae:22:bd:5d:31:06:
                    92:6c:78:55:e6:a1:0f:9b:c4:69:50:9c:a5:88:86:
                    a2:ce:2d:17:69:3f:1e:c1:16:8f:65:99:bf:5a:94:
                    c2:79:15:31:1f:43:ff:f2:29:6b:3a:7c:b5:1d:e7:
                    24:3f:c6:82:44:15:ff:de:49:63:d7:67:d8:ec:0f:
                    fb:2e:3a:39:15:41:b9:35:8b:0b:4b:2f:6a:40:d9:
                    14:97:97:f8:f1:c8:31:b9:67:d4:3b:c2:97:ee:3b:
                    8b:05:95:74:52:e9:86:21:8e:a7:31:34:c8:de:32:
                    5b:a1:16:b8:97:a5:07:15:2a:0d:5b:de:87:67:c0:
                    e7:4b:e8:60:7c:83:c4:a3:67:5b:1e:d6:ce:f1:f7:
                    33:23:ff:cf:7f:27:82:28:7d:01:d9:97:f2:03:01:
                    17:95:15:5d:a6:6d:e5:68:3d:cc:fb:57:e9:68:fb:
                    90:24:46:ab:ca:5f:a3:8f:18:1f:84:94:8d:8b:82:
                    46:7c:21:04:c6:4b:2d:b1:8a:da:11:62:fc:7d:ae:
                    0d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:02:95:8A:C4:03:88:AB:BF:74:CB:65:67:2B:6F:C1:CA:23:F5:91
            X509v3 Authority Key Identifier:
                keyid:BC:FC:4F:12:8C:4C:56:85:1B:97:55:4D:24:C6:6A:D5:EE:23:FC:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:57:27:e4:ed:17:c9:8c:09:e9:4f:da:82:e6:9b:29:1d:ad:
         84:40:d6:2b:a8:e3:ef:33:fc:52:df:05:21:61:be:fa:f7:aa:
         9b:e8:90:64:d9:32:bd:fa:81:ee:2f:84:42:a9:fd:57:59:c7:
         2a:44:57:fb:d6:19:ee:01:a2:7b:11:13:9a:03:70:58:8f:5c:
         3c:90:db:bd:bb:1b:2c:c1:57:60:1b:13:55:54:9b:b7:c2:f5:
         05:42:1d:30:f3:ba:25:c1:52:28:79:1b:3b:e3:7c:f3:e1:b7:
         0d:4f:fc:ab:fd:6d:e2:65:a7:55:d8:bb:ef:01:51:55:ce:81:
         0d:e0:be:a2:87:f6:69:0f:46:93:8d:d8:89:94:8e:fd:d3:cb:
         28:a0:62:6f:47:3b:d8:a7:4e:b3:96:f3:6f:95:eb:91:24:03:
         f0:6f:2d:9b:ca:13:46:df:98:36:9e:a9:18:1e:ef:83:41:cd:
         2e:7f:0f:a1:6f:c8:0a:06:57:20:17:35:dd:b9:b6:0a:0c:ad:
         53:c8:20:27:92:3d:55:dd:21:f3:15:3a:19:5c:20:b6:89:81:
         cb:ec:e2:f7:f3:85:fd:d6:01:2b:63:f8:a6:77:4d:82:42:2f:
         d6:8a:ea:1b:03:67:75:8d:7f:a1:1a:f1:9f:69:46:19:12:2d:
         e9:18:ba:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumdSF0SE1em2A2Q8i97jbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmM0ZjEyOGM0YzU2ODUxYjk3NTU0ZDI0YzY2YWQ1ZWUy
M2ZjOWMwHhcNMjUwNDEzMTAwMjM1WhcNMjUwNDE0MTAwMjM1WjAzMTEwLwYDVQQD
Eyg2NzAyOTU4YWM0MDM4OGFiYmY3NGNiNjU2NzJiNmZjMWNhMjNmNTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqroJrlQbIjOyr32MuE6j14UfRjyU
92wKOQ400Be3/M1cMjr7U7Esc3gAcqP0mBgMa2ZKw1WuIr1dMQaSbHhV5qEPm8Rp
UJyliIaizi0XaT8ewRaPZZm/WpTCeRUxH0P/8ilrOny1HeckP8aCRBX/3klj12fY
7A/7Ljo5FUG5NYsLSy9qQNkUl5f48cgxuWfUO8KX7juLBZV0UumGIY6nMTTI3jJb
oRa4l6UHFSoNW96HZ8DnS+hgfIPEo2dbHtbO8fczI//PfyeCKH0B2ZfyAwEXlRVd
pm3laD3M+1fpaPuQJEaryl+jjxgfhJSNi4JGfCEExkstsYraEWL8fa4NZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcClYrEA4irv3TLZWcrb8HKI/WRMB8GA1UdIwQY
MBaAFLz8TxKMTFaFG5dVTSTGatXuI/ycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlB4UEVveE1Wb1VibDFWTkpNWnExZTRqX0p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My82ZjZmNzgtMWRlNy00NGU5LWJmMzkt
MTI5ODRjYTdhN2EyLzEvdlB4UEVveE1Wb1VibDFWTkpNWnExZTRqX0p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My82ZjZmNzgtMWRlNy00NGU5LWJmMzktMTI5ODRjYTdhN2Ey
LzEvdlB4UEVveE1Wb1VibDFWTkpNWnExZTRqX0p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFcn5O0X
yYwJ6U/aguabKR2thEDWK6jj7zP8Ut8FIWG++veqm+iQZNkyvfqB7i+EQqn9V1nH
KkRX+9YZ7gGiexETmgNwWI9cPJDbvbsbLMFXYBsTVVSbt8L1BUIdMPO6JcFSKHkb
O+N88+G3DU/8q/1t4mWnVdi77wFRVc6BDeC+oof2aQ9Gk43YiZSO/dPLKKBib0c7
2KdOs5bzb5XrkSQD8G8tm8oTRt+YNp6pGB7vg0HNLn8PoW/ICgZXIBc13bm2Cgyt
U8ggJ5I9Vd0h8xU6GVwgtomBy+zi9/OF/dYBK2P4pndNgkIv1orqGwNndY1/oRrx
n2lGGRIt6Ri64w==
-----END CERTIFICATE-----