Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft
File:                     v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft (raw, json)
Hash identifier:          GunhJH9BuxY9aQhy0SweD/EWy4rwIEcAbrkMRvLjjjU=
Subject key identifier:   C3:D6:12:02:EE:57:2C:F6:DA:B4:5C:03:E0:FB:2D:6C:8C:1A:45:EE
Authority key identifier: BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25
Certificate issuer:       /CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
Certificate serial:       01962DF3A9E9D0B0247F3C596FCACB5DABAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft
Manifest number:          14F4
Signing time:             Sun 13 Apr 2025 07:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:05 +0000
Files and hashes:         1: 1-7RPCOXBfIKW07w2_gfX-l5xjwU.roa (hash: l+CJQac/GH3qcNGwSYOMkKACx6s8h1Uwqg0edh7Y8jc=)
                          2: 6gNZAsVf-wN84JvRq_OcC2fCfZI.roa (hash: bKq5ijI4cHYkiNFIZmWyJ6ZOR6ehBPjiusPq1BV3o9w=)
                          3: MxtTc6BM1OFbDauFqwEhmVMvEFQ.roa (hash: woUQ4mDhOZvLZjoxddbuObbvuZdgyLS+4+TChRS2i6A=)
                          4: kxux6PZN_wALCnv9GHcDUsMWbbE.roa (hash: K/OIfNl/eWd4bOh3PebPr55qq3daVrMSTH+FOwAG9yA=)
                          5: s4AwXqhqtrcDqPKIpmaM34VvuVk.roa (hash: omUzj8bx95orfDmkVMaZXkJzmvX0N8m/6+VDQgcz/84=)
                          6: v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl (hash: a7Kbu6kivZSykoe3V249iI2yZPTLbS4nJ5OEJddHRPw=)
                          7: xhgTHQyXIy450iP62m75oStMlkg.roa (hash: z3oer5qK5pT0D7zvUlqDepBtwAxWfOe3pSOkgZLXdDQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:a9:e9:d0:b0:24:7f:3c:59:6f:ca:cb:5d:ab:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125
        Validity
            Not Before: Apr 13 07:01:05 2025 GMT
            Not After : Apr 14 07:01:05 2025 GMT
        Subject: CN=c3d61202ee572cf6dab45c03e0fb2d6c8c1a45ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ee:d3:bd:f2:05:b1:95:8e:3f:be:b7:92:fe:
                    c4:57:38:e9:82:0f:ac:74:6a:a0:b3:7f:2e:a9:63:
                    48:34:9c:1b:2a:b1:82:7b:e0:78:67:1c:6a:76:68:
                    e2:49:93:3b:40:50:50:4e:e9:20:10:43:33:ed:95:
                    ff:1e:a9:74:bb:ad:b9:74:d5:12:c7:cb:8e:ac:a3:
                    09:75:eb:38:97:3d:8b:91:34:ba:85:64:a8:83:2c:
                    11:63:03:e9:e9:4f:aa:31:15:e9:f3:80:fb:34:c8:
                    c8:e7:c7:81:89:3d:de:0a:b7:72:e3:7a:7f:d3:bb:
                    b8:af:e3:dc:da:47:ce:7b:e0:53:b5:8e:43:3c:b7:
                    61:7f:41:20:33:fa:20:ba:3f:c1:9f:a8:a7:c9:d3:
                    97:53:46:b2:85:c5:54:8d:81:ef:85:31:75:3e:0c:
                    fe:75:d5:50:df:d1:69:53:0b:a4:b4:79:f9:95:62:
                    c7:5e:11:c7:4a:b7:a4:4e:b4:5b:3f:12:37:0c:de:
                    99:ea:e0:2a:bb:44:32:c1:3e:2e:92:86:ba:d4:9a:
                    fd:bd:d8:a2:aa:b9:17:20:31:2f:fb:fa:e7:be:73:
                    70:dc:e5:d1:7e:d0:51:7b:f5:9b:73:99:ea:22:d5:
                    87:a5:70:c4:17:46:64:5f:89:80:61:f1:ed:59:a8:
                    93:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D6:12:02:EE:57:2C:F6:DA:B4:5C:03:E0:FB:2D:6C:8C:1A:45:EE
            X509v3 Authority Key Identifier:
                keyid:BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:3e:02:72:4d:8e:47:68:51:4d:ad:a9:ce:36:9b:3c:b6:66:
         db:ca:3e:3e:9d:ba:86:41:d9:19:10:9b:cc:c8:37:73:88:5f:
         8b:20:b2:2a:c7:09:e6:04:2d:e5:7c:73:0b:9f:e7:ac:28:6b:
         3d:27:d6:45:97:22:b8:74:4c:2b:d1:73:fb:fe:c0:ba:77:17:
         45:74:f7:5e:f0:de:51:c7:d6:31:06:4c:16:4d:e9:6c:9f:e6:
         3f:b6:6e:1c:a0:71:28:9e:a9:e5:d6:69:79:b3:b1:67:f8:34:
         12:bc:0d:78:ff:42:d5:47:18:e9:32:be:78:75:a1:6b:df:68:
         db:aa:ab:d3:ad:f4:19:56:95:0d:0a:43:ee:52:01:7f:b7:b9:
         48:f5:91:57:51:63:86:ab:65:21:5d:57:6b:76:1a:60:fe:f6:
         5e:ec:d5:21:0a:59:47:ab:30:b0:ec:40:38:21:ef:5f:36:e3:
         0e:d2:d3:dd:7d:54:8c:9e:7a:1b:74:5a:8b:b4:5e:e0:78:28:
         d5:73:d8:84:78:57:d6:68:4b:63:00:a1:e2:91:d8:a8:90:34:
         b5:d7:d8:02:57:78:08:35:31:70:b2:6c:49:b1:27:3b:d2:55:
         62:0d:f5:4e:02:47:6b:33:e7:03:81:f5:fd:42:f5:67:b0:45:
         0b:27:b0:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt86np0LAkfzxZb8rLXauqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYzQ3MGU5YjU4ZTU1N2VhOGMxZGJlZGFlYjljNmE1ZmM0
NTUxMjUwHhcNMjUwNDEzMDcwMTA1WhcNMjUwNDE0MDcwMTA1WjAzMTEwLwYDVQQD
EyhjM2Q2MTIwMmVlNTcyY2Y2ZGFiNDVjMDNlMGZiMmQ2YzhjMWE0NWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO7TvfIFsZWOP763kv7EVzjpgg+s
dGqgs38uqWNINJwbKrGCe+B4ZxxqdmjiSZM7QFBQTukgEEMz7ZX/Hql0u625dNUS
x8uOrKMJdes4lz2LkTS6hWSogywRYwPp6U+qMRXp84D7NMjI58eBiT3eCrdy43p/
07u4r+Pc2kfOe+BTtY5DPLdhf0EgM/oguj/Bn6inydOXU0ayhcVUjYHvhTF1Pgz+
ddVQ39FpUwuktHn5lWLHXhHHSrekTrRbPxI3DN6Z6uAqu0QywT4ukoa61Jr9vdii
qrkXIDEv+/rnvnNw3OXRftBRe/Wbc5nqItWHpXDEF0ZkX4mAYfHtWaiTWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPWEgLuVyz22rRcA+D7LWyMGkXuMB8GA1UdIwQY
MBaAFL/EcOm1jlV+qMHb7a65xqX8RVElMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjhSdzZiV09WWDZvd2R2dHJybkdwZnhGVVNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yN2IzOWItMDQ0OS00YzY0LWJhNzkt
YTJhYTY1NDBmODc1LzEvdjhSdzZiV09WWDZvd2R2dHJybkdwZnhGVVNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8yN2IzOWItMDQ0OS00YzY0LWJhNzktYTJhYTY1NDBmODc1
LzEvdjhSdzZiV09WWDZvd2R2dHJybkdwZnhGVVNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhj4Cck2O
R2hRTa2pzjabPLZm28o+Pp26hkHZGRCbzMg3c4hfiyCyKscJ5gQt5XxzC5/nrChr
PSfWRZciuHRMK9Fz+/7AuncXRXT3XvDeUcfWMQZMFk3pbJ/mP7ZuHKBxKJ6p5dZp
ebOxZ/g0ErwNeP9C1UcY6TK+eHWha99o26qr0630GVaVDQpD7lIBf7e5SPWRV1Fj
hqtlIV1Xa3YaYP72XuzVIQpZR6swsOxAOCHvXzbjDtLT3X1UjJ56G3Rai7Re4Hgo
1XPYhHhX1mhLYwCh4pHYqJA0tdfYAld4CDUxcLJsSbEnO9JVYg31TgJHazPnA4H1
/UL1Z7BFCyewew==
-----END CERTIFICATE-----