Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
File:                     bnED-oWs7FfEZIWRzD5Bzff-45c.mft (raw, json)
Hash identifier:          bGKNHksYYX5P6IIJiAA52pMYsZko0dTjrq5psa4+cBc=
Subject key identifier:   58:54:BD:E9:14:A6:21:00:3D:B3:E0:99:86:61:E5:59:BD:D8:14:60
Authority key identifier: 6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
Certificate issuer:       /CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Certificate serial:       01962E2ACD4C6F5AA35AA2DC7C8B051EE6D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
Manifest number:          0C9E
Signing time:             Sun 13 Apr 2025 08:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:19 +0000
Files and hashes:         1: Q75VcKpJN1_xp-QM_NM8W4Tp-04.roa (hash: Wt2+g51E+wWSkSdRcanf7BFfmX/qewZOJ77oXxIMQTM=)
                          2: bnED-oWs7FfEZIWRzD5Bzff-45c.crl (hash: rKyhiIMvvPSvGLbOBaMP/pLKqqV44PFGRaSd/k2m6X4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:cd:4c:6f:5a:a3:5a:a2:dc:7c:8b:05:1e:e6:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
        Validity
            Not Before: Apr 13 08:01:19 2025 GMT
            Not After : Apr 14 08:01:19 2025 GMT
        Subject: CN=5854bde914a621003db3e0998661e559bdd81460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:76:39:33:7a:8e:36:38:70:7e:d1:57:4f:f3:
                    0d:62:c7:38:d4:1d:3a:60:c9:c4:8f:e0:9e:c8:79:
                    90:37:d2:70:a7:3e:d5:a4:4c:90:b4:fe:ef:17:b1:
                    4e:07:8d:4f:8e:c1:e0:1c:64:74:07:d4:18:1d:f7:
                    b1:dd:9e:d8:94:35:2a:25:0f:3e:e6:4c:81:4e:e8:
                    b2:74:a7:98:03:8d:86:7a:e9:e6:fe:43:db:b7:8c:
                    8a:5e:19:c4:bc:b0:7c:aa:6a:b9:1c:f5:c1:97:5f:
                    81:c9:65:fb:3b:ca:89:cf:79:99:12:d7:bb:f4:13:
                    08:5f:4e:31:6a:22:00:91:2f:59:23:7d:28:1a:47:
                    6d:2d:d4:ce:76:39:63:18:45:59:99:73:ed:c3:c7:
                    80:53:68:9f:bb:cc:a2:0f:7f:48:96:7c:ea:a8:20:
                    fb:00:e8:3d:2b:14:97:51:86:ed:54:35:55:a2:2e:
                    c3:40:67:7e:42:66:9a:06:90:41:e4:01:b0:1a:49:
                    6c:d1:9e:5d:37:71:2e:0e:b9:ca:bf:7c:21:32:0e:
                    a8:18:37:50:b0:06:db:12:d0:43:14:ad:69:b4:1a:
                    fa:4e:f2:ca:30:1a:41:28:85:bd:65:09:dc:f0:11:
                    d0:86:b0:67:7e:e6:1b:ba:14:dc:df:74:79:98:e9:
                    7e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:54:BD:E9:14:A6:21:00:3D:B3:E0:99:86:61:E5:59:BD:D8:14:60
            X509v3 Authority Key Identifier:
                keyid:6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:e7:b4:6f:a9:6d:e6:8d:c9:a9:ce:41:c9:e4:ed:1b:55:1d:
         1d:fd:8d:2d:8e:bf:06:21:b7:8d:40:b5:70:e7:49:ba:d1:34:
         46:70:aa:d3:54:bf:f5:5a:9b:d0:97:ec:4a:6d:96:f8:8e:f0:
         eb:7d:42:a6:9d:5f:48:fb:4c:ca:9f:c3:85:b3:ae:24:8c:ed:
         fd:79:e8:c0:72:4e:8b:30:50:fa:58:e2:9b:ea:80:8a:92:79:
         4c:17:41:8c:1c:fb:d5:09:8a:6a:36:2f:2b:2c:57:18:3b:50:
         a5:55:9e:e7:44:20:fc:92:c3:d9:87:87:fe:88:7e:cd:a4:83:
         74:33:a7:bd:37:57:43:4c:c7:15:11:b6:2b:9b:76:57:b6:12:
         ed:a5:64:cf:2c:68:19:43:9d:7c:77:db:b8:e1:63:1f:d6:14:
         58:79:35:ac:89:e2:a3:a2:a7:51:f6:39:c6:bd:b8:32:40:08:
         4e:a0:71:f2:cf:f8:45:90:a3:8b:db:b9:df:e5:f8:87:3a:24:
         42:0a:fb:7a:ed:bd:63:1c:be:a7:bf:33:3e:aa:07:61:8c:9a:
         8b:ae:84:07:1d:91:b5:ab:30:0d:dd:c2:ef:bb:ca:fc:e9:a5:
         f3:5b:95:de:c3:92:28:08:06:05:2a:d1:42:98:17:16:b5:2c:
         88:cc:28:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKs1Mb1qjWqLcfIsFHubRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNzEwM2ZhODVhY2VjNTdjNDY0ODU5MWNjM2U0MWNkZjdm
ZWUzOTcwHhcNMjUwNDEzMDgwMTE5WhcNMjUwNDE0MDgwMTE5WjAzMTEwLwYDVQQD
Eyg1ODU0YmRlOTE0YTYyMTAwM2RiM2UwOTk4NjYxZTU1OWJkZDgxNDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3Y5M3qONjhwftFXT/MNYsc41B06
YMnEj+CeyHmQN9Jwpz7VpEyQtP7vF7FOB41PjsHgHGR0B9QYHfex3Z7YlDUqJQ8+
5kyBTuiydKeYA42Geunm/kPbt4yKXhnEvLB8qmq5HPXBl1+ByWX7O8qJz3mZEte7
9BMIX04xaiIAkS9ZI30oGkdtLdTOdjljGEVZmXPtw8eAU2ifu8yiD39IlnzqqCD7
AOg9KxSXUYbtVDVVoi7DQGd+QmaaBpBB5AGwGkls0Z5dN3EuDrnKv3whMg6oGDdQ
sAbbEtBDFK1ptBr6TvLKMBpBKIW9ZQnc8BHQhrBnfuYbuhTc33R5mOl+XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhUvekUpiEAPbPgmYZh5Vm92BRgMB8GA1UdIwQY
MBaAFG5xA/qFrOxXxGSFkcw+Qc33/uOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm5FRC1vV3M3RmZFWklXUnpENUJ6ZmYtNDVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8wNjgwM2YtZGQyZS00ZmQxLTlhN2Yt
YmJmODI2YWE2N2MwLzEvYm5FRC1vV3M3RmZFWklXUnpENUJ6ZmYtNDVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8wNjgwM2YtZGQyZS00ZmQxLTlhN2YtYmJmODI2YWE2N2Mw
LzEvYm5FRC1vV3M3RmZFWklXUnpENUJ6ZmYtNDVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFOe0b6lt
5o3Jqc5ByeTtG1UdHf2NLY6/BiG3jUC1cOdJutE0RnCq01S/9Vqb0JfsSm2W+I7w
631Cpp1fSPtMyp/DhbOuJIzt/XnowHJOizBQ+ljim+qAipJ5TBdBjBz71QmKajYv
KyxXGDtQpVWe50Qg/JLD2YeH/oh+zaSDdDOnvTdXQ0zHFRG2K5t2V7YS7aVkzyxo
GUOdfHfbuOFjH9YUWHk1rInio6KnUfY5xr24MkAITqBx8s/4RZCji9u53+X4hzok
Qgr7eu29Yxy+p78zPqoHYYyai66EBx2RtaswDd3C77vK/Oml81uV3sOSKAgGBSrR
QpgXFrUsiMwo1A==
-----END CERTIFICATE-----