Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
File:                     bP02Bzbx-myXcPy0i-WUvmCeWz4.mft (raw, json)
Hash identifier:          ibQpRMaQ+Heggank4J8Ik864IE9Rvvwzn2roqjQ6lH0=
Subject key identifier:   98:B5:14:F5:5A:CA:E0:7C:D3:E1:C6:BA:06:6A:04:01:5E:F1:5B:0D
Authority key identifier: 6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E
Certificate issuer:       /CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
Certificate serial:       01962E99127AEF5CE386FE2154C1265E2C29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:45 +0000
Files and hashes:         1: DC68jaJzKs4sWOyzS3O5wTgtZNE.roa (hash: 1O1Vjs/w38AlpgFvrtScFHTsBaANSIlvVfPi7Rtab9k=)
                          2: Pp9dfiM_MT5SdF1T82CtQd0OZJw.roa (hash: h3fdCt6Okubry0k+FISuRK++uR3zvuFiodlZnV6ykfI=)
                          3: bP02Bzbx-myXcPy0i-WUvmCeWz4.crl (hash: faPtA+kAW2F9zfl7c8sKBJwh4ujnIgb8MxmRfp+Xw4M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:12:7a:ef:5c:e3:86:fe:21:54:c1:26:5e:2c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
        Validity
            Not Before: Apr 13 10:01:45 2025 GMT
            Not After : Apr 14 10:01:45 2025 GMT
        Subject: CN=98b514f55acae07cd3e1c6ba066a04015ef15b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7a:2c:4f:5c:62:5a:ea:82:20:00:31:ad:34:
                    9d:46:32:94:e1:70:af:da:6c:a0:be:1f:ac:40:83:
                    38:2f:3f:c6:5c:f4:d7:ae:f9:93:32:7c:a8:00:51:
                    7c:2f:9d:94:cf:7b:b1:39:35:8c:73:73:ae:e1:4d:
                    17:9f:8d:81:80:9a:b6:f3:7b:34:75:4a:b3:72:a4:
                    b5:62:d4:33:35:2e:8a:34:b8:e2:04:14:34:e7:f2:
                    79:6c:ff:6b:ee:da:98:ad:e0:7a:02:20:3b:03:cf:
                    ca:0c:60:90:11:01:d3:0a:00:12:26:0e:8e:11:34:
                    dc:21:a3:ee:dd:fb:16:af:3b:d2:d9:4d:92:e4:5f:
                    fc:d1:d6:68:82:c9:72:1e:36:73:c1:af:30:d4:eb:
                    0b:65:1d:d6:b6:e3:f9:94:2e:6e:d6:27:88:df:23:
                    83:c5:35:0b:1b:d3:68:8d:c5:33:07:a6:f4:58:d9:
                    0a:11:7d:25:7e:81:74:88:46:e8:82:60:a9:ee:92:
                    c8:ae:07:b6:5f:03:e4:a1:8a:da:60:6d:bc:0c:29:
                    5d:d7:a5:d9:e4:5b:30:01:82:58:38:31:e0:bd:55:
                    19:29:87:9e:fb:f1:49:64:a9:c9:33:e5:76:9e:ab:
                    78:99:44:90:1c:3b:d0:ba:8f:c0:85:aa:04:35:ef:
                    2c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B5:14:F5:5A:CA:E0:7C:D3:E1:C6:BA:06:6A:04:01:5E:F1:5B:0D
            X509v3 Authority Key Identifier:
                keyid:6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:95:60:9a:5e:43:ab:bb:93:d7:ab:e8:1c:58:71:73:04:f6:
         dd:2b:7c:e7:06:5e:58:42:9e:d3:be:53:eb:0a:24:8e:23:7b:
         7b:0c:4a:63:53:c4:8f:04:16:22:e5:d5:3a:9c:bd:73:ae:e5:
         4f:bd:16:0b:36:9e:b3:5f:92:fd:00:1c:57:06:17:e9:69:d9:
         5f:19:22:34:fe:57:06:7f:a0:40:07:b9:1f:e3:23:99:8b:b8:
         54:13:58:ab:1a:e2:98:a5:a0:c9:9e:87:8d:46:e5:63:51:a2:
         8f:a3:59:bd:bf:23:3e:ee:cd:5f:9b:95:5f:8a:f9:39:c6:e7:
         46:31:50:ac:bb:71:b6:ce:4d:db:fc:2b:15:60:e8:ce:30:12:
         be:de:da:7d:ae:74:99:00:4a:ac:dd:35:6d:ad:25:6a:83:e3:
         36:12:62:01:c3:05:44:76:e3:e2:15:88:25:89:c9:9a:89:11:
         5e:27:c6:fb:64:34:48:af:d1:d2:ff:d8:54:52:5f:b4:f8:b4:
         ec:13:17:01:ac:a1:28:a7:5c:40:d1:a5:1c:5e:df:3b:b6:ea:
         ec:ce:a8:8d:0e:c7:69:8c:35:f6:2b:e5:35:81:27:c4:11:52:
         1b:dd:14:9c:bf:d4:eb:ad:60:40:6c:14:36:ff:fc:ee:e5:e8:
         e3:fd:f1:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumRJ671zjhv4hVMEmXiwpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZmQzNjA3MzZmMWZhNmM5NzcwZmNiNDhiZTU5NGJlNjA5
ZTViM2UwHhcNMjUwNDEzMTAwMTQ1WhcNMjUwNDE0MTAwMTQ1WjAzMTEwLwYDVQQD
Eyg5OGI1MTRmNTVhY2FlMDdjZDNlMWM2YmEwNjZhMDQwMTVlZjE1YjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHosT1xiWuqCIAAxrTSdRjKU4XCv
2mygvh+sQIM4Lz/GXPTXrvmTMnyoAFF8L52Uz3uxOTWMc3Ou4U0Xn42BgJq283s0
dUqzcqS1YtQzNS6KNLjiBBQ05/J5bP9r7tqYreB6AiA7A8/KDGCQEQHTCgASJg6O
ETTcIaPu3fsWrzvS2U2S5F/80dZogslyHjZzwa8w1OsLZR3WtuP5lC5u1ieI3yOD
xTULG9NojcUzB6b0WNkKEX0lfoF0iEbogmCp7pLIrge2XwPkoYraYG28DCld16XZ
5FswAYJYODHgvVUZKYee+/FJZKnJM+V2nqt4mUSQHDvQuo/AhaoENe8sfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJi1FPVayuB80+HGugZqBAFe8VsNMB8GA1UdIwQY
MBaAFGz9Ngc28fpsl3D8tIvllL5gnls+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlAwMkJ6YngtbXlYY1B5MGktV1V2bUNlV3o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8zNDRlMmMtMWM1Ni00M2FiLTgxMDgt
ZWFmNjhiNTllNTk5LzEvYlAwMkJ6YngtbXlYY1B5MGktV1V2bUNlV3o0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8zNDRlMmMtMWM1Ni00M2FiLTgxMDgtZWFmNjhiNTllNTk5
LzEvYlAwMkJ6YngtbXlYY1B5MGktV1V2bUNlV3o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVpVgml5D
q7uT16voHFhxcwT23St85wZeWEKe075T6wokjiN7ewxKY1PEjwQWIuXVOpy9c67l
T70WCzaes1+S/QAcVwYX6WnZXxkiNP5XBn+gQAe5H+MjmYu4VBNYqxrimKWgyZ6H
jUblY1Gij6NZvb8jPu7NX5uVX4r5OcbnRjFQrLtxts5N2/wrFWDozjASvt7afa50
mQBKrN01ba0laoPjNhJiAcMFRHbj4hWIJYnJmokRXifG+2Q0SK/R0v/YVFJftPi0
7BMXAayhKKdcQNGlHF7fO7bq7M6ojQ7HaYw19ivlNYEnxBFSG90UnL/U661gQGwU
Nv/87uXo4/3xhg==
-----END CERTIFICATE-----