Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
File:                     beKqsHfJ7vED-XmE8wnYkeWhmYM.mft (raw, json)
Hash identifier:          UFfKjVwdV7AylXNMDaP5SR46MUjTwU8d4BZJZx47Xu4=
Subject key identifier:   09:6B:60:77:91:A6:71:47:73:58:A1:2B:F6:8B:14:64:26:F3:6B:04
Authority key identifier: 6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83
Certificate issuer:       /CN=6de2aab077c9eef103f97984f309d891e5a19983
Certificate serial:       01962DF3E66F76C2D97EAB5A236E671133FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 07:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:21 +0000
Files and hashes:         1: 32zc-LXmMR6x0xIUhBWcHNAbwtU.roa (hash: u8NkHnjtIFcLlrXnANHRipTUbJu+OSRN4OG5POQXt6s=)
                          2: beKqsHfJ7vED-XmE8wnYkeWhmYM.crl (hash: vTdRr0mQrSCzeRPl50O7E1VXsOylq00lpsnfVCvtxeg=)
                          3: tmeZ0Ov1HvxadlJQTOHPYduqrcA.roa (hash: 5a1G608q0BN2ymFOZ4ty/8IB/CrBTEemrLvT6asz5iY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e6:6f:76:c2:d9:7e:ab:5a:23:6e:67:11:33:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6de2aab077c9eef103f97984f309d891e5a19983
        Validity
            Not Before: Apr 13 07:01:21 2025 GMT
            Not After : Apr 14 07:01:21 2025 GMT
        Subject: CN=096b607791a671477358a12bf68b146426f36b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e5:62:0b:37:2c:08:ae:dd:8e:5c:31:8a:3f:
                    91:1c:bb:bc:40:fd:3c:a0:f9:c5:56:24:ba:57:63:
                    76:be:2d:f9:4c:34:76:4a:96:e8:98:9a:44:bd:c3:
                    2c:01:af:49:50:5b:2c:51:76:8f:f4:2d:b2:94:f6:
                    69:19:21:11:84:27:42:b3:cd:f7:5e:fa:68:45:37:
                    bc:21:da:9b:99:4a:d1:eb:a4:5d:0b:21:f3:f4:55:
                    10:f4:36:57:99:45:2b:7b:d5:96:d3:d5:2a:b8:40:
                    8d:6c:96:e0:59:ab:2c:08:28:74:90:7c:f0:7b:a2:
                    45:ff:9d:bc:b9:54:cc:b6:03:bc:39:c3:1b:ae:e9:
                    48:25:c5:d8:b6:d0:78:af:24:a9:6c:94:7f:16:76:
                    85:bf:57:c1:9f:c7:e6:c4:a1:19:76:c1:e0:72:39:
                    3c:e6:47:02:ef:8e:38:e0:2b:04:1d:f2:16:b2:83:
                    30:ef:9c:fe:b9:53:d6:02:ac:3a:b9:e7:7e:dd:e5:
                    4d:27:34:dd:d7:c4:64:ec:1b:a0:aa:10:44:02:b1:
                    65:9d:b0:9a:74:32:89:e5:5c:b3:40:a2:a9:5a:68:
                    82:78:ce:72:4d:52:aa:14:73:2c:40:6b:73:58:ca:
                    dd:ed:4d:88:1c:af:52:f4:ec:4b:5a:29:ae:3d:52:
                    e3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6B:60:77:91:A6:71:47:73:58:A1:2B:F6:8B:14:64:26:F3:6B:04
            X509v3 Authority Key Identifier:
                keyid:6D:E2:AA:B0:77:C9:EE:F1:03:F9:79:84:F3:09:D8:91:E5:A1:99:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beKqsHfJ7vED-XmE8wnYkeWhmYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/a40070-aa17-42fe-86dd-b9ae57394189/1/beKqsHfJ7vED-XmE8wnYkeWhmYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:75:a0:2d:c3:9c:f9:10:53:b9:5d:02:c3:b3:15:3d:85:ab:
         db:7c:ca:1c:7b:34:13:ca:9b:59:1c:37:0a:ef:d6:87:2c:2a:
         25:30:f2:cc:3d:9a:d2:02:bd:9a:32:a7:6f:f2:1f:5d:01:e8:
         07:3c:71:55:40:41:ee:de:73:b8:0f:2f:8b:71:1a:74:bf:47:
         22:c7:81:8a:81:b8:82:52:19:01:a3:4f:ab:c7:fb:97:c9:47:
         98:d2:d5:b3:02:10:ef:68:f6:6e:e2:45:78:18:7b:c4:58:c6:
         55:cd:ef:5e:ec:da:45:f2:60:2d:0c:43:6b:42:ba:0f:eb:e6:
         ae:1d:c9:cf:b5:d5:62:ab:e8:ee:32:5e:1d:f6:90:80:67:ee:
         91:6a:8d:e2:cc:36:f2:7a:3b:ad:5a:d4:08:42:33:c6:79:ed:
         04:f1:bc:f9:b4:a1:e3:8a:0d:ce:1b:3a:e3:fe:cc:0f:f0:ba:
         90:84:96:56:bf:d8:4c:5a:83:e5:d5:e8:c5:04:d7:d6:c4:37:
         31:1a:d2:02:e2:43:23:71:63:50:fb:9b:8d:d7:cb:17:9c:63:
         ee:a2:69:c3:cf:a1:3a:17:ec:28:c7:fb:1a:c9:d0:9e:82:0d:
         31:a3:81:e0:26:e8:d6:bd:3c:21:66:42:f0:2d:c1:fd:f1:b9:
         4f:b9:97:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8+ZvdsLZfqtaI25nETP/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZTJhYWIwNzdjOWVlZjEwM2Y5Nzk4NGYzMDlkODkxZTVh
MTk5ODMwHhcNMjUwNDEzMDcwMTIxWhcNMjUwNDE0MDcwMTIxWjAzMTEwLwYDVQQD
EygwOTZiNjA3NzkxYTY3MTQ3NzM1OGExMmJmNjhiMTQ2NDI2ZjM2YjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouViCzcsCK7djlwxij+RHLu8QP08
oPnFViS6V2N2vi35TDR2SpbomJpEvcMsAa9JUFssUXaP9C2ylPZpGSERhCdCs833
XvpoRTe8IdqbmUrR66RdCyHz9FUQ9DZXmUUre9WW09UquECNbJbgWassCCh0kHzw
e6JF/528uVTMtgO8OcMbrulIJcXYttB4rySpbJR/FnaFv1fBn8fmxKEZdsHgcjk8
5kcC74444CsEHfIWsoMw75z+uVPWAqw6ued+3eVNJzTd18Rk7BugqhBEArFlnbCa
dDKJ5VyzQKKpWmiCeM5yTVKqFHMsQGtzWMrd7U2IHK9S9OxLWimuPVLj8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlrYHeRpnFHc1ihK/aLFGQm82sEMB8GA1UdIwQY
MBaAFG3iqrB3ye7xA/l5hPMJ2JHloZmDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmVLcXNIZko3dkVELVhtRTh3bllrZVdobVlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9hNDAwNzAtYWExNy00MmZlLTg2ZGQt
YjlhZTU3Mzk0MTg5LzEvYmVLcXNIZko3dkVELVhtRTh3bllrZVdobVlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9hNDAwNzAtYWExNy00MmZlLTg2ZGQtYjlhZTU3Mzk0MTg5
LzEvYmVLcXNIZko3dkVELVhtRTh3bllrZVdobVlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF3WgLcOc
+RBTuV0Cw7MVPYWr23zKHHs0E8qbWRw3Cu/WhywqJTDyzD2a0gK9mjKnb/IfXQHo
BzxxVUBB7t5zuA8vi3EadL9HIseBioG4glIZAaNPq8f7l8lHmNLVswIQ72j2buJF
eBh7xFjGVc3vXuzaRfJgLQxDa0K6D+vmrh3Jz7XVYqvo7jJeHfaQgGfukWqN4sw2
8no7rVrUCEIzxnntBPG8+bSh44oNzhs64/7MD/C6kISWVr/YTFqD5dXoxQTX1sQ3
MRrSAuJDI3FjUPubjdfLF5xj7qJpw8+hOhfsKMf7GsnQnoINMaOB4Cbo1r08IWZC
8C3B/fG5T7mXBA==
-----END CERTIFICATE-----