Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
File:                     klbbNIe0xbrLMAF3BXzzF0z3dHc.mft (raw, json)
Hash identifier:          oO7XVxNCzg86sJAystxlBVpwQjahCK8CPFUjKTAVNaw=
Subject key identifier:   20:9E:FA:CF:CB:41:F1:A6:64:2E:12:DE:21:EA:BD:2B:F0:D0:B7:AA
Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
Certificate issuer:       /CN=9256db3487b4c5bacb300177057cf3174cf77477
Certificate serial:       01962E61C32CAC07241DCC3ACE020FFC81F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:20 +0000
Files and hashes:         1: Z3X9DsT4VAKW7YkBTMn0rXGuV2w.roa (hash: 4/S1oXOwwM9zeKkXcanc5Gx3gZZLVgK6WEWw0gjjXXA=)
                          2: evv1AEwBABySsTk3nBF2LjzybHU.roa (hash: kJn/dllwz1lruGXWCmiNDhy21/mDcgsGEnqSuWfi9xM=)
                          3: klbbNIe0xbrLMAF3BXzzF0z3dHc.crl (hash: ckz9J2Gxg0Bxo64LB4waUrH33eX2UfivlDC8IA3xE74=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:c3:2c:ac:07:24:1d:cc:3a:ce:02:0f:fc:81:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477
        Validity
            Not Before: Apr 13 09:01:20 2025 GMT
            Not After : Apr 14 09:01:20 2025 GMT
        Subject: CN=209efacfcb41f1a6642e12de21eabd2bf0d0b7aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5e:02:e5:ed:c6:ee:05:b6:a0:4e:22:37:83:
                    2e:9b:b9:8a:ef:62:f9:83:4e:c9:62:62:62:cb:51:
                    1a:a0:41:d8:92:a0:eb:4b:7b:2a:75:6d:36:ff:f2:
                    6d:c5:fc:0c:41:37:86:6d:2f:ad:b4:77:30:89:16:
                    e7:c3:a6:0b:4a:e9:95:5b:cb:fa:bf:14:a1:9b:d6:
                    11:ea:c1:c9:55:12:0a:6b:14:d5:4a:2d:ff:0d:b0:
                    12:f8:4b:b1:50:bb:27:7e:f1:86:f3:fe:45:47:21:
                    79:2c:be:9b:03:7c:b4:a8:6e:fc:fa:61:b5:a3:1f:
                    cc:57:17:bb:30:92:e0:9b:38:da:90:e2:12:62:9f:
                    2f:de:64:e2:04:8e:e0:6c:b6:d1:b1:00:18:20:4b:
                    06:3c:02:b1:4d:49:c3:7f:31:2b:07:2b:17:50:50:
                    ca:32:fd:c1:3c:d3:36:4d:6f:c0:07:02:4f:72:50:
                    24:3c:43:8c:ad:82:7b:3d:2f:9f:fe:49:b8:87:8c:
                    8e:40:0f:98:4a:83:8f:49:2c:58:93:eb:10:3d:83:
                    8c:ef:a9:3e:fe:8d:31:0e:81:92:7b:59:7b:c1:d8:
                    dd:ef:b5:bf:93:4d:03:2c:98:c4:17:a4:02:1f:19:
                    53:3b:5e:a4:9e:d9:22:c2:be:67:a5:26:5c:74:56:
                    f5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:9E:FA:CF:CB:41:F1:A6:64:2E:12:DE:21:EA:BD:2B:F0:D0:B7:AA
            X509v3 Authority Key Identifier:
                keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:18:fc:a2:4f:40:a2:34:eb:c7:35:e3:ee:b5:36:2a:66:fe:
         17:d1:54:40:4f:49:c3:16:ec:26:61:fd:d9:d0:bf:42:73:37:
         80:45:c1:1e:ed:df:23:97:9d:68:79:ef:46:24:64:26:3c:07:
         1b:8a:4c:18:99:4e:e9:fb:3e:f7:69:08:69:e7:30:1b:9f:7f:
         e4:05:3a:4b:66:3e:dc:f3:2d:47:27:2c:0d:4a:98:bc:c5:5c:
         cc:1e:a7:ee:c4:a5:dc:8d:58:62:14:2b:10:74:ed:e8:ee:3a:
         0e:25:ae:47:81:ec:a1:58:79:1d:89:d6:ca:81:f1:cc:c3:3f:
         14:45:e8:0d:7d:3b:f8:99:5d:06:e7:96:b1:3e:99:dc:bc:7e:
         04:9f:ce:e2:83:2f:38:3d:cf:61:e1:ec:28:50:9e:11:53:bf:
         f0:1b:61:b8:cd:a1:40:03:d4:15:37:87:c7:35:e5:f4:30:6c:
         6c:d7:28:42:7f:f0:41:7b:20:8a:b8:ef:e6:96:35:8a:ea:12:
         88:f5:be:68:01:59:b9:d4:46:13:4d:5e:48:92:67:83:58:d2:
         a7:5e:51:66:37:53:cf:68:f4:37:27:27:4a:bf:95:41:6d:a3:
         ad:6f:27:d2:68:c9:68:12:1a:a1:81:4e:57:6a:79:8a:cb:9c:
         0e:48:bf:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYcMsrAckHcw6zgIP/IH4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNTZkYjM0ODdiNGM1YmFjYjMwMDE3NzA1N2NmMzE3NGNm
Nzc0NzcwHhcNMjUwNDEzMDkwMTIwWhcNMjUwNDE0MDkwMTIwWjAzMTEwLwYDVQQD
EygyMDllZmFjZmNiNDFmMWE2NjQyZTEyZGUyMWVhYmQyYmYwZDBiN2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV4C5e3G7gW2oE4iN4Mum7mK72L5
g07JYmJiy1EaoEHYkqDrS3sqdW02//JtxfwMQTeGbS+ttHcwiRbnw6YLSumVW8v6
vxShm9YR6sHJVRIKaxTVSi3/DbAS+EuxULsnfvGG8/5FRyF5LL6bA3y0qG78+mG1
ox/MVxe7MJLgmzjakOISYp8v3mTiBI7gbLbRsQAYIEsGPAKxTUnDfzErBysXUFDK
Mv3BPNM2TW/ABwJPclAkPEOMrYJ7PS+f/km4h4yOQA+YSoOPSSxYk+sQPYOM76k+
/o0xDoGSe1l7wdjd77W/k00DLJjEF6QCHxlTO16kntkiwr5npSZcdFb1LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCe+s/LQfGmZC4S3iHqvSvw0LeqMB8GA1UdIwQY
MBaAFJJW2zSHtMW6yzABdwV88xdM93R3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2xiYk5JZTB4YnJMTUFGM0JYenpGMHozZEhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83YjQ1YjktOTkwYi00NjE0LWE2NGUt
MGY1MmVhNTIyOWZjLzEva2xiYk5JZTB4YnJMTUFGM0JYenpGMHozZEhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83YjQ1YjktOTkwYi00NjE0LWE2NGUtMGY1MmVhNTIyOWZj
LzEva2xiYk5JZTB4YnJMTUFGM0JYenpGMHozZEhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAahj8ok9A
ojTrxzXj7rU2Kmb+F9FUQE9JwxbsJmH92dC/QnM3gEXBHu3fI5edaHnvRiRkJjwH
G4pMGJlO6fs+92kIaecwG59/5AU6S2Y+3PMtRycsDUqYvMVczB6n7sSl3I1YYhQr
EHTt6O46DiWuR4HsoVh5HYnWyoHxzMM/FEXoDX07+JldBueWsT6Z3Lx+BJ/O4oMv
OD3PYeHsKFCeEVO/8BthuM2hQAPUFTeHxzXl9DBsbNcoQn/wQXsgirjv5pY1iuoS
iPW+aAFZudRGE01eSJJng1jSp15RZjdTz2j0NycnSr+VQW2jrW8n0mjJaBIaoYFO
V2p5isucDki/7Q==
-----END CERTIFICATE-----