Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
File:                     vB5m76AFpt5TsdDJHzdVS99Gdr0.mft (raw, json)
Hash identifier:          /TssHMCj2a8BSj4Vsy2teJJaFhPDj6wEj5WSDHbTnhg=
Subject key identifier:   C9:31:CC:5A:B3:8F:60:4F:BF:78:CD:EE:22:77:79:EC:06:74:B1:36
Authority key identifier: BC:1E:66:EF:A0:05:A6:DE:53:B1:D0:C9:1F:37:55:4B:DF:46:76:BD
Certificate issuer:       /CN=bc1e66efa005a6de53b1d0c91f37554bdf4676bd
Certificate serial:       01962FAB0E7680B3BFB46043A7AE71D1EEEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
Manifest number:          0CEA
Signing time:             Sun 13 Apr 2025 15:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:01 +0000
Files and hashes:         1: 6IVQyX8RgUoO3Q58rf7sMqHJv54.roa (hash: 7oxYbSUUgVn0A9C0QrCdMuBwwgHYFbY1shMdIhdZPLk=)
                          2: vB5m76AFpt5TsdDJHzdVS99Gdr0.crl (hash: WCCbHfR4GI80EshfWq/ZCoicfNt3uyk5NznBwV+Egm0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:0e:76:80:b3:bf:b4:60:43:a7:ae:71:d1:ee:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc1e66efa005a6de53b1d0c91f37554bdf4676bd
        Validity
            Not Before: Apr 13 15:01:01 2025 GMT
            Not After : Apr 14 15:01:01 2025 GMT
        Subject: CN=c931cc5ab38f604fbf78cdee227779ec0674b136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:73:98:32:e6:a9:7e:55:63:84:3c:0a:75:fd:
                    1b:60:89:75:6d:c2:0c:29:80:f5:42:92:fe:9a:8a:
                    d3:db:a2:55:c1:5b:89:64:e4:d3:92:6d:48:51:5c:
                    c8:6f:b3:e0:7d:cd:84:be:5a:ce:90:e6:4e:e3:8b:
                    e5:25:28:2b:26:02:c3:e4:b0:d2:f4:5b:20:ff:4d:
                    b8:aa:4f:f5:5f:a5:50:db:ef:fb:15:1e:f0:4a:d6:
                    fc:d4:a8:10:92:cb:d6:ec:e9:11:df:76:86:28:d0:
                    d5:69:d2:81:78:77:64:e4:57:39:bc:5a:5c:a7:58:
                    e7:ff:9e:1e:4d:df:55:bf:a1:41:a4:1f:13:10:67:
                    10:d4:9d:07:fd:21:d3:90:d9:01:be:ee:05:e1:77:
                    aa:00:7e:02:f7:6d:f3:e2:69:2f:6d:76:9c:e4:10:
                    8c:d1:c0:fd:24:96:00:60:3c:27:89:03:e9:92:15:
                    4f:f5:dd:a7:1d:76:41:c2:61:d6:f0:cd:06:f5:36:
                    ab:91:fc:a3:59:f0:bf:9f:a6:89:12:b3:ad:81:13:
                    93:10:23:22:7d:b1:cb:ad:b7:1d:cb:e5:91:87:29:
                    0a:86:46:26:48:fe:1d:6c:60:37:1d:6c:5d:73:28:
                    90:e3:67:bb:c4:b8:8d:28:0a:17:fe:8e:ee:d5:63:
                    eb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:31:CC:5A:B3:8F:60:4F:BF:78:CD:EE:22:77:79:EC:06:74:B1:36
            X509v3 Authority Key Identifier:
                keyid:BC:1E:66:EF:A0:05:A6:DE:53:B1:D0:C9:1F:37:55:4B:DF:46:76:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:f2:d3:09:92:bf:ca:a8:0e:62:17:e6:fe:8e:52:02:fe:56:
         8b:19:cc:8e:f3:68:30:3d:7d:58:07:31:5b:f1:3a:41:b9:5b:
         f7:53:a6:f2:19:10:8e:ca:73:a6:b7:78:32:14:fe:71:9f:44:
         dd:b2:5d:19:58:53:01:b9:1e:f2:e2:5a:aa:6d:f7:d4:8c:d5:
         ef:38:41:63:10:47:c7:4f:af:0f:40:f6:42:44:5f:de:3b:a0:
         30:92:66:07:52:75:21:56:a9:55:63:78:97:89:d0:8d:11:cd:
         d5:02:cd:df:86:82:ca:35:ab:61:f5:50:73:81:fa:21:32:b9:
         24:f1:bd:fd:13:13:6c:36:3f:7b:58:16:57:89:e3:d0:a3:56:
         66:e7:9f:0b:1c:40:4d:28:9f:d3:7c:32:9d:a7:fc:14:49:08:
         e6:19:8b:86:33:dc:f3:0f:29:6b:db:cf:62:14:5a:0c:56:3c:
         7a:fc:1d:e0:a1:b7:f9:fe:12:d3:e0:6d:93:d7:c1:24:0c:ca:
         5a:48:f2:8b:c0:d0:18:4d:c9:2e:8c:b6:0d:b3:65:37:e1:ed:
         96:e2:64:45:90:0e:58:1b:a9:0a:97:a7:81:d6:f2:01:5f:fc:
         32:e2:e6:ba:b4:fb:2d:ea:28:11:12:37:ce:48:32:a5:c8:10:
         7f:c8:0f:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqw52gLO/tGBDp65x0e7qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMWU2NmVmYTAwNWE2ZGU1M2IxZDBjOTFmMzc1NTRiZGY0
Njc2YmQwHhcNMjUwNDEzMTUwMTAxWhcNMjUwNDE0MTUwMTAxWjAzMTEwLwYDVQQD
EyhjOTMxY2M1YWIzOGY2MDRmYmY3OGNkZWUyMjc3NzllYzA2NzRiMTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7XOYMuapflVjhDwKdf0bYIl1bcIM
KYD1QpL+morT26JVwVuJZOTTkm1IUVzIb7Pgfc2EvlrOkOZO44vlJSgrJgLD5LDS
9Fsg/024qk/1X6VQ2+/7FR7wStb81KgQksvW7OkR33aGKNDVadKBeHdk5Fc5vFpc
p1jn/54eTd9Vv6FBpB8TEGcQ1J0H/SHTkNkBvu4F4XeqAH4C923z4mkvbXac5BCM
0cD9JJYAYDwniQPpkhVP9d2nHXZBwmHW8M0G9TarkfyjWfC/n6aJErOtgROTECMi
fbHLrbcdy+WRhykKhkYmSP4dbGA3HWxdcyiQ42e7xLiNKAoX/o7u1WPr1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMkxzFqzj2BPv3jN7iJ3eewGdLE2MB8GA1UdIwQY
MBaAFLweZu+gBabeU7HQyR83VUvfRna9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkI1bTc2QUZwdDVUc2RESkh6ZFZTOTlHZHIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iYjJiZGItNzQ3ZC00ODU1LTg5NDUt
N2Y5YTNlNDUyNTZlLzEvdkI1bTc2QUZwdDVUc2RESkh6ZFZTOTlHZHIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9iYjJiZGItNzQ3ZC00ODU1LTg5NDUtN2Y5YTNlNDUyNTZl
LzEvdkI1bTc2QUZwdDVUc2RESkh6ZFZTOTlHZHIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyfLTCZK/
yqgOYhfm/o5SAv5WixnMjvNoMD19WAcxW/E6Qblb91Om8hkQjspzprd4MhT+cZ9E
3bJdGVhTAbke8uJaqm331IzV7zhBYxBHx0+vD0D2QkRf3jugMJJmB1J1IVapVWN4
l4nQjRHN1QLN34aCyjWrYfVQc4H6ITK5JPG9/RMTbDY/e1gWV4nj0KNWZuefCxxA
TSif03wynaf8FEkI5hmLhjPc8w8pa9vPYhRaDFY8evwd4KG3+f4S0+Btk9fBJAzK
Wkjyi8DQGE3JLoy2DbNlN+HtluJkRZAOWBupCpengdbyAV/8MuLmurT7LeooERI3
zkgypcgQf8gPQQ==
-----END CERTIFICATE-----