Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
File:                     bmvNHuBBUxK6utqWpbTHNRu8pr8.mft (raw, json)
Hash identifier:          W38k9CRj7fSIKBSG2p+Zw/+ADbRyMVbr2hKABRE9BWk=
Subject key identifier:   2E:44:1A:86:D0:10:BC:21:50:A1:6E:E0:27:4D:A5:AD:53:E3:20:38
Authority key identifier: 6E:6B:CD:1E:E0:41:53:12:BA:BA:DA:96:A5:B4:C7:35:1B:BC:A6:BF
Certificate issuer:       /CN=6e6bcd1ee0415312babada96a5b4c7351bbca6bf
Certificate serial:       01962F3D58A6C9E0CCED943249DD912B0444
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:11 +0000
Files and hashes:         1: GI-i99kB9ZZSVKD8l02CbLd6aSk.roa (hash: MonsukLiwzJG84LeZGYkMxgIaza5E2jt6G/wnGkzXY8=)
                          2: bmvNHuBBUxK6utqWpbTHNRu8pr8.crl (hash: lD7BsXZb2w4gaK1/KATBO8crxm65qKN31ZggVI9iEaI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:58:a6:c9:e0:cc:ed:94:32:49:dd:91:2b:04:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e6bcd1ee0415312babada96a5b4c7351bbca6bf
        Validity
            Not Before: Apr 13 13:01:11 2025 GMT
            Not After : Apr 14 13:01:11 2025 GMT
        Subject: CN=2e441a86d010bc2150a16ee0274da5ad53e32038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:89:b9:c9:ce:24:cb:b4:7d:77:8a:d6:7d:68:
                    3e:01:34:79:37:de:36:e7:73:7f:a7:ec:13:74:75:
                    f9:dc:cd:0a:2c:a2:45:31:db:37:d7:10:7c:65:89:
                    ca:b1:3a:22:34:0c:9e:50:fe:ba:07:e3:07:71:92:
                    df:56:10:6d:63:5d:dc:44:b7:c3:4a:0f:24:9e:5d:
                    24:90:c8:b7:12:8b:76:af:ea:a5:b1:80:d3:9a:a0:
                    32:18:5b:ba:cd:5e:93:2d:dd:2a:88:c3:56:63:9b:
                    3b:de:36:1a:04:1e:a5:71:79:bb:9c:16:a1:a0:bd:
                    d0:a9:12:2f:b3:1a:d2:25:f2:b1:0c:06:eb:22:29:
                    2c:1b:44:13:0c:4d:e9:36:ce:e3:43:64:4d:83:f1:
                    fb:a1:c9:b2:07:6a:b4:fd:41:8f:68:7d:79:36:e1:
                    fb:76:ab:12:17:76:2a:f0:71:12:15:7d:33:e8:04:
                    5e:60:78:1a:53:20:e8:d3:06:02:0c:54:be:2f:af:
                    16:cb:f9:dc:cc:bf:d5:8b:0e:c4:a6:5a:79:a3:cb:
                    55:da:e9:15:1f:3a:6a:e2:93:18:12:1f:a0:12:49:
                    61:5e:ff:0d:16:f2:67:b9:53:c6:77:2a:b2:6e:e8:
                    9a:56:1a:6f:d9:c9:15:35:4b:4b:e3:93:cf:84:65:
                    d6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:44:1A:86:D0:10:BC:21:50:A1:6E:E0:27:4D:A5:AD:53:E3:20:38
            X509v3 Authority Key Identifier:
                keyid:6E:6B:CD:1E:E0:41:53:12:BA:BA:DA:96:A5:B4:C7:35:1B:BC:A6:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:84:14:9b:08:2c:30:bc:25:11:db:05:a2:4f:82:d0:c2:d5:
         3b:98:c6:7d:bc:34:23:2b:94:d2:70:60:d2:b4:2f:7a:04:60:
         8f:ba:87:34:0f:81:83:6f:d8:13:f1:68:9a:a2:a2:31:76:c6:
         44:97:e5:1e:b4:63:82:44:59:3b:57:bc:bc:7d:78:00:44:a9:
         4b:5e:cb:53:fb:ab:f4:e5:cd:5a:a5:f1:3c:2b:62:d7:dc:49:
         5e:c6:a6:7c:eb:59:3f:e2:be:61:b7:31:85:ec:63:4e:82:e1:
         07:ef:dc:f2:d6:a0:00:c0:76:31:12:9b:89:c5:06:b1:d4:64:
         6b:c9:23:ee:fc:57:49:09:a8:c9:b0:e2:f2:94:1f:7b:09:70:
         93:1c:77:da:35:02:f8:e6:80:97:41:11:7f:13:06:c9:ce:05:
         ba:ea:a4:24:26:8d:09:35:d9:5c:39:1a:71:27:ce:f9:c5:7b:
         12:aa:6d:b0:97:13:5b:a0:f2:3f:7d:72:9e:a9:f1:b2:dd:8f:
         3e:6c:79:bc:88:f1:0b:9d:d0:29:6c:e6:02:1f:e3:24:bb:1e:
         db:dd:6e:06:79:cc:c5:5d:82:50:10:d2:dd:ba:9e:1b:11:a1:
         ca:60:05:7a:3c:bc:11:0c:af:7e:51:a8:22:fc:a5:f3:74:64:
         7a:3c:3e:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPVimyeDM7ZQySd2RKwREMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNmJjZDFlZTA0MTUzMTJiYWJhZGE5NmE1YjRjNzM1MWJi
Y2E2YmYwHhcNMjUwNDEzMTMwMTExWhcNMjUwNDE0MTMwMTExWjAzMTEwLwYDVQQD
EygyZTQ0MWE4NmQwMTBiYzIxNTBhMTZlZTAyNzRkYTVhZDUzZTMyMDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4m5yc4ky7R9d4rWfWg+ATR5N942
53N/p+wTdHX53M0KLKJFMds31xB8ZYnKsToiNAyeUP66B+MHcZLfVhBtY13cRLfD
Sg8knl0kkMi3Eot2r+qlsYDTmqAyGFu6zV6TLd0qiMNWY5s73jYaBB6lcXm7nBah
oL3QqRIvsxrSJfKxDAbrIiksG0QTDE3pNs7jQ2RNg/H7ocmyB2q0/UGPaH15NuH7
dqsSF3Yq8HESFX0z6AReYHgaUyDo0wYCDFS+L68Wy/nczL/Viw7Eplp5o8tV2ukV
Hzpq4pMYEh+gEklhXv8NFvJnuVPGdyqybuiaVhpv2ckVNUtL45PPhGXWTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5EGobQELwhUKFu4CdNpa1T4yA4MB8GA1UdIwQY
MBaAFG5rzR7gQVMSurralqW0xzUbvKa/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm12Tkh1QkJVeEs2dXRxV3BiVEhOUnU4cHI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy84MjczMzItMGEwMi00MjNmLWIwN2Yt
MDUyOTBiZWNkYzYxLzEvYm12Tkh1QkJVeEs2dXRxV3BiVEhOUnU4cHI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy84MjczMzItMGEwMi00MjNmLWIwN2YtMDUyOTBiZWNkYzYx
LzEvYm12Tkh1QkJVeEs2dXRxV3BiVEhOUnU4cHI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJoQUmwgs
MLwlEdsFok+C0MLVO5jGfbw0IyuU0nBg0rQvegRgj7qHNA+Bg2/YE/FomqKiMXbG
RJflHrRjgkRZO1e8vH14AESpS17LU/ur9OXNWqXxPCti19xJXsamfOtZP+K+Ybcx
hexjToLhB+/c8tagAMB2MRKbicUGsdRka8kj7vxXSQmoybDi8pQfewlwkxx32jUC
+OaAl0ERfxMGyc4FuuqkJCaNCTXZXDkacSfO+cV7EqptsJcTW6DyP31ynqnxst2P
Pmx5vIjxC53QKWzmAh/jJLse291uBnnMxV2CUBDS3bqeGxGhymAFejy8EQyvflGo
Ivyl83Rkejw+4Q==
-----END CERTIFICATE-----