Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
File:                     vfW3EvLkkywcAwMS0ZSll4g_PV4.mft (raw, json)
Hash identifier:          dr+qB54LhVWk1DhdyQw5HwPAhHwcvxFwo/UCBH8KIkY=
Subject key identifier:   84:9B:24:77:8A:0B:52:39:6F:84:5B:A2:96:61:A8:02:25:12:1E:9C
Authority key identifier: BD:F5:B7:12:F2:E4:93:2C:1C:03:03:12:D1:94:A5:97:88:3F:3D:5E
Certificate issuer:       /CN=bdf5b712f2e4932c1c030312d194a597883f3d5e
Certificate serial:       01962E61D7EA521C6BEE1F87F0E1BF0E0612
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:26 +0000
Files and hashes:         1: BBvcU1rTQglpBpaZ0QSgMGmSs3Y.roa (hash: CTLLrnC8K2O/r8N1tX8rlBGB23cEp0OueaV8H2QNefc=)
                          2: vfW3EvLkkywcAwMS0ZSll4g_PV4.crl (hash: Mh9+X52j0aNPA8rznvufbUtTUS2rvDvmgjvzL1H47x8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d7:ea:52:1c:6b:ee:1f:87:f0:e1:bf:0e:06:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdf5b712f2e4932c1c030312d194a597883f3d5e
        Validity
            Not Before: Apr 13 09:01:26 2025 GMT
            Not After : Apr 14 09:01:26 2025 GMT
        Subject: CN=849b24778a0b52396f845ba29661a80225121e9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:03:d5:38:5f:2c:eb:49:6d:a3:8d:e8:d1:77:
                    31:0c:94:a5:b7:c3:01:4b:a7:b0:8d:78:ba:37:26:
                    d3:8e:53:43:9c:d7:83:2f:ad:01:c3:25:a1:a2:0e:
                    c2:27:6f:49:3b:f5:b1:00:aa:88:3b:fc:b8:5a:0c:
                    6d:bd:bd:67:b7:44:c7:00:1d:9c:7e:e6:b4:0c:7a:
                    04:a5:ff:3f:7f:1d:43:02:5a:b5:ef:d1:7d:7c:e1:
                    8d:af:5e:69:91:f8:7b:99:e2:fc:81:92:4c:b8:00:
                    31:4b:e8:89:32:aa:84:fb:c9:64:83:85:7a:85:1f:
                    ad:dd:95:2b:5c:15:91:cc:df:ea:11:b0:1f:2b:a7:
                    47:8d:71:ce:27:01:9d:f1:f0:c5:a7:9e:a6:0e:59:
                    51:72:96:3b:a7:ca:41:68:0e:7d:3e:39:52:fb:d6:
                    f8:50:90:6f:97:c0:41:37:8a:26:72:ca:d0:df:43:
                    32:64:17:21:3b:2e:07:a5:c3:ed:1b:15:9b:0a:e5:
                    ca:69:9c:97:68:0a:5d:11:5e:81:09:43:8f:79:07:
                    11:12:97:c9:a8:b6:bb:40:2e:40:59:cd:8d:80:3a:
                    ca:d9:28:23:5b:64:04:71:1e:33:bc:d7:58:f5:86:
                    5d:bb:6f:31:5e:ec:bd:3b:43:e0:08:d8:52:50:cb:
                    f8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9B:24:77:8A:0B:52:39:6F:84:5B:A2:96:61:A8:02:25:12:1E:9C
            X509v3 Authority Key Identifier:
                keyid:BD:F5:B7:12:F2:E4:93:2C:1C:03:03:12:D1:94:A5:97:88:3F:3D:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:d0:cc:fc:01:fa:02:7d:76:1e:c8:97:4c:a6:bf:d0:a9:a1:
         60:46:30:18:11:64:bf:ca:eb:04:20:3a:25:5e:84:9e:11:28:
         30:fd:6d:6a:1d:e6:ef:c3:5c:a1:e1:72:cc:8f:ce:88:54:f9:
         4f:2e:26:78:ec:f6:7a:dd:c7:9d:33:65:51:49:b2:a9:d0:5d:
         48:63:04:32:45:8a:4e:1c:f5:04:3f:27:a7:9c:98:07:0a:8a:
         72:02:42:24:67:9b:0e:80:d4:1d:72:2b:1a:80:16:b4:eb:4d:
         00:1d:c0:92:54:79:79:95:79:96:76:42:74:cb:3d:a3:52:d4:
         1b:d0:03:fa:74:3f:cd:21:89:50:34:26:78:e2:99:81:41:27:
         db:78:93:b0:2b:18:c2:87:a3:35:ed:6c:cf:af:aa:a2:6b:ae:
         53:60:ed:48:a5:53:a5:09:e3:47:13:26:d4:6f:ac:6e:9f:44:
         63:ea:48:ec:ca:f2:e6:03:46:9f:b8:43:23:d3:0d:3e:0e:9a:
         ea:2a:06:3c:36:f0:b5:42:f1:8a:04:74:8e:f2:5a:e3:f0:91:
         7a:26:e1:c0:2c:91:d7:5a:e4:2e:80:e2:9d:b9:ba:46:fc:1a:
         41:2d:70:52:2d:83:d4:a1:77:55:1c:c6:8d:71:2d:48:6e:6c:
         1b:f8:6f:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYdfqUhxr7h+H8OG/DgYSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZjViNzEyZjJlNDkzMmMxYzAzMDMxMmQxOTRhNTk3ODgz
ZjNkNWUwHhcNMjUwNDEzMDkwMTI2WhcNMjUwNDE0MDkwMTI2WjAzMTEwLwYDVQQD
Eyg4NDliMjQ3NzhhMGI1MjM5NmY4NDViYTI5NjYxYTgwMjI1MTIxZTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAPVOF8s60lto43o0XcxDJSlt8MB
S6ewjXi6NybTjlNDnNeDL60BwyWhog7CJ29JO/WxAKqIO/y4Wgxtvb1nt0THAB2c
fua0DHoEpf8/fx1DAlq179F9fOGNr15pkfh7meL8gZJMuAAxS+iJMqqE+8lkg4V6
hR+t3ZUrXBWRzN/qEbAfK6dHjXHOJwGd8fDFp56mDllRcpY7p8pBaA59PjlS+9b4
UJBvl8BBN4omcsrQ30MyZBchOy4HpcPtGxWbCuXKaZyXaApdEV6BCUOPeQcREpfJ
qLa7QC5AWc2NgDrK2SgjW2QEcR4zvNdY9YZdu28xXuy9O0PgCNhSUMv4YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISbJHeKC1I5b4RbopZhqAIlEh6cMB8GA1UdIwQY
MBaAFL31txLy5JMsHAMDEtGUpZeIPz1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmZXM0V2TGtreXdjQXdNUzBaU2xsNGdfUFY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9jZTAwNzctYzcwMS00Y2VkLTlkNTMt
NmM1YzM0NTg2ZjZlLzEvdmZXM0V2TGtreXdjQXdNUzBaU2xsNGdfUFY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9jZTAwNzctYzcwMS00Y2VkLTlkNTMtNmM1YzM0NTg2ZjZl
LzEvdmZXM0V2TGtreXdjQXdNUzBaU2xsNGdfUFY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN9DM/AH6
An12HsiXTKa/0KmhYEYwGBFkv8rrBCA6JV6EnhEoMP1tah3m78NcoeFyzI/OiFT5
Ty4meOz2et3HnTNlUUmyqdBdSGMEMkWKThz1BD8np5yYBwqKcgJCJGebDoDUHXIr
GoAWtOtNAB3AklR5eZV5lnZCdMs9o1LUG9AD+nQ/zSGJUDQmeOKZgUEn23iTsCsY
woejNe1sz6+qomuuU2DtSKVTpQnjRxMm1G+sbp9EY+pI7Mry5gNGn7hDI9MNPg6a
6ioGPDbwtULxigR0jvJa4/CReibhwCyR11rkLoDinbm6RvwaQS1wUi2D1KF3VRzG
jXEtSG5sG/hvEQ==
-----END CERTIFICATE-----