Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
File:                     buuvFSM9mOuO8GLCRfkXNi5jJlY.mft (raw, json)
Hash identifier:          VDuqBBn6lrnQ5feRs14bFZrWulm4FtyTeN+VdyLA6Z4=
Subject key identifier:   38:1A:9B:60:3E:61:FA:51:1E:74:7C:B5:8C:39:92:90:B1:08:7A:26
Authority key identifier: 6E:EB:AF:15:23:3D:98:EB:8E:F0:62:C2:45:F9:17:36:2E:63:26:56
Certificate issuer:       /CN=6eebaf15233d98eb8ef062c245f917362e632656
Certificate serial:       01962ECFC3B38C929FE1DCE691F1C6BBB324
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:29 +0000
Files and hashes:         1: YWeKpT1rE5D3jQdqNfYDMaSRQ-o.roa (hash: Zb5RmiW5EJ1sc/m0g84BzROe4xUzHJtXaAdIweCX3Co=)
                          2: buuvFSM9mOuO8GLCRfkXNi5jJlY.crl (hash: DG5LiXC7a4y8WGfjEMp8YIucB6D/lnWrKuLRqYW8Wfk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c3:b3:8c:92:9f:e1:dc:e6:91:f1:c6:bb:b3:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eebaf15233d98eb8ef062c245f917362e632656
        Validity
            Not Before: Apr 13 11:01:29 2025 GMT
            Not After : Apr 14 11:01:29 2025 GMT
        Subject: CN=381a9b603e61fa511e747cb58c399290b1087a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9f:e4:b0:f4:08:ac:37:50:95:d9:c2:b7:f4:
                    6d:c4:ec:72:b0:50:81:5f:02:f5:c0:40:b4:e1:5e:
                    72:c8:df:59:c5:d4:01:53:59:08:5f:50:8a:b1:9a:
                    d3:ec:e3:d5:0e:79:fc:13:0c:c8:17:e7:cf:b7:f7:
                    a1:67:c5:16:91:5a:ff:1d:31:1f:ad:fd:87:fb:b4:
                    7e:5f:0c:41:20:fc:41:39:5c:0b:73:4e:90:ef:ee:
                    c1:95:2b:f5:f9:e1:df:51:c7:d4:f4:5c:de:37:d1:
                    0c:87:62:85:38:1b:54:aa:e9:03:a7:19:52:e1:1a:
                    43:aa:e3:82:3e:27:33:8c:3e:f3:18:99:ac:51:f1:
                    dd:9a:63:5b:81:93:c1:cc:7f:03:01:7b:50:5b:09:
                    80:30:99:11:9c:26:bc:96:04:8a:e4:d6:e7:ed:54:
                    b4:22:37:95:8c:fe:86:f2:30:34:28:30:57:87:07:
                    e9:11:10:c0:ce:a4:2e:a1:f7:d9:0a:99:ce:f6:61:
                    85:c1:ba:67:61:f2:19:8c:96:1d:92:6c:08:fa:ff:
                    dd:2b:c1:5f:71:a2:ed:e3:1a:f0:c8:75:5e:36:62:
                    20:76:a5:ed:36:c4:02:98:53:f1:4c:3a:24:fd:cf:
                    49:4a:31:27:c0:05:5d:e6:ca:e6:24:b8:41:c7:ff:
                    d8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1A:9B:60:3E:61:FA:51:1E:74:7C:B5:8C:39:92:90:B1:08:7A:26
            X509v3 Authority Key Identifier:
                keyid:6E:EB:AF:15:23:3D:98:EB:8E:F0:62:C2:45:F9:17:36:2E:63:26:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:04:f8:57:ea:42:c7:56:1e:e8:22:96:b1:f7:76:65:a5:a3:
         24:6c:ab:b6:fb:f1:e8:28:e8:48:98:ff:d4:96:ac:5d:de:9a:
         ca:1a:55:38:09:8f:80:ea:7f:3d:e1:11:11:13:3d:c3:3a:65:
         0b:91:bc:a6:9d:5b:52:cc:a5:ec:ca:64:5a:1f:33:49:d2:52:
         02:aa:70:6c:9f:29:eb:3b:2b:e7:f0:3b:1c:12:7e:91:ae:0b:
         a0:fa:ed:4e:b2:b0:75:80:e3:2c:ba:f5:c1:52:41:b8:e0:46:
         c4:4d:d0:26:72:6d:c8:90:58:f6:5c:87:ea:48:df:5a:f0:96:
         b4:92:81:a0:6c:c1:60:5a:4f:37:b4:35:ee:e8:30:b6:76:7d:
         b0:52:d7:89:a7:ee:f8:f0:ba:2f:44:bb:c6:5b:31:b6:82:c0:
         c0:ed:95:44:2b:3c:30:84:d2:07:e7:11:73:a9:1f:f2:9c:05:
         ea:f7:64:01:97:92:d7:30:a2:07:12:6e:af:99:4e:1a:07:3e:
         b0:2a:4c:cd:71:9d:0f:b2:ea:86:25:4a:2b:c4:c3:d7:c9:9f:
         40:5b:15:74:90:14:54:00:54:c9:65:f7:09:24:3f:72:ce:e6:
         06:1d:d2:0c:e1:03:a8:c4:41:4e:7e:8a:aa:48:65:90:45:cd:
         ff:34:08:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz8OzjJKf4dzmkfHGu7MkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlZWJhZjE1MjMzZDk4ZWI4ZWYwNjJjMjQ1ZjkxNzM2MmU2
MzI2NTYwHhcNMjUwNDEzMTEwMTI5WhcNMjUwNDE0MTEwMTI5WjAzMTEwLwYDVQQD
EygzODFhOWI2MDNlNjFmYTUxMWU3NDdjYjU4YzM5OTI5MGIxMDg3YTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtp/ksPQIrDdQldnCt/RtxOxysFCB
XwL1wEC04V5yyN9ZxdQBU1kIX1CKsZrT7OPVDnn8EwzIF+fPt/ehZ8UWkVr/HTEf
rf2H+7R+XwxBIPxBOVwLc06Q7+7BlSv1+eHfUcfU9FzeN9EMh2KFOBtUqukDpxlS
4RpDquOCPiczjD7zGJmsUfHdmmNbgZPBzH8DAXtQWwmAMJkRnCa8lgSK5Nbn7VS0
IjeVjP6G8jA0KDBXhwfpERDAzqQuoffZCpnO9mGFwbpnYfIZjJYdkmwI+v/dK8Ff
caLt4xrwyHVeNmIgdqXtNsQCmFPxTDok/c9JSjEnwAVd5srmJLhBx//YnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDgam2A+YfpRHnR8tYw5kpCxCHomMB8GA1UdIwQY
MBaAFG7rrxUjPZjrjvBiwkX5FzYuYyZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnV1dkZTTTltT3VPOEdMQ1Jma1hOaTVqSmxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yNzEzZWQtY2IzMi00MDdlLTg2Mjgt
MGU0NjdlNTFiYTA2LzEvYnV1dkZTTTltT3VPOEdMQ1Jma1hOaTVqSmxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8yNzEzZWQtY2IzMi00MDdlLTg2MjgtMGU0NjdlNTFiYTA2
LzEvYnV1dkZTTTltT3VPOEdMQ1Jma1hOaTVqSmxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvAT4V+pC
x1Ye6CKWsfd2ZaWjJGyrtvvx6CjoSJj/1JasXd6ayhpVOAmPgOp/PeERERM9wzpl
C5G8pp1bUsyl7MpkWh8zSdJSAqpwbJ8p6zsr5/A7HBJ+ka4LoPrtTrKwdYDjLLr1
wVJBuOBGxE3QJnJtyJBY9lyH6kjfWvCWtJKBoGzBYFpPN7Q17ugwtnZ9sFLXiafu
+PC6L0S7xlsxtoLAwO2VRCs8MITSB+cRc6kf8pwF6vdkAZeS1zCiBxJur5lOGgc+
sCpMzXGdD7LqhiVKK8TD18mfQFsVdJAUVABUyWX3CSQ/cs7mBh3SDOEDqMRBTn6K
qkhlkEXN/zQI4A==
-----END CERTIFICATE-----