Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
File:                     veY2_1I-Xzc0In8zxEwuUP-NHuI.mft (raw, json)
Hash identifier:          Xs444tLoHYpBSoHJkS/PAsjEk8AeOmHoWadLA/Lsy54=
Subject key identifier:   EA:DB:24:1E:54:51:52:8B:7B:CD:32:9F:2B:3C:D2:3D:99:A6:5E:4C
Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
Certificate issuer:       /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Certificate serial:       01962ECFEB8F14494E25B5A901B1CB31C4EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
Manifest number:          0886
Signing time:             Sun 13 Apr 2025 11:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:40 +0000
Files and hashes:         1: 4NbkXu89FXOyQLhXi76KTLRS_8U.roa (hash: /R0anYXR39TgZMh7wTdh79H3PAU+bV4gIhm7ONZyMQ8=)
                          2: C9jlSQpiBO6Y73lSEYMO0KAZmVU.roa (hash: bHV8b0r3RZhEMBuy9WHUg2/V18JXKTeCJEmR8xzO1XQ=)
                          3: a-uHBOpyzdK3zVYDOg8UIHN03yU.roa (hash: H9wzL/UUxJZ81Fk0wfS9+Uygz3BeNpB4M/N5om2Y4dg=)
                          4: avjbPkAlTTUDqNOv2jIGjLOGScM.roa (hash: NoYFGDs45doeFAf2D++JjK94J0re2CVTVqEaqoaVcGU=)
                          5: bfuZYtxjTAOdpCpRWdDszbBOycM.roa (hash: oKsbpIb+4VCZp3VPNUM0uIEJezlOZcr7unos7yGZizs=)
                          6: veY2_1I-Xzc0In8zxEwuUP-NHuI.crl (hash: MmX5NBfye7sA59t0iO3oXiBFpS2UJGCRnr+yrRMSMvs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:eb:8f:14:49:4e:25:b5:a9:01:b1:cb:31:c4:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
        Validity
            Not Before: Apr 13 11:01:40 2025 GMT
            Not After : Apr 14 11:01:40 2025 GMT
        Subject: CN=eadb241e5451528b7bcd329f2b3cd23d99a65e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fa:a7:d2:69:77:51:50:39:8e:a8:57:29:aa:
                    14:53:0f:d7:5a:a2:37:e8:d9:e3:1b:2b:b7:48:5e:
                    2e:65:fd:1e:bd:93:6f:8d:e3:75:6b:c1:32:4b:bf:
                    c7:fb:1e:c2:28:f8:d1:a2:de:7f:b9:bb:8b:58:45:
                    2a:08:1e:72:a5:66:c2:2e:62:2b:8f:18:6f:a6:ae:
                    3f:d6:50:88:43:c0:78:36:a5:43:6c:75:64:c6:cb:
                    d4:a0:b5:31:de:0a:86:8d:30:1d:f7:ea:83:57:86:
                    e3:e0:8a:53:d7:90:bc:42:ce:da:20:49:6b:a2:dc:
                    8e:f4:66:4c:f2:fb:31:62:57:c3:71:26:ea:1f:75:
                    4b:c1:de:fb:27:d1:7c:82:87:2e:bf:89:0d:d6:0e:
                    34:1e:b4:b0:26:04:b0:b5:a7:c9:45:98:86:30:d8:
                    84:d2:af:d0:2f:d9:50:f4:3f:9d:0a:d6:a7:89:69:
                    50:b3:3e:9f:2b:ea:ca:42:b3:6f:b0:f2:bd:25:07:
                    92:30:bf:e3:64:16:43:59:d8:ea:f2:68:29:69:d5:
                    e1:bb:73:03:2d:44:04:fd:03:c0:20:7b:75:cc:42:
                    78:fe:93:65:a7:98:ca:41:46:82:c0:ea:66:b5:3f:
                    d2:4d:50:c3:f0:6b:e7:3b:29:f6:18:51:03:a4:e4:
                    13:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DB:24:1E:54:51:52:8B:7B:CD:32:9F:2B:3C:D2:3D:99:A6:5E:4C
            X509v3 Authority Key Identifier:
                keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:56:e9:d3:b8:d8:42:69:46:77:dd:af:bc:c4:f0:82:a5:ef:
         7c:89:53:35:48:4c:c5:35:ab:0d:1c:1f:55:b6:11:40:a9:26:
         73:9a:70:c3:fb:5b:1c:a8:41:f6:96:6f:66:20:ad:5f:83:b2:
         95:e7:75:c7:81:73:cc:e7:96:d4:40:b5:df:bd:5c:27:54:9b:
         c5:f3:55:23:7a:85:1a:56:64:a7:30:2f:a6:ac:d3:89:bd:57:
         56:69:0e:c6:47:dd:b1:4c:27:7b:9e:6a:f1:f7:e1:59:7c:03:
         bd:d8:b2:d7:f3:d5:fc:fd:1c:b0:17:44:ca:f4:17:43:b1:3a:
         0c:9c:89:cc:4a:c3:ae:cc:88:71:35:e5:82:06:0e:62:26:4a:
         2c:4b:de:f2:ad:4c:6e:3a:c7:a7:38:6d:7e:38:4f:be:30:84:
         4c:65:37:0d:5f:2e:24:7d:e7:71:7e:1f:72:1a:1a:5d:fe:4b:
         5e:f8:50:8c:58:c4:e7:ed:1a:55:c3:8d:ce:43:a5:fd:15:39:
         c3:d2:e3:fd:a0:e8:9d:bb:2a:cc:6a:0e:3f:d3:52:ca:39:70:
         7b:02:68:6e:83:f6:9a:a0:2e:eb:64:e3:6f:68:ad:80:9c:3b:
         79:6f:ac:96:65:ed:50:ae:9f:93:3b:94:51:f5:78:b6:95:f3:
         e5:c2:5a:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz+uPFElOJbWpAbHLMcTsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZTYzNmZmNTIzZTVmMzczNDIyN2YzM2M0NGMyZTUwZmY4
ZDFlZTIwHhcNMjUwNDEzMTEwMTQwWhcNMjUwNDE0MTEwMTQwWjAzMTEwLwYDVQQD
EyhlYWRiMjQxZTU0NTE1MjhiN2JjZDMyOWYyYjNjZDIzZDk5YTY1ZTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPqn0ml3UVA5jqhXKaoUUw/XWqI3
6NnjGyu3SF4uZf0evZNvjeN1a8EyS7/H+x7CKPjRot5/ubuLWEUqCB5ypWbCLmIr
jxhvpq4/1lCIQ8B4NqVDbHVkxsvUoLUx3gqGjTAd9+qDV4bj4IpT15C8Qs7aIElr
otyO9GZM8vsxYlfDcSbqH3VLwd77J9F8gocuv4kN1g40HrSwJgSwtafJRZiGMNiE
0q/QL9lQ9D+dCtaniWlQsz6fK+rKQrNvsPK9JQeSML/jZBZDWdjq8mgpadXhu3MD
LUQE/QPAIHt1zEJ4/pNlp5jKQUaCwOpmtT/STVDD8GvnOyn2GFEDpOQT9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOrbJB5UUVKLe80ynys80j2Zpl5MMB8GA1UdIwQY
MBaAFL3mNv9SPl83NCJ/M8RMLlD/jR7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wYzQzOTItMjc1NC00ZTMzLWEwMmYt
N2JmYjQzODFhYjU0LzEvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8wYzQzOTItMjc1NC00ZTMzLWEwMmYtN2JmYjQzODFhYjU0
LzEvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADFbp07jY
QmlGd92vvMTwgqXvfIlTNUhMxTWrDRwfVbYRQKkmc5pww/tbHKhB9pZvZiCtX4Oy
led1x4FzzOeW1EC1371cJ1SbxfNVI3qFGlZkpzAvpqzTib1XVmkOxkfdsUwne55q
8ffhWXwDvdiy1/PV/P0csBdEyvQXQ7E6DJyJzErDrsyIcTXlggYOYiZKLEve8q1M
bjrHpzhtfjhPvjCETGU3DV8uJH3ncX4fchoaXf5LXvhQjFjE5+0aVcONzkOl/RU5
w9Lj/aDonbsqzGoOP9NSyjlwewJoboP2mqAu62Tjb2itgJw7eW+slmXtUK6fkzuU
UfV4tpXz5cJauw==
-----END CERTIFICATE-----