Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
File:                     v124EbXV0FvsN-6dCaTsUu7tGtU.mft (raw, json)
Hash identifier:          XU56CsQi7LQZXALlVEiXsVLI7C8ySYAphNlUHPI7dBw=
Subject key identifier:   13:1A:5A:05:1E:66:14:D3:2E:9E:18:2B:8A:6E:0E:6F:A4:1E:3A:08
Authority key identifier: BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
Certificate issuer:       /CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Certificate serial:       01962F06E008334DC787B9C6C21AE7E7419D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:41 +0000
Files and hashes:         1: A_KgM3k4qAAXzoVtcLMaFcFNNK4.roa (hash: VJ7GutYO65TbDd04dxHRMtfL/mkpQAyG9g/RbTdBVFk=)
                          2: Bykp6D8a0g7RWzF0-TM8Q9QUeZg.roa (hash: XX0zq9iYFmQVsbLlV9Gh1YQJWKy0izeVfRSjEDzptNY=)
                          3: aEL4xFOQmRYrZwG3M_bcJt5uI7g.roa (hash: zEPp0rusbaxj35njsL+K6xMWps6ctYOjx+pWxAGHdKg=)
                          4: leblj7LAsmNQvo4mPAk6nZp18TI.roa (hash: BN8Nv/xxMQaspAlU30+6jiR1kkLgITKVXHRbqi9/XpE=)
                          5: v124EbXV0FvsN-6dCaTsUu7tGtU.crl (hash: TgRuw7qsu/Xpvl/w9hdKqWIfQdg99Rm2iPzMaSEAB98=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e0:08:33:4d:c7:87:b9:c6:c2:1a:e7:e7:41:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
        Validity
            Not Before: Apr 13 12:01:41 2025 GMT
            Not After : Apr 14 12:01:41 2025 GMT
        Subject: CN=131a5a051e6614d32e9e182b8a6e0e6fa41e3a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:90:56:05:b2:89:33:be:3c:2b:66:a0:e0:2a:
                    8c:97:da:2a:c1:1f:ee:76:00:18:18:b5:4d:4d:1c:
                    85:c1:ae:f7:a6:d1:4c:65:c7:26:ee:55:d3:52:df:
                    46:a0:ff:db:0d:cc:37:f3:77:ae:96:10:39:04:f4:
                    14:6b:e3:2b:08:db:cd:1d:c2:5e:f3:42:c9:3b:76:
                    e3:d1:c5:48:48:7d:da:6b:cc:da:6a:95:dd:f9:2f:
                    5d:e3:64:46:80:63:b9:03:a3:37:95:24:46:be:97:
                    e2:64:62:86:a5:5e:bf:7c:76:f0:99:9f:86:81:50:
                    65:a6:dd:84:ab:3e:63:2f:ac:78:9d:17:9b:18:3f:
                    c1:c6:36:4c:5b:d3:3d:c9:eb:e1:af:8b:61:f8:b4:
                    7a:81:5d:22:5e:ab:70:9e:21:38:7d:7e:ed:22:a4:
                    6e:dd:70:06:56:3b:f0:f0:a3:dd:88:6f:91:d1:c2:
                    6d:15:18:fb:83:ab:fd:84:a2:4b:21:36:05:08:ed:
                    54:19:c4:01:71:0d:a0:17:98:fc:fe:af:55:15:5d:
                    25:53:7d:a7:ea:44:92:20:f7:cc:04:11:56:c3:21:
                    3c:b4:e8:8e:65:f4:29:f0:86:32:69:42:59:6c:2b:
                    0e:f1:8c:d3:3d:e5:5c:cf:d4:1d:5c:7c:50:69:cb:
                    b2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1A:5A:05:1E:66:14:D3:2E:9E:18:2B:8A:6E:0E:6F:A4:1E:3A:08
            X509v3 Authority Key Identifier:
                keyid:BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:7d:40:82:8e:c3:8e:b5:6e:14:56:9a:df:f2:f5:53:ae:e1:
         e4:f3:11:40:b8:49:fb:6c:e8:ed:9f:1e:aa:be:27:18:15:02:
         d6:ed:6f:93:4c:4c:a1:c9:aa:62:26:d7:31:29:4a:0d:3f:c7:
         66:79:e5:88:bd:8a:5a:67:9f:e1:c3:71:26:ad:9c:df:d3:f0:
         ec:25:a0:f9:be:df:05:82:b5:3b:25:26:86:16:48:dd:af:1a:
         d5:d9:1f:88:9f:2c:d2:a2:25:0b:26:c4:f3:6f:de:62:07:93:
         e2:26:03:98:3e:d2:0a:9b:15:6d:3e:22:43:03:c5:be:7c:70:
         4c:d2:6e:b3:49:63:77:8b:f0:59:aa:a0:a2:36:ef:3c:3f:17:
         59:ba:e1:10:3e:da:92:37:43:a2:b4:f6:e0:51:a4:4f:d8:b2:
         ab:ab:14:da:c1:32:3a:ee:f6:ab:95:9e:7e:7b:35:b7:41:d0:
         5d:72:03:e4:ca:4a:b0:2a:48:1a:a6:66:af:4d:95:dc:3e:a5:
         bd:54:20:79:66:d8:77:04:04:06:07:e8:11:29:ff:76:54:c3:
         32:36:f0:90:e4:ab:b3:58:fb:6a:72:3a:f2:a7:ea:94:39:6b:
         f0:80:0c:25:ed:04:34:45:5c:68:fc:e6:5e:f4:06:7c:19:94:
         ab:ae:b6:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBuAIM03Hh7nGwhrn50GdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNWRiODExYjVkNWQwNWJlYzM3ZWU5ZDA5YTRlYzUyZWVl
ZDFhZDUwHhcNMjUwNDEzMTIwMTQxWhcNMjUwNDE0MTIwMTQxWjAzMTEwLwYDVQQD
EygxMzFhNWEwNTFlNjYxNGQzMmU5ZTE4MmI4YTZlMGU2ZmE0MWUzYTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ZBWBbKJM748K2ag4CqMl9oqwR/u
dgAYGLVNTRyFwa73ptFMZccm7lXTUt9GoP/bDcw383eulhA5BPQUa+MrCNvNHcJe
80LJO3bj0cVISH3aa8zaapXd+S9d42RGgGO5A6M3lSRGvpfiZGKGpV6/fHbwmZ+G
gVBlpt2Eqz5jL6x4nRebGD/BxjZMW9M9yevhr4th+LR6gV0iXqtwniE4fX7tIqRu
3XAGVjvw8KPdiG+R0cJtFRj7g6v9hKJLITYFCO1UGcQBcQ2gF5j8/q9VFV0lU32n
6kSSIPfMBBFWwyE8tOiOZfQp8IYyaUJZbCsO8YzTPeVcz9QdXHxQacuyXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMaWgUeZhTTLp4YK4puDm+kHjoIMB8GA1UdIwQY
MBaAFL9duBG11dBb7DfunQmk7FLu7RrVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjEyNEViWFYwRnZzTi02ZENhVHNVdTd0R3RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zMGY1ZTAtYTA0Zi00OTkzLTk4M2Mt
NzE1ZjA5ODE3MzQxLzEvdjEyNEViWFYwRnZzTi02ZENhVHNVdTd0R3RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zMGY1ZTAtYTA0Zi00OTkzLTk4M2MtNzE1ZjA5ODE3MzQx
LzEvdjEyNEViWFYwRnZzTi02ZENhVHNVdTd0R3RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHn1Ago7D
jrVuFFaa3/L1U67h5PMRQLhJ+2zo7Z8eqr4nGBUC1u1vk0xMocmqYibXMSlKDT/H
ZnnliL2KWmef4cNxJq2c39Pw7CWg+b7fBYK1OyUmhhZI3a8a1dkfiJ8s0qIlCybE
82/eYgeT4iYDmD7SCpsVbT4iQwPFvnxwTNJus0ljd4vwWaqgojbvPD8XWbrhED7a
kjdDorT24FGkT9iyq6sU2sEyOu72q5Wefns1t0HQXXID5MpKsCpIGqZmr02V3D6l
vVQgeWbYdwQEBgfoESn/dlTDMjbwkOSrs1j7anI68qfqlDlr8IAMJe0ENEVcaPzm
XvQGfBmUq662og==
-----END CERTIFICATE-----