Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.mft
File:                     vGyMBtLTwoAfBUWPyDQT2wpd360.mft (raw, json)
Hash identifier:          tPZek7RKgl7VPQgT55QWCTXvJtKhQdQhEFX9/0Ic80Y=
Subject key identifier:   31:F4:4B:3A:A9:80:A4:2B:0D:FF:71:91:0A:72:F5:F4:F0:59:7F:3B
Authority key identifier: BC:6C:8C:06:D2:D3:C2:80:1F:05:45:8F:C8:34:13:DB:0A:5D:DF:AD
Certificate issuer:       /CN=bc6c8c06d2d3c2801f05458fc83413db0a5ddfad
Certificate serial:       01962E98B6F7001DCEBA7B9D96265B763D43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vGyMBtLTwoAfBUWPyDQT2wpd360.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.mft
Manifest number:          14A2
Signing time:             Sun 13 Apr 2025 10:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:22 +0000
Files and hashes:         1: U0KY9ZKPsJlqZ_fjj5KuOfG7liQ.roa (hash: 5isKje1lpF1TP+xkv3pk/79DT+7Q32SYKgQSnAuwk8E=)
                          2: fGA1M57yGBtOMUI08h8wD_v-d7E.roa (hash: CuPB00S3uLOygPninxMXcEhxd+sJxquT0fKOzzZvR50=)
                          3: vGyMBtLTwoAfBUWPyDQT2wpd360.crl (hash: sgjmqFwcdqn/jZJ0f20jxAtalnOjutEJSuWl4xNq7Vc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b6:f7:00:1d:ce:ba:7b:9d:96:26:5b:76:3d:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6c8c06d2d3c2801f05458fc83413db0a5ddfad
        Validity
            Not Before: Apr 13 10:01:22 2025 GMT
            Not After : Apr 14 10:01:22 2025 GMT
        Subject: CN=31f44b3aa980a42b0dff71910a72f5f4f0597f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0e:4e:c8:29:a6:f4:54:2c:73:8f:75:c2:d9:
                    7a:73:b0:a0:93:fe:ee:43:a1:57:91:09:8c:96:dd:
                    ca:28:3e:64:7e:9d:8a:31:b1:bf:db:ca:33:2a:1c:
                    48:77:85:f6:36:70:54:20:aa:5d:98:94:35:6b:63:
                    5a:b2:0c:da:b6:5b:22:02:d1:dc:bb:32:e5:d5:f9:
                    0e:b9:c2:cf:ec:b0:c1:9e:89:09:57:5c:e5:68:bc:
                    bb:ad:e3:6e:d5:8f:cf:3c:55:7b:49:dd:97:92:6d:
                    b3:da:9e:30:78:8b:54:3e:c3:34:c1:55:44:58:a1:
                    19:45:34:8d:0a:af:ec:88:6b:81:64:2d:9f:11:c6:
                    a8:16:45:1e:bd:96:68:41:bc:a8:88:c2:45:2d:07:
                    0b:62:42:19:74:3a:44:16:10:91:a9:fd:5c:7b:ae:
                    e3:e3:59:45:cc:d2:af:a6:08:e0:c9:f0:ec:8e:55:
                    22:85:0f:f0:d1:e0:9c:89:26:70:4a:04:8c:e7:2c:
                    30:98:fe:d3:0f:af:8b:99:e5:a4:4e:a2:71:db:2d:
                    82:01:f8:d2:7b:29:dd:be:a7:c5:5f:19:0e:4a:b7:
                    74:71:1e:df:ea:33:dd:23:60:04:13:e7:ac:c8:8b:
                    7d:90:b2:8d:8f:d8:c7:99:4d:c7:54:41:1e:9b:d8:
                    07:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F4:4B:3A:A9:80:A4:2B:0D:FF:71:91:0A:72:F5:F4:F0:59:7F:3B
            X509v3 Authority Key Identifier:
                keyid:BC:6C:8C:06:D2:D3:C2:80:1F:05:45:8F:C8:34:13:DB:0A:5D:DF:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGyMBtLTwoAfBUWPyDQT2wpd360.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/17addf-d325-4aa7-97a7-4b43a47382b6/1/vGyMBtLTwoAfBUWPyDQT2wpd360.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:54:a4:27:83:12:9f:c9:22:4d:6a:86:00:9d:b2:bc:66:54:
         8a:5a:f7:8a:82:95:60:8c:7f:e6:19:bf:ef:81:52:5c:2b:ee:
         76:5b:39:7e:92:4c:de:9a:0a:0d:95:f1:86:93:7e:e4:f1:63:
         9f:01:fa:a4:67:7b:de:52:bb:e2:91:52:74:ac:be:67:59:c3:
         ed:de:14:61:50:d8:51:6c:b0:44:6f:ea:66:3d:45:3a:11:9a:
         27:9b:b3:19:0f:60:9e:16:38:ce:23:bf:82:97:9e:8a:5d:9c:
         4f:5e:b6:ed:4a:31:0a:31:51:b2:7b:60:7f:de:76:f0:5e:6a:
         72:4f:97:9c:31:12:5a:2c:06:5b:88:3c:c5:e5:ac:38:a0:e5:
         1f:dc:af:37:4e:bb:94:38:e5:17:c0:0b:6a:d4:3c:f5:58:2f:
         77:04:4d:90:cb:48:ff:d0:67:da:84:ae:66:32:cb:b2:04:a5:
         ba:6e:a8:03:b3:9c:fe:c7:dd:97:3d:a2:52:75:ee:84:c6:fc:
         76:8b:08:b9:41:1b:03:ae:68:fe:1b:87:7d:10:5e:6c:bf:8d:
         57:11:ec:3c:1c:d5:33:ea:6e:5b:89:3c:65:67:2e:0d:16:ff:
         a0:16:b8:81:f4:80:f3:99:51:86:15:06:6d:ac:2b:ac:64:06:
         04:24:01:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumLb3AB3OunudliZbdj1DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNmM4YzA2ZDJkM2MyODAxZjA1NDU4ZmM4MzQxM2RiMGE1
ZGRmYWQwHhcNMjUwNDEzMTAwMTIyWhcNMjUwNDE0MTAwMTIyWjAzMTEwLwYDVQQD
EygzMWY0NGIzYWE5ODBhNDJiMGRmZjcxOTEwYTcyZjVmNGYwNTk3ZjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ5OyCmm9FQsc491wtl6c7Cgk/7u
Q6FXkQmMlt3KKD5kfp2KMbG/28ozKhxId4X2NnBUIKpdmJQ1a2NasgzatlsiAtHc
uzLl1fkOucLP7LDBnokJV1zlaLy7reNu1Y/PPFV7Sd2Xkm2z2p4weItUPsM0wVVE
WKEZRTSNCq/siGuBZC2fEcaoFkUevZZoQbyoiMJFLQcLYkIZdDpEFhCRqf1ce67j
41lFzNKvpgjgyfDsjlUihQ/w0eCciSZwSgSM5ywwmP7TD6+LmeWkTqJx2y2CAfjS
eyndvqfFXxkOSrd0cR7f6jPdI2AEE+esyIt9kLKNj9jHmU3HVEEem9gH2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDH0SzqpgKQrDf9xkQpy9fTwWX87MB8GA1UdIwQY
MBaAFLxsjAbS08KAHwVFj8g0E9sKXd+tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkd5TUJ0TFR3b0FmQlVXUHlEUVQyd3BkMzYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8xN2FkZGYtZDMyNS00YWE3LTk3YTct
NGI0M2E0NzM4MmI2LzEvdkd5TUJ0TFR3b0FmQlVXUHlEUVQyd3BkMzYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8xN2FkZGYtZDMyNS00YWE3LTk3YTctNGI0M2E0NzM4MmI2
LzEvdkd5TUJ0TFR3b0FmQlVXUHlEUVQyd3BkMzYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqVSkJ4MS
n8kiTWqGAJ2yvGZUilr3ioKVYIx/5hm/74FSXCvudls5fpJM3poKDZXxhpN+5PFj
nwH6pGd73lK74pFSdKy+Z1nD7d4UYVDYUWywRG/qZj1FOhGaJ5uzGQ9gnhY4ziO/
gpeeil2cT1627UoxCjFRsntgf9528F5qck+XnDESWiwGW4g8xeWsOKDlH9yvN067
lDjlF8ALatQ89VgvdwRNkMtI/9Bn2oSuZjLLsgSlum6oA7Oc/sfdlz2iUnXuhMb8
dosIuUEbA65o/huHfRBebL+NVxHsPBzVM+puW4k8ZWcuDRb/oBa4gfSA85lRhhUG
bawrrGQGBCQBxw==
-----END CERTIFICATE-----