Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft
File:                     vW-jeiSDz1efqGJQEZrAEzR1qtg.mft (raw, json)
Hash identifier:          QoeHFxRz0NgGXHyacylgsDRuKpdwaOjLdX7ZXgji4xA=
Subject key identifier:   BF:47:2D:11:C2:93:69:16:FE:6E:F0:66:3A:80:8F:FB:9E:7A:FC:14
Authority key identifier: BD:6F:A3:7A:24:83:CF:57:9F:A8:62:50:11:9A:C0:13:34:75:AA:D8
Certificate issuer:       /CN=bd6fa37a2483cf579fa86250119ac0133475aad8
Certificate serial:       01962E61AB567CE20606590BFC5E592F0DE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft
Manifest number:          0DE9
Signing time:             Sun 13 Apr 2025 09:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:14 +0000
Files and hashes:         1: 0YW6ttYVKOeqcJ5zyrGvaeUR2pw.roa (hash: NFpGYrDr9CdBDfnq5tg4cuAB0v9WLl3xgZZRL1xqhAY=)
                          2: 33xoh2Mhe12KC-0rM7-N2OC8juY.roa (hash: WHxjyT3+EtMIryAC/JwnPc9urARuQ9qJ9/o50uStOZk=)
                          3: QPyAJIUON4G4tX46dieXV6CSDPw.roa (hash: mWn0PQCuoeDc/wLK7pLB85zcCXi6wOqEnTUyXmjEFZw=)
                          4: vW-jeiSDz1efqGJQEZrAEzR1qtg.crl (hash: SPqF9VD7IfvL4GvqCfv52NjIrZ8y5JmipPOleG9Rvqg=)
                          5: ytHgJTSko6lE6q80ot6eCy_M1Uw.roa (hash: pUNQ4etbz9JSqETlm90fA/PxT0T+M8EEPtzIOUXQbV4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ab:56:7c:e2:06:06:59:0b:fc:5e:59:2f:0d:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd6fa37a2483cf579fa86250119ac0133475aad8
        Validity
            Not Before: Apr 13 09:01:14 2025 GMT
            Not After : Apr 14 09:01:14 2025 GMT
        Subject: CN=bf472d11c2936916fe6ef0663a808ffb9e7afc14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:84:60:bb:49:38:0c:1f:4a:f1:2e:ed:74:e5:
                    33:13:37:74:d0:5b:15:b8:20:d0:52:cb:41:b2:8f:
                    02:70:91:ef:9b:9a:89:55:db:e5:71:27:bc:a4:05:
                    8a:33:a1:28:ad:fb:c3:4c:da:8f:d6:37:d9:ce:53:
                    64:07:2c:12:13:0b:15:b8:4a:c0:05:0c:a8:0d:58:
                    c3:5d:53:95:ff:50:12:51:46:40:c0:ab:32:cc:69:
                    5b:4a:b9:11:0a:c1:39:80:a9:a5:af:50:66:09:a9:
                    c8:9b:96:9c:6b:2c:f8:db:c7:ee:30:ac:56:28:aa:
                    a7:a7:82:ef:ca:6f:96:13:02:30:d7:4b:77:7f:ab:
                    9b:7c:62:2c:b5:dd:7f:b8:6b:5c:ea:a8:44:df:45:
                    ac:19:bf:96:ab:3d:dd:77:a3:db:73:2e:6e:85:98:
                    6c:95:69:69:03:64:60:de:a9:6a:4d:08:78:52:d2:
                    7e:6b:0b:73:87:3b:01:9f:c6:8f:80:66:86:19:a7:
                    96:06:e8:7f:4f:2b:45:7e:ac:58:7a:a9:21:40:d5:
                    d5:08:98:39:6d:3d:83:8a:29:0e:3e:d2:f8:cc:06:
                    7b:e2:1b:6d:6e:33:5f:f2:e9:03:33:44:86:7c:6e:
                    6e:bc:9b:d9:df:4d:e0:92:85:d4:4b:c2:be:ba:4e:
                    b3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:47:2D:11:C2:93:69:16:FE:6E:F0:66:3A:80:8F:FB:9E:7A:FC:14
            X509v3 Authority Key Identifier:
                keyid:BD:6F:A3:7A:24:83:CF:57:9F:A8:62:50:11:9A:C0:13:34:75:AA:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vW-jeiSDz1efqGJQEZrAEzR1qtg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e3ada2-c9df-44e2-8b0f-8ff1611e8bb4/1/vW-jeiSDz1efqGJQEZrAEzR1qtg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:98:c0:b2:2f:81:22:24:90:f3:de:c1:6d:6c:0c:4a:74:2f:
         de:dd:c5:4e:a2:9b:ac:5e:b6:f4:59:36:2c:22:42:74:58:bc:
         0c:fc:5b:84:dd:52:c9:2f:0d:8c:c0:ea:4c:90:83:fe:c7:43:
         c6:f1:d0:75:4c:25:9c:40:99:7b:15:39:2d:6e:67:10:83:62:
         f3:60:c9:12:6c:13:73:e5:7f:3c:df:12:87:60:c5:62:fc:92:
         f0:b1:6f:6b:00:4f:92:67:3a:36:ce:bc:58:61:fe:50:36:4d:
         bf:10:4a:5c:4c:a0:de:7c:25:b8:7d:9f:74:ef:c5:d8:31:72:
         c7:c9:92:95:c5:ea:ab:52:ea:c2:0b:a9:a3:98:56:73:fb:43:
         bd:30:3f:77:e0:ef:cd:42:eb:19:5c:9b:64:5d:41:8c:e6:af:
         74:e2:e4:bb:43:6d:14:2c:cc:ee:cc:40:ed:fa:9f:04:47:86:
         21:ae:25:db:0d:e3:3f:f2:0d:00:b9:e6:cd:4f:a2:61:bd:7e:
         15:53:9f:6b:47:1b:d4:ba:6a:ad:de:ab:65:08:eb:dc:b5:63:
         05:f1:82:41:8f:53:64:6f:7f:c6:20:b0:35:6e:ed:fc:2f:31:
         ef:78:b1:81:2d:26:29:c8:eb:c9:df:a7:d8:8b:3c:45:1d:be:
         81:d0:a8:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYatWfOIGBlkL/F5ZLw3mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNmZhMzdhMjQ4M2NmNTc5ZmE4NjI1MDExOWFjMDEzMzQ3
NWFhZDgwHhcNMjUwNDEzMDkwMTE0WhcNMjUwNDE0MDkwMTE0WjAzMTEwLwYDVQQD
EyhiZjQ3MmQxMWMyOTM2OTE2ZmU2ZWYwNjYzYTgwOGZmYjllN2FmYzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4Rgu0k4DB9K8S7tdOUzEzd00FsV
uCDQUstBso8CcJHvm5qJVdvlcSe8pAWKM6EorfvDTNqP1jfZzlNkBywSEwsVuErA
BQyoDVjDXVOV/1ASUUZAwKsyzGlbSrkRCsE5gKmlr1BmCanIm5acayz428fuMKxW
KKqnp4Lvym+WEwIw10t3f6ubfGIstd1/uGtc6qhE30WsGb+Wqz3dd6Pbcy5uhZhs
lWlpA2Rg3qlqTQh4UtJ+awtzhzsBn8aPgGaGGaeWBuh/TytFfqxYeqkhQNXVCJg5
bT2DiikOPtL4zAZ74httbjNf8ukDM0SGfG5uvJvZ303gkoXUS8K+uk6zrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL9HLRHCk2kW/m7wZjqAj/ueevwUMB8GA1UdIwQY
MBaAFL1vo3okg89Xn6hiUBGawBM0darYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlctamVpU0R6MWVmcUdKUUVackFFelIxcXRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9lM2FkYTItYzlkZi00NGUyLThiMGYt
OGZmMTYxMWU4YmI0LzEvdlctamVpU0R6MWVmcUdKUUVackFFelIxcXRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9lM2FkYTItYzlkZi00NGUyLThiMGYtOGZmMTYxMWU4YmI0
LzEvdlctamVpU0R6MWVmcUdKUUVackFFelIxcXRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmZjAsi+B
IiSQ897BbWwMSnQv3t3FTqKbrF629Fk2LCJCdFi8DPxbhN1SyS8NjMDqTJCD/sdD
xvHQdUwlnECZexU5LW5nEINi82DJEmwTc+V/PN8Sh2DFYvyS8LFvawBPkmc6Ns68
WGH+UDZNvxBKXEyg3nwluH2fdO/F2DFyx8mSlcXqq1Lqwgupo5hWc/tDvTA/d+Dv
zULrGVybZF1BjOavdOLku0NtFCzM7sxA7fqfBEeGIa4l2w3jP/INALnmzU+iYb1+
FVOfa0cb1Lpqrd6rZQjr3LVjBfGCQY9TZG9/xiCwNW7t/C8x73ixgS0mKcjryd+n
2Is8RR2+gdCoMg==
-----END CERTIFICATE-----