Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
File:                     vE4hsn1vhOvdiIxo55zlVchG2ss.mft (raw, json)
Hash identifier:          JJLM9jsyq0VNL4PBuiLS3kBqzx5IkUlcuNJTYcSZccE=
Subject key identifier:   DE:A9:C8:2D:8A:E0:AF:55:48:CF:3F:84:2A:1F:C1:BD:0D:01:D3:A2
Authority key identifier: BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
Certificate issuer:       /CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Certificate serial:       01962F7439446CDC3C589688CC3217914920
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:07 +0000
Files and hashes:         1: F3kOmnX-kEtjSilXO2Pe0L_37Jo.roa (hash: lIJ2C488mP6Ma0OF6csW3I8GzUd4jiMp8CCjsO6b5Eg=)
                          2: Po0728QWErCTmXCeFPKP0UlTEug.roa (hash: IpBaviswNtBt65qOWaQEl9AqBmhUCEIpYlrqfl+L76A=)
                          3: vE4hsn1vhOvdiIxo55zlVchG2ss.crl (hash: tR9fZ/3uyn/iN7BVVqY6qPzOIHelxg1kiFtMwyZioJQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:39:44:6c:dc:3c:58:96:88:cc:32:17:91:49:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
        Validity
            Not Before: Apr 13 14:01:07 2025 GMT
            Not After : Apr 14 14:01:07 2025 GMT
        Subject: CN=dea9c82d8ae0af5548cf3f842a1fc1bd0d01d3a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:62:b5:e4:b3:b6:bc:e6:32:0a:5b:ef:c6:e0:
                    20:3b:94:71:00:15:81:76:12:4a:78:77:5e:bc:05:
                    25:c4:df:68:5a:e7:59:3c:a4:96:44:77:a8:95:a5:
                    6a:d6:57:21:1d:f3:d4:9e:6b:e8:8f:66:45:34:a5:
                    62:93:14:a1:e7:05:25:85:b8:a1:77:4f:3c:f5:7d:
                    b1:b5:72:1e:1c:d4:31:14:68:8a:f6:a0:a8:e8:f7:
                    58:53:ae:71:d5:54:9f:ee:58:c5:f0:59:19:a1:0c:
                    64:44:c6:d6:e7:97:a4:2a:a0:18:98:be:fc:95:85:
                    d4:67:1e:95:e8:d5:b1:93:ab:b8:c5:2f:3f:a2:81:
                    d5:4c:89:29:9f:f2:9e:1b:f6:15:03:5f:54:3b:03:
                    38:6e:c7:ea:b9:30:2a:b3:c6:68:f1:c1:ac:cd:7e:
                    ad:fa:2f:60:91:31:42:3b:8b:41:7c:54:b0:90:a9:
                    52:ee:3b:7f:ec:43:05:69:7e:22:e9:c9:2e:67:41:
                    f8:7c:81:39:8a:1a:7e:5d:bd:f8:b6:34:f1:d7:f3:
                    e0:ee:c1:77:df:d1:cf:ea:55:97:92:d5:5e:e7:36:
                    bb:a8:c2:82:41:4e:66:10:ef:79:89:1b:6e:b7:a1:
                    d8:fb:6d:ec:73:33:0e:f1:68:f1:d0:c1:96:0a:4e:
                    d6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A9:C8:2D:8A:E0:AF:55:48:CF:3F:84:2A:1F:C1:BD:0D:01:D3:A2
            X509v3 Authority Key Identifier:
                keyid:BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:0d:f4:cb:b8:93:84:01:c6:da:0b:ee:03:17:8b:64:82:57:
         aa:c3:89:9b:91:48:5e:1e:a7:f4:b1:1c:bd:ad:2a:2b:73:17:
         52:4d:0e:76:5e:91:cf:5f:83:76:29:80:8d:21:96:d3:a7:68:
         42:b9:94:e2:e8:e1:8b:ba:c9:50:23:13:ae:14:9a:d6:a1:d6:
         4f:97:70:a8:a7:4d:c9:ba:be:aa:b6:f8:67:c2:3e:c5:55:34:
         24:17:5f:97:e4:66:5c:73:81:e0:80:5b:b5:eb:0a:2e:d2:7a:
         8b:25:bb:b1:c4:35:11:44:ac:13:aa:14:c7:87:9c:91:f6:4b:
         e7:9e:3a:74:3c:26:a2:e0:34:7e:b9:15:80:29:8a:32:9c:c0:
         01:2e:2b:ca:34:31:df:e3:ff:a1:be:1e:ad:23:5d:87:ff:c0:
         e1:b0:5c:59:65:37:18:46:d7:7d:9b:16:fe:14:e0:38:ed:6c:
         c2:1e:96:80:fc:25:b9:2d:e6:e5:d5:2f:e8:ae:98:d8:58:19:
         75:07:e4:31:c2:f2:06:39:59:f6:a3:da:93:fb:38:f6:8d:43:
         2d:25:07:66:42:a3:f7:1d:00:e0:0f:5f:d3:37:07:0f:63:47:
         50:57:6b:2f:30:d1:d8:5c:50:4f:4e:e0:52:cd:bf:cb:75:87:
         e0:38:14:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdDlEbNw8WJaIzDIXkUkgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNGUyMWIyN2Q2Zjg0ZWJkZDg4OGM2OGU3OWNlNTU1Yzg0
NmRhY2IwHhcNMjUwNDEzMTQwMTA3WhcNMjUwNDE0MTQwMTA3WjAzMTEwLwYDVQQD
EyhkZWE5YzgyZDhhZTBhZjU1NDhjZjNmODQyYTFmYzFiZDBkMDFkM2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmK15LO2vOYyClvvxuAgO5RxABWB
dhJKeHdevAUlxN9oWudZPKSWRHeolaVq1lchHfPUnmvoj2ZFNKVikxSh5wUlhbih
d0889X2xtXIeHNQxFGiK9qCo6PdYU65x1VSf7ljF8FkZoQxkRMbW55ekKqAYmL78
lYXUZx6V6NWxk6u4xS8/ooHVTIkpn/KeG/YVA19UOwM4bsfquTAqs8Zo8cGszX6t
+i9gkTFCO4tBfFSwkKlS7jt/7EMFaX4i6ckuZ0H4fIE5ihp+Xb34tjTx1/Pg7sF3
39HP6lWXktVe5za7qMKCQU5mEO95iRtut6HY+23sczMO8Wjx0MGWCk7WBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6pyC2K4K9VSM8/hCofwb0NAdOiMB8GA1UdIwQY
MBaAFLxOIbJ9b4Tr3YiMaOec5VXIRtrLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkU0aHNuMXZoT3ZkaUl4bzU1emxWY2hHMnNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9hMGQ3M2QtNjU2NC00MTQyLWE2ZWUt
ODNlNzNjYjI1ZWE1LzEvdkU0aHNuMXZoT3ZkaUl4bzU1emxWY2hHMnNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9hMGQ3M2QtNjU2NC00MTQyLWE2ZWUtODNlNzNjYjI1ZWE1
LzEvdkU0aHNuMXZoT3ZkaUl4bzU1emxWY2hHMnNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdg30y7iT
hAHG2gvuAxeLZIJXqsOJm5FIXh6n9LEcva0qK3MXUk0Odl6Rz1+DdimAjSGW06do
QrmU4ujhi7rJUCMTrhSa1qHWT5dwqKdNybq+qrb4Z8I+xVU0JBdfl+RmXHOB4IBb
tesKLtJ6iyW7scQ1EUSsE6oUx4eckfZL5546dDwmouA0frkVgCmKMpzAAS4ryjQx
3+P/ob4erSNdh//A4bBcWWU3GEbXfZsW/hTgOO1swh6WgPwluS3m5dUv6K6Y2FgZ
dQfkMcLyBjlZ9qPak/s49o1DLSUHZkKj9x0A4A9f0zcHD2NHUFdrLzDR2FxQT07g
Us2/y3WH4DgUXQ==
-----END CERTIFICATE-----