Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
File:                     v_0PCtnHhAlsWg-56M9cLwRAQTs.mft (raw, json)
Hash identifier:          O472ArFadxBL+W9/NS3FelYVLCc67gB2jqv22mEDiK0=
Subject key identifier:   0A:E7:FD:99:5C:FD:41:28:E8:EF:5E:5B:3A:1A:A2:EF:57:58:5E:4F
Authority key identifier: BF:FD:0F:0A:D9:C7:84:09:6C:5A:0F:B9:E8:CF:5C:2F:04:40:41:3B
Certificate issuer:       /CN=bffd0f0ad9c784096c5a0fb9e8cf5c2f0440413b
Certificate serial:       01962F3D3D1E228C5D4550D9E5F53A7D259B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
Manifest number:          04C6
Signing time:             Sun 13 Apr 2025 13:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:04 +0000
Files and hashes:         1: Z2OOQN_xvDinvSk0PjmWHnzGsnE.roa (hash: +MwSX4X4GjxkZcy+4f+CH7/gMqlsDpwDxxCncAgans4=)
                          2: v_0PCtnHhAlsWg-56M9cLwRAQTs.crl (hash: Dp7rXHE0bVWn+EhCqyog9wgRdH0PJysxYs/EJo5bIhU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:3d:1e:22:8c:5d:45:50:d9:e5:f5:3a:7d:25:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bffd0f0ad9c784096c5a0fb9e8cf5c2f0440413b
        Validity
            Not Before: Apr 13 13:01:04 2025 GMT
            Not After : Apr 14 13:01:04 2025 GMT
        Subject: CN=0ae7fd995cfd4128e8ef5e5b3a1aa2ef57585e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7a:12:01:b7:6c:72:fc:fa:a5:60:75:00:e0:
                    bf:8e:05:e7:1f:ca:1c:b9:cd:c3:3a:1b:5e:b6:53:
                    4a:f4:82:9f:1e:73:35:ad:7f:8f:91:ae:a2:d4:d3:
                    09:2f:41:2a:01:52:ec:4a:98:1e:d5:d4:24:71:93:
                    f5:94:05:08:b1:59:55:9a:41:9c:3d:f4:9c:ac:4e:
                    ee:2a:e2:82:5f:a1:e8:da:96:c1:ba:50:43:b7:6a:
                    cf:8d:90:6f:d5:99:1f:01:48:26:a8:4c:79:ff:15:
                    4d:54:6d:1c:f9:7b:a4:37:65:9c:f1:fc:06:75:c3:
                    5f:82:23:f7:d0:ab:c1:43:d7:cf:ed:de:3d:f4:90:
                    52:f2:2a:76:4f:2b:54:53:06:4d:65:ab:c4:69:90:
                    58:3e:e4:bf:21:a8:5d:1a:ef:0d:fb:98:98:f3:e0:
                    ad:47:07:c5:58:0f:7e:f2:e1:e5:61:86:a3:61:8e:
                    28:b2:b7:a4:15:0f:16:1c:d3:47:ff:d4:3d:10:21:
                    e4:a6:41:b3:7c:50:e3:6d:9f:f4:c9:57:7e:14:2c:
                    5d:a2:38:44:3f:9f:57:72:17:23:aa:11:d9:6e:e1:
                    3a:f8:20:2f:ec:62:96:02:24:74:14:70:c7:5d:3a:
                    0e:d5:a3:fe:84:a6:ad:9f:53:94:9a:64:8e:9a:14:
                    a3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E7:FD:99:5C:FD:41:28:E8:EF:5E:5B:3A:1A:A2:EF:57:58:5E:4F
            X509v3 Authority Key Identifier:
                keyid:BF:FD:0F:0A:D9:C7:84:09:6C:5A:0F:B9:E8:CF:5C:2F:04:40:41:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:73:80:f9:fd:86:bf:6c:a1:77:e0:6f:7e:66:bd:39:bd:5d:
         c6:da:7a:8c:a1:c3:77:be:20:d7:81:ed:76:d3:94:da:12:94:
         78:ee:26:2c:3f:94:e3:44:32:6e:7f:01:85:51:02:b4:db:31:
         4f:29:7b:e6:fc:00:0b:53:e8:57:93:0b:3f:44:d1:d4:a1:38:
         02:6f:aa:86:30:ad:38:e3:f7:50:89:63:25:da:88:dc:34:17:
         d7:ff:17:b9:ef:7d:d9:91:3b:4b:62:5b:16:97:8c:fe:de:94:
         99:25:d5:25:eb:17:58:31:72:cc:27:fe:94:42:8d:a5:e8:c7:
         a4:f3:c0:85:51:ec:2e:17:44:90:61:aa:46:3a:79:81:ea:c5:
         84:28:c6:9d:a6:d6:f5:a2:3e:32:22:d1:24:73:2c:b5:9c:c4:
         ad:2f:c8:ce:1d:dd:62:79:b9:0f:4c:26:78:bf:29:81:29:cd:
         c6:ce:86:19:04:3c:30:3c:8e:61:3d:5f:d8:25:a6:51:50:ef:
         76:09:ce:e5:85:34:9f:32:c4:72:8a:72:44:b4:bc:51:92:b5:
         1d:ce:0b:f7:07:04:5c:10:2c:8f:de:92:8b:79:5e:7b:53:79:
         87:f6:23:23:79:3e:78:0a:36:a3:66:07:c0:00:33:9b:7a:21:
         76:31:97:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPT0eIoxdRVDZ5fU6fSWbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZmQwZjBhZDljNzg0MDk2YzVhMGZiOWU4Y2Y1YzJmMDQ0
MDQxM2IwHhcNMjUwNDEzMTMwMTA0WhcNMjUwNDE0MTMwMTA0WjAzMTEwLwYDVQQD
EygwYWU3ZmQ5OTVjZmQ0MTI4ZThlZjVlNWIzYTFhYTJlZjU3NTg1ZTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXoSAbdscvz6pWB1AOC/jgXnH8oc
uc3DOhtetlNK9IKfHnM1rX+Pka6i1NMJL0EqAVLsSpge1dQkcZP1lAUIsVlVmkGc
PfScrE7uKuKCX6Ho2pbBulBDt2rPjZBv1ZkfAUgmqEx5/xVNVG0c+XukN2Wc8fwG
dcNfgiP30KvBQ9fP7d499JBS8ip2TytUUwZNZavEaZBYPuS/IahdGu8N+5iY8+Ct
RwfFWA9+8uHlYYajYY4osrekFQ8WHNNH/9Q9ECHkpkGzfFDjbZ/0yVd+FCxdojhE
P59XchcjqhHZbuE6+CAv7GKWAiR0FHDHXToO1aP+hKatn1OUmmSOmhSjCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArn/Zlc/UEo6O9eWzoaou9XWF5PMB8GA1UdIwQY
MBaAFL/9DwrZx4QJbFoPuejPXC8EQEE7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdl8wUEN0bkhoQWxzV2ctNTZNOWNMd1JBUVRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lYWVhNTktOTE5ZC00MTM1LTliZGUt
NmRjZjBjOTNjYmRiLzEvdl8wUEN0bkhoQWxzV2ctNTZNOWNMd1JBUVRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lYWVhNTktOTE5ZC00MTM1LTliZGUtNmRjZjBjOTNjYmRi
LzEvdl8wUEN0bkhoQWxzV2ctNTZNOWNMd1JBUVRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhHOA+f2G
v2yhd+Bvfma9Ob1dxtp6jKHDd74g14HtdtOU2hKUeO4mLD+U40Qybn8BhVECtNsx
Tyl75vwAC1PoV5MLP0TR1KE4Am+qhjCtOOP3UIljJdqI3DQX1/8Xue992ZE7S2Jb
FpeM/t6UmSXVJesXWDFyzCf+lEKNpejHpPPAhVHsLhdEkGGqRjp5gerFhCjGnabW
9aI+MiLRJHMstZzErS/Izh3dYnm5D0wmeL8pgSnNxs6GGQQ8MDyOYT1f2CWmUVDv
dgnO5YU0nzLEcopyRLS8UZK1Hc4L9wcEXBAsj96Si3lee1N5h/YjI3k+eAo2o2YH
wAAzm3ohdjGXTg==
-----END CERTIFICATE-----