Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
File:                     vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft (raw, json)
Hash identifier:          cz/QgWXEbatsQ5p4Q41MHxqwthl1mdc2H9bernrMYxU=
Subject key identifier:   3A:66:4A:CA:2C:BA:9B:FF:60:47:C3:01:5F:BA:84:B1:C4:3C:7C:C3
Authority key identifier: BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43
Certificate issuer:       /CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
Certificate serial:       01962ECFBE3E62B66A03A3D1D279FC6B4D9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft
Manifest number:          090F
Signing time:             Sun 13 Apr 2025 11:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:28 +0000
Files and hashes:         1: 3OCOSwCDa3y9iqu0OCylZw-JsZ0.roa (hash: cJbssAnGbz9pvbgU1PNdJ9XA2exd9SjijPrifOZ6Kb0=)
                          2: vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl (hash: K0KqwO2pa7KHVLresxJGymDlaEG52gQTDKh8ZgaONao=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:be:3e:62:b6:6a:03:a3:d1:d2:79:fc:6b:4d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd2a6a2232c439f04620c82b4d7e14e9df721143
        Validity
            Not Before: Apr 13 11:01:28 2025 GMT
            Not After : Apr 14 11:01:28 2025 GMT
        Subject: CN=3a664aca2cba9bff6047c3015fba84b1c43c7cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8c:e4:d5:25:f2:cc:af:6c:c5:9e:8f:f2:aa:
                    8d:56:6f:2b:99:80:9c:14:58:a8:47:95:10:f7:60:
                    e2:d1:d1:d3:93:f3:dd:43:94:b7:48:33:5c:35:75:
                    b6:3a:74:2f:88:1c:f4:6c:e7:5b:7f:c5:2b:52:40:
                    b5:96:68:52:82:53:75:aa:9f:7d:26:35:d6:53:9c:
                    c1:1b:1d:90:1d:83:ad:6d:6c:19:ec:53:3a:a1:e0:
                    1e:ed:c6:25:c6:4c:0e:f9:84:e3:6d:24:25:14:bd:
                    b3:ef:43:ff:60:8d:c0:84:98:ae:22:15:90:71:2e:
                    83:96:25:0a:50:71:2e:b1:92:b6:c5:0d:88:0d:4b:
                    e3:01:fc:ed:f4:2f:fd:c7:ff:b8:42:42:95:05:84:
                    c7:56:35:a5:3c:ff:3b:3d:8d:e4:5e:88:d7:2e:62:
                    a6:a6:b9:82:27:42:c5:64:3c:ee:24:94:e7:1a:29:
                    af:47:52:f7:0f:9d:0e:93:23:45:78:55:20:88:ab:
                    e9:63:13:f4:d0:ea:c2:95:e3:86:88:a0:20:ef:6c:
                    08:45:5e:7a:57:a4:1f:1a:a7:75:51:b3:f8:7b:40:
                    c2:17:a5:a6:4d:a4:b9:23:9c:ad:b2:89:8d:48:d1:
                    4c:36:a9:38:c8:33:99:0a:a0:4f:23:18:9d:c8:ce:
                    b1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:66:4A:CA:2C:BA:9B:FF:60:47:C3:01:5F:BA:84:B1:C4:3C:7C:C3
            X509v3 Authority Key Identifier:
                keyid:BD:2A:6A:22:32:C4:39:F0:46:20:C8:2B:4D:7E:14:E9:DF:72:11:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSpqIjLEOfBGIMgrTX4U6d9yEUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6afd60-83e8-423d-878b-909b6ab85ee9/1/vSpqIjLEOfBGIMgrTX4U6d9yEUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:3f:5b:e3:a3:59:d1:41:73:83:b7:32:13:b0:36:8f:e2:6e:
         90:34:3e:16:25:12:2a:e6:22:98:9b:21:34:10:ee:c6:f2:ed:
         11:39:d3:2a:80:d0:1c:56:9f:2c:fb:6d:fc:a2:80:af:ba:6d:
         fc:a5:1f:71:77:4f:6f:5f:ac:95:09:9a:34:19:7c:00:91:18:
         1f:ed:8e:5e:b0:b1:0b:22:48:93:47:09:95:10:61:4c:df:ce:
         c5:fb:42:9f:56:4b:91:8e:5f:61:27:a0:95:97:c6:b8:67:4f:
         5f:b6:37:6e:e0:41:eb:15:5e:13:18:55:32:a7:91:1a:06:5c:
         ce:81:7b:54:34:6b:e5:02:17:7e:f8:8d:7c:77:bc:49:1a:c9:
         fe:ba:e8:b2:9f:39:5d:f0:91:33:0b:03:fd:8d:5f:f4:2a:fa:
         0d:93:3a:1b:ee:8f:b3:ba:cc:67:a8:00:be:b8:2c:a2:59:66:
         67:87:e0:12:a2:74:ef:17:5f:f0:5a:cd:c7:d3:6d:0c:a6:59:
         37:d0:b2:e4:ad:dc:b0:11:40:fc:9c:66:03:7b:ba:1e:19:18:
         8a:bd:31:41:3b:46:72:d7:53:25:ea:68:67:d2:5e:b6:ed:d0:
         4c:10:f3:b0:35:d9:4d:67:2e:c3:cd:6a:91:4b:09:8e:28:9a:
         10:0f:06:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz74+YrZqA6PR0nn8a02aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMmE2YTIyMzJjNDM5ZjA0NjIwYzgyYjRkN2UxNGU5ZGY3
MjExNDMwHhcNMjUwNDEzMTEwMTI4WhcNMjUwNDE0MTEwMTI4WjAzMTEwLwYDVQQD
EygzYTY2NGFjYTJjYmE5YmZmNjA0N2MzMDE1ZmJhODRiMWM0M2M3Y2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoozk1SXyzK9sxZ6P8qqNVm8rmYCc
FFioR5UQ92Di0dHTk/PdQ5S3SDNcNXW2OnQviBz0bOdbf8UrUkC1lmhSglN1qp99
JjXWU5zBGx2QHYOtbWwZ7FM6oeAe7cYlxkwO+YTjbSQlFL2z70P/YI3AhJiuIhWQ
cS6DliUKUHEusZK2xQ2IDUvjAfzt9C/9x/+4QkKVBYTHVjWlPP87PY3kXojXLmKm
prmCJ0LFZDzuJJTnGimvR1L3D50OkyNFeFUgiKvpYxP00OrCleOGiKAg72wIRV56
V6QfGqd1UbP4e0DCF6WmTaS5I5ytsomNSNFMNqk4yDOZCqBPIxidyM6xQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpmSsosupv/YEfDAV+6hLHEPHzDMB8GA1UdIwQY
MBaAFL0qaiIyxDnwRiDIK01+FOnfchFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlNwcUlqTEVPZkJHSU1nclRYNFU2ZDl5RVVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi82YWZkNjAtODNlOC00MjNkLTg3OGIt
OTA5YjZhYjg1ZWU5LzEvdlNwcUlqTEVPZkJHSU1nclRYNFU2ZDl5RVVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi82YWZkNjAtODNlOC00MjNkLTg3OGItOTA5YjZhYjg1ZWU5
LzEvdlNwcUlqTEVPZkJHSU1nclRYNFU2ZDl5RVVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHj9b46NZ
0UFzg7cyE7A2j+JukDQ+FiUSKuYimJshNBDuxvLtETnTKoDQHFafLPtt/KKAr7pt
/KUfcXdPb1+slQmaNBl8AJEYH+2OXrCxCyJIk0cJlRBhTN/OxftCn1ZLkY5fYSeg
lZfGuGdPX7Y3buBB6xVeExhVMqeRGgZczoF7VDRr5QIXfviNfHe8SRrJ/rrosp85
XfCRMwsD/Y1f9Cr6DZM6G+6Ps7rMZ6gAvrgsollmZ4fgEqJ07xdf8FrNx9NtDKZZ
N9Cy5K3csBFA/JxmA3u6HhkYir0xQTtGctdTJepoZ9Jetu3QTBDzsDXZTWcuw81q
kUsJjiiaEA8GBQ==
-----END CERTIFICATE-----