Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
File:                     vG0u13lNMhfPqv4crVP3Vbgs46k.mft (raw, json)
Hash identifier:          6RiSeBXLnGVULQCGKCSS5y1hBo2iAhsSrnMjgWM4U/I=
Subject key identifier:   3E:80:54:6D:AD:97:52:EC:04:C4:AA:C0:43:96:E7:39:04:31:E4:B9
Authority key identifier: BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9
Certificate issuer:       /CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9
Certificate serial:       01962DF4230AE1E4A7930ADAD750F9A02584
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 07:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:36 +0000
Files and hashes:         1: Rfx73to5lynfa5P988aJIcpZHW0.roa (hash: fb46D6K33gqqGx/M4AgtMP1UJSgJ24dkYkKRuFAfTRM=)
                          2: vG0u13lNMhfPqv4crVP3Vbgs46k.crl (hash: orMf1/G5hFbVU5M5AX0NTe1rIBRwuKtTa6nL0mCu4bU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:23:0a:e1:e4:a7:93:0a:da:d7:50:f9:a0:25:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9
        Validity
            Not Before: Apr 13 07:01:36 2025 GMT
            Not After : Apr 14 07:01:36 2025 GMT
        Subject: CN=3e80546dad9752ec04c4aac04396e7390431e4b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d4:2c:61:aa:6e:21:eb:59:04:c8:09:ad:a2:
                    d5:87:6d:23:a5:17:e8:62:ed:f6:de:96:19:e3:54:
                    e6:e9:ff:d5:a7:ff:ed:c3:4e:23:66:59:9b:f0:2e:
                    fe:b7:55:44:0e:49:7b:5a:c6:46:80:c2:0f:63:55:
                    63:96:2d:cc:ba:39:3d:79:fe:ef:bb:a9:38:b7:30:
                    4a:e0:d4:1b:54:a0:9f:15:f9:da:65:42:11:b5:64:
                    45:a0:87:af:cb:9e:fc:14:1e:a3:6c:53:57:19:a3:
                    82:12:7c:c9:d0:f8:d4:82:cf:68:87:77:07:4d:0d:
                    d7:d1:85:d8:0f:5b:33:9c:7e:61:3f:f1:68:33:c1:
                    73:a0:ae:2e:b0:5d:c3:7e:fc:97:38:e3:bd:2e:55:
                    8d:19:db:6f:a1:4c:30:80:b9:a4:da:76:49:63:8b:
                    c9:bf:c0:82:45:6f:c6:f2:87:0b:bc:fb:cf:11:6d:
                    4d:6a:5f:8a:2e:df:19:76:77:ae:8c:40:02:78:9e:
                    68:06:d9:c4:a5:04:30:b0:97:57:f4:57:ac:88:d2:
                    a0:c4:9b:aa:21:2a:6c:73:5d:ce:4a:5f:e0:0f:ba:
                    5b:0c:8f:6e:21:a6:ef:90:f0:31:30:56:d4:15:e5:
                    21:e1:fb:39:77:25:73:ac:63:d1:2f:f0:6f:b0:0d:
                    14:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:80:54:6D:AD:97:52:EC:04:C4:AA:C0:43:96:E7:39:04:31:E4:B9
            X509v3 Authority Key Identifier:
                keyid:BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:8d:4c:8e:b7:97:2a:1d:29:7b:91:d5:7d:70:f1:e1:c8:85:
         d3:b7:d9:f8:48:94:cb:81:78:88:82:7c:56:f4:20:c6:2c:81:
         79:eb:a9:c3:1d:62:68:de:d0:b1:38:53:54:4b:68:0d:f2:1b:
         7e:78:5b:b1:8f:ba:2f:5c:12:76:4b:f3:8c:0f:19:7e:6f:d9:
         0a:59:db:01:ca:db:9e:bb:9a:4b:ec:41:c4:60:0c:1d:65:33:
         33:b3:50:98:3f:5e:00:6c:d7:83:07:c3:fb:9a:0e:09:98:07:
         77:af:b6:61:b3:5d:45:00:38:cc:92:44:65:68:ba:e7:b3:d1:
         d7:b0:2e:b6:ad:0d:08:d7:49:c9:48:1b:4d:45:01:df:68:6e:
         66:bc:fb:8d:31:f4:3d:f5:c4:5a:06:a6:0b:f9:33:45:5e:df:
         e3:93:a9:83:c6:1a:6b:68:02:87:c0:8c:12:fb:8b:14:c6:b2:
         2e:42:69:6e:11:bf:1b:aa:e0:8a:3f:5e:5a:d5:b5:0b:33:e6:
         9a:00:ee:c7:ef:bd:6d:e4:fd:d7:09:6d:45:19:51:dc:26:b5:
         44:cb:71:a3:a1:0a:38:ab:f1:a0:55:25:86:5a:21:64:cd:de:
         a3:8d:cf:f1:08:52:b2:70:23:f6:03:10:f7:15:7a:28:2e:9e:
         75:1c:50:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9CMK4eSnkwra11D5oCWEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNmQyZWQ3Nzk0ZDMyMTdjZmFhZmUxY2FkNTNmNzU1Yjgy
Y2UzYTkwHhcNMjUwNDEzMDcwMTM2WhcNMjUwNDE0MDcwMTM2WjAzMTEwLwYDVQQD
EygzZTgwNTQ2ZGFkOTc1MmVjMDRjNGFhYzA0Mzk2ZTczOTA0MzFlNGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdQsYapuIetZBMgJraLVh20jpRfo
Yu323pYZ41Tm6f/Vp//tw04jZlmb8C7+t1VEDkl7WsZGgMIPY1Vjli3Mujk9ef7v
u6k4tzBK4NQbVKCfFfnaZUIRtWRFoIevy578FB6jbFNXGaOCEnzJ0PjUgs9oh3cH
TQ3X0YXYD1sznH5hP/FoM8FzoK4usF3DfvyXOOO9LlWNGdtvoUwwgLmk2nZJY4vJ
v8CCRW/G8ocLvPvPEW1Nal+KLt8ZdneujEACeJ5oBtnEpQQwsJdX9FesiNKgxJuq
ISpsc13OSl/gD7pbDI9uIabvkPAxMFbUFeUh4fs5dyVzrGPRL/BvsA0UQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6AVG2tl1LsBMSqwEOW5zkEMeS5MB8GA1UdIwQY
MBaAFLxtLtd5TTIXz6r+HK1T91W4LOOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkcwdTEzbE5NaGZQcXY0Y3JWUDNWYmdzNDZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83ZDI5NDQtMWVkNi00ZmNkLThjNWMt
NzdiNGJiZTM1YTllLzEvdkcwdTEzbE5NaGZQcXY0Y3JWUDNWYmdzNDZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC83ZDI5NDQtMWVkNi00ZmNkLThjNWMtNzdiNGJiZTM1YTll
LzEvdkcwdTEzbE5NaGZQcXY0Y3JWUDNWYmdzNDZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApo1MjreX
Kh0pe5HVfXDx4ciF07fZ+EiUy4F4iIJ8VvQgxiyBeeupwx1iaN7QsThTVEtoDfIb
fnhbsY+6L1wSdkvzjA8Zfm/ZClnbAcrbnruaS+xBxGAMHWUzM7NQmD9eAGzXgwfD
+5oOCZgHd6+2YbNdRQA4zJJEZWi657PR17Autq0NCNdJyUgbTUUB32huZrz7jTH0
PfXEWgamC/kzRV7f45Opg8Yaa2gCh8CMEvuLFMayLkJpbhG/G6rgij9eWtW1CzPm
mgDux++9beT91wltRRlR3Ca1RMtxo6EKOKvxoFUlhlohZM3eo43P8QhSsnAj9gMQ
9xV6KC6edRxQ0g==
-----END CERTIFICATE-----