Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
File:                     L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft (raw, json)
Hash identifier:          PlvJHw4bVe/BsAhl2mu3Q58CvBcfU3YCCFjZF0WfLsg=
Subject key identifier:   40:BB:11:11:2D:B7:69:9A:DE:47:77:8D:AF:2B:DE:68:E5:95:93:EF
Authority key identifier: 2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9
Certificate issuer:       /CN=2f407dea499d73d7ebd4e68825188687559cb1f9
Certificate serial:       01962F3DD93B763FAC13343DF988271C5A26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft
Manifest number:          14D0
Signing time:             Sun 13 Apr 2025 13:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:44 +0000
Files and hashes:         1: 2y9heUGpm4IABGcsawt9m5ijUw8.roa (hash: 3R+JVKPGvS+pF/oreszpE7P3zqEvUvswY+6b0jSRI3s=)
                          2: L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl (hash: hpjgEDC8D5o20X2BywgvoK/CRXCv5+nr44jkquOPMgk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:d9:3b:76:3f:ac:13:34:3d:f9:88:27:1c:5a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f407dea499d73d7ebd4e68825188687559cb1f9
        Validity
            Not Before: Apr 13 13:01:44 2025 GMT
            Not After : Apr 14 13:01:44 2025 GMT
        Subject: CN=40bb11112db7699ade47778daf2bde68e59593ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c8:9b:f7:5a:e8:48:c2:0b:3e:f5:53:5d:52:
                    e6:ed:d5:67:e9:9e:a5:06:2f:17:17:8d:7b:e5:e6:
                    f8:61:5d:43:1a:4f:10:eb:47:07:43:6b:c9:a9:02:
                    44:f2:6e:0f:2f:11:15:6d:d9:94:b6:a4:bf:ff:ef:
                    fd:f7:7b:33:e0:b3:b1:51:2c:fe:dc:7d:0f:10:bd:
                    c3:4f:59:ef:d8:94:e8:50:d6:2d:4a:cb:28:e4:7e:
                    21:ba:40:72:97:a2:4d:e9:b3:18:1a:cc:99:2b:50:
                    be:02:56:c3:1f:e8:b3:78:94:1a:8d:34:33:b7:f5:
                    8d:aa:93:c8:d3:1d:85:20:76:12:34:68:b5:ec:24:
                    05:50:65:ff:88:8a:46:52:27:e2:f8:30:ae:bf:53:
                    80:18:50:a3:1e:a1:63:45:48:21:a6:ac:ff:ca:9d:
                    62:40:c1:90:c0:47:ce:27:c0:9a:ee:73:43:ab:50:
                    b7:1b:a5:6a:fc:63:a1:2a:84:a6:c1:14:77:cb:b8:
                    3f:7c:01:53:06:5e:70:77:01:95:b6:c0:1c:b7:23:
                    2d:2a:56:a4:e3:f6:64:97:7d:07:7a:4f:86:67:be:
                    79:b7:6d:cd:c9:70:f0:6a:f9:18:38:82:0b:b2:b8:
                    64:4f:f1:2d:d3:4d:d7:5a:60:fe:0c:0e:81:20:2a:
                    eb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:BB:11:11:2D:B7:69:9A:DE:47:77:8D:AF:2B:DE:68:E5:95:93:EF
            X509v3 Authority Key Identifier:
                keyid:2F:40:7D:EA:49:9D:73:D7:EB:D4:E6:88:25:18:86:87:55:9C:B1:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L0B96kmdc9fr1OaIJRiGh1Wcsfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b9a4ac-b671-411b-ac47-19005cb98989/1/L0B96kmdc9fr1OaIJRiGh1Wcsfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:11:77:a9:a3:12:7a:b2:9a:cf:eb:f5:12:d1:02:8f:05:ad:
         7f:51:cb:5f:6a:3e:0e:8e:93:e4:0d:b6:35:68:28:34:94:28:
         16:89:85:c9:9b:b4:b1:14:0a:1b:92:ee:08:5e:99:bf:3c:c7:
         35:7b:76:6c:90:fd:27:b3:72:0c:65:7b:d8:a5:33:e9:7f:83:
         d1:2b:cc:eb:45:ce:44:06:d8:fd:b3:31:29:58:8d:c1:26:4b:
         77:87:b1:7e:0d:23:7c:22:ff:0d:eb:cb:35:62:85:73:0e:0e:
         de:24:7b:58:ad:9e:31:b4:4c:8e:49:cb:03:e7:b2:9e:bb:5c:
         a0:cf:1c:4a:77:1d:78:54:d7:73:9d:08:3c:c4:e4:11:01:4a:
         dd:9b:bc:c5:80:37:57:60:14:e6:3f:fd:4e:6f:14:d8:3d:ec:
         38:fa:ac:1a:c8:c2:03:0d:92:fb:f8:8f:7b:59:74:27:f5:ac:
         ee:a1:83:64:f7:40:07:62:9f:0f:ff:14:58:6b:23:e4:d2:3c:
         61:53:5d:c8:7d:db:37:e7:45:0b:34:23:d5:58:1f:58:bc:55:
         9c:f7:cb:76:8e:ea:2b:88:f2:eb:cb:8a:91:fc:d7:a7:5c:07:
         da:58:09:11:aa:2d:c6:db:06:40:44:c9:d9:80:82:72:e6:e5:
         5c:73:e6:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPdk7dj+sEzQ9+YgnHFomMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNDA3ZGVhNDk5ZDczZDdlYmQ0ZTY4ODI1MTg4Njg3NTU5
Y2IxZjkwHhcNMjUwNDEzMTMwMTQ0WhcNMjUwNDE0MTMwMTQ0WjAzMTEwLwYDVQQD
Eyg0MGJiMTExMTJkYjc2OTlhZGU0Nzc3OGRhZjJiZGU2OGU1OTU5M2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Mib91roSMILPvVTXVLm7dVn6Z6l
Bi8XF4175eb4YV1DGk8Q60cHQ2vJqQJE8m4PLxEVbdmUtqS//+/993sz4LOxUSz+
3H0PEL3DT1nv2JToUNYtSsso5H4hukByl6JN6bMYGsyZK1C+AlbDH+izeJQajTQz
t/WNqpPI0x2FIHYSNGi17CQFUGX/iIpGUifi+DCuv1OAGFCjHqFjRUghpqz/yp1i
QMGQwEfOJ8Ca7nNDq1C3G6Vq/GOhKoSmwRR3y7g/fAFTBl5wdwGVtsActyMtKlak
4/Zkl30Hek+GZ755t23NyXDwavkYOIILsrhkT/Et003XWmD+DA6BICrr/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEC7EREtt2ma3kd3ja8r3mjllZPvMB8GA1UdIwQY
MBaAFC9AfepJnXPX69TmiCUYhodVnLH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9iOWE0YWMtYjY3MS00MTFiLWFjNDct
MTkwMDVjYjk4OTg5LzEvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9iOWE0YWMtYjY3MS00MTFiLWFjNDctMTkwMDVjYjk4OTg5
LzEvTDBCOTZrbWRjOWZyMU9hSUpSaUdoMVdjc2ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhF3qaMS
erKaz+v1EtECjwWtf1HLX2o+Do6T5A22NWgoNJQoFomFyZu0sRQKG5LuCF6ZvzzH
NXt2bJD9J7NyDGV72KUz6X+D0SvM60XORAbY/bMxKViNwSZLd4exfg0jfCL/DevL
NWKFcw4O3iR7WK2eMbRMjknLA+eynrtcoM8cSncdeFTXc50IPMTkEQFK3Zu8xYA3
V2AU5j/9Tm8U2D3sOPqsGsjCAw2S+/iPe1l0J/Ws7qGDZPdAB2KfD/8UWGsj5NI8
YVNdyH3bN+dFCzQj1VgfWLxVnPfLdo7qK4jy68uKkfzXp1wH2lgJEaotxtsGQETJ
2YCCcublXHPmog==
-----END CERTIFICATE-----