Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft
File:                     v7VI2FclEEUn875Hl2tnRzmuLxM.mft (raw, json)
Hash identifier:          tZX4V8JR9b1U4XRzsg1Y5NCHD5yXF/2hrcvGQSzqMjI=
Subject key identifier:   28:46:F8:8C:82:AF:D7:81:89:AE:C3:99:B9:D2:5C:0C:43:45:65:A6
Authority key identifier: BF:B5:48:D8:57:25:10:45:27:F3:BE:47:97:6B:67:47:39:AE:2F:13
Certificate issuer:       /CN=bfb548d85725104527f3be47976b674739ae2f13
Certificate serial:       01962F3D4F06DCBF9640CEC73341B7131553
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:09 +0000
Files and hashes:         1: nI_8YGf_KIt8612GRNYpw062gLo.roa (hash: hhjvYhiG9KK3YdbRnKxZqPKderlpYCo7W5KoODn99Eg=)
                          2: v7VI2FclEEUn875Hl2tnRzmuLxM.crl (hash: zkguM8yz3kk2qHzZfcyPo+axHqBUTqJwE60pBusI8kE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4f:06:dc:bf:96:40:ce:c7:33:41:b7:13:15:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfb548d85725104527f3be47976b674739ae2f13
        Validity
            Not Before: Apr 13 13:01:09 2025 GMT
            Not After : Apr 14 13:01:09 2025 GMT
        Subject: CN=2846f88c82afd78189aec399b9d25c0c434565a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4c:f2:f7:63:18:47:f6:d0:e6:27:24:28:fa:
                    2b:da:0e:c0:65:d0:a7:24:fe:2b:03:9c:28:e6:ca:
                    a9:3c:01:d3:10:95:6f:3c:ff:80:5d:16:70:99:8e:
                    7f:8c:06:ec:2e:d8:c2:45:6c:2a:38:11:48:fb:60:
                    dd:db:cd:e0:64:f8:4c:e0:ec:94:c6:1d:4d:1f:0e:
                    35:81:80:9c:ce:e1:92:83:d1:19:4d:04:27:fd:a6:
                    05:61:81:cf:f8:22:19:d3:fe:e1:e7:a8:02:b0:ac:
                    c9:12:1b:d7:a4:6b:53:1e:57:82:9a:9c:7a:f7:9f:
                    0f:e4:3f:53:5c:a4:ea:6f:a0:7a:43:cf:d0:5a:e7:
                    24:c9:51:b2:7c:57:7f:5a:76:2c:1f:57:f1:13:b5:
                    8e:2f:18:9b:21:c9:64:89:d6:71:9e:d7:0a:c1:83:
                    12:e0:24:72:40:56:ef:f6:6c:1e:06:ce:46:d3:73:
                    29:23:9f:39:64:60:78:1b:b0:49:c8:96:68:43:99:
                    10:28:c0:92:72:3d:7e:6d:34:aa:91:b6:1b:57:84:
                    5d:72:df:c2:0d:39:d3:af:20:84:8e:15:26:37:66:
                    85:f9:4d:c0:36:a2:d8:8b:05:f2:01:08:3e:87:98:
                    0f:bb:3d:05:3e:f5:9a:69:fe:cd:ae:eb:2d:55:55:
                    28:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:46:F8:8C:82:AF:D7:81:89:AE:C3:99:B9:D2:5C:0C:43:45:65:A6
            X509v3 Authority Key Identifier:
                keyid:BF:B5:48:D8:57:25:10:45:27:F3:BE:47:97:6B:67:47:39:AE:2F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7VI2FclEEUn875Hl2tnRzmuLxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/e7cc6b-52a0-4b7a-8fc2-71c46c199636/1/v7VI2FclEEUn875Hl2tnRzmuLxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:54:99:1d:c4:79:81:a3:0b:0f:b1:16:d7:19:8f:6e:d6:ca:
         9c:a0:70:39:fd:15:8e:bc:48:b6:d4:e5:0a:ef:db:53:9e:cd:
         fe:3e:c6:ea:7a:a8:3a:c5:4e:1b:39:00:a8:df:87:f0:7e:bd:
         57:4b:15:87:97:8b:aa:3d:68:c2:f7:37:3b:4b:b1:ce:b5:a5:
         2b:2a:f2:92:b6:3f:06:3c:40:d4:ed:8c:68:a7:96:15:53:a5:
         55:11:45:75:93:81:7f:03:28:16:5d:4e:69:5e:9b:ec:75:72:
         32:cb:7d:d7:bd:61:00:0c:ac:53:ed:bc:fa:8d:f8:8b:d7:e1:
         61:44:b3:5c:5b:10:a5:97:9f:d0:27:32:6a:d4:31:db:c7:95:
         2e:b6:2f:19:72:78:03:f5:87:b2:57:7d:11:7c:d8:74:d3:9b:
         d9:7b:18:ca:d7:ee:61:c0:75:bd:2b:26:e7:69:7a:71:a6:95:
         50:79:ed:47:19:f1:aa:06:35:53:ee:5e:f9:3d:4f:bf:b9:aa:
         05:c0:79:78:3d:e0:6c:46:6b:fb:ed:50:ea:f7:87:1f:1e:3a:
         a1:7d:48:5a:0b:0e:ba:b1:e6:9f:fd:c7:ca:42:07:8d:99:5c:
         25:ae:7a:78:50:d0:15:fc:81:dc:1d:14:e2:78:6e:ed:f6:0a:
         68:18:be:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPU8G3L+WQM7HM0G3ExVTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYjU0OGQ4NTcyNTEwNDUyN2YzYmU0Nzk3NmI2NzQ3Mzlh
ZTJmMTMwHhcNMjUwNDEzMTMwMTA5WhcNMjUwNDE0MTMwMTA5WjAzMTEwLwYDVQQD
EygyODQ2Zjg4YzgyYWZkNzgxODlhZWMzOTliOWQyNWMwYzQzNDU2NWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkzy92MYR/bQ5ickKPor2g7AZdCn
JP4rA5wo5sqpPAHTEJVvPP+AXRZwmY5/jAbsLtjCRWwqOBFI+2Dd283gZPhM4OyU
xh1NHw41gYCczuGSg9EZTQQn/aYFYYHP+CIZ0/7h56gCsKzJEhvXpGtTHleCmpx6
958P5D9TXKTqb6B6Q8/QWuckyVGyfFd/WnYsH1fxE7WOLxibIclkidZxntcKwYMS
4CRyQFbv9mweBs5G03MpI585ZGB4G7BJyJZoQ5kQKMCScj1+bTSqkbYbV4Rdct/C
DTnTryCEjhUmN2aF+U3ANqLYiwXyAQg+h5gPuz0FPvWaaf7NrustVVUo1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChG+IyCr9eBia7DmbnSXAxDRWWmMB8GA1UdIwQY
MBaAFL+1SNhXJRBFJ/O+R5drZ0c5ri8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjdWSTJGY2xFRVVuODc1SGwydG5Sem11THhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lN2NjNmItNTJhMC00YjdhLThmYzIt
NzFjNDZjMTk5NjM2LzEvdjdWSTJGY2xFRVVuODc1SGwydG5Sem11THhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9lN2NjNmItNTJhMC00YjdhLThmYzItNzFjNDZjMTk5NjM2
LzEvdjdWSTJGY2xFRVVuODc1SGwydG5Sem11THhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt1SZHcR5
gaMLD7EW1xmPbtbKnKBwOf0VjrxIttTlCu/bU57N/j7G6nqoOsVOGzkAqN+H8H69
V0sVh5eLqj1owvc3O0uxzrWlKyrykrY/BjxA1O2MaKeWFVOlVRFFdZOBfwMoFl1O
aV6b7HVyMst9171hAAysU+28+o34i9fhYUSzXFsQpZef0CcyatQx28eVLrYvGXJ4
A/WHsld9EXzYdNOb2XsYytfuYcB1vSsm52l6caaVUHntRxnxqgY1U+5e+T1Pv7mq
BcB5eD3gbEZr++1Q6veHHx46oX1IWgsOurHmn/3HykIHjZlcJa56eFDQFfyB3B0U
4nhu7fYKaBi+YA==
-----END CERTIFICATE-----