Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
File:                     bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft (raw, json)
Hash identifier:          L7iiLrjSGPFNCl+jpbCPS5AQFAWbJYQBTJ3WZZtTMDY=
Subject key identifier:   CD:4B:03:D1:57:EF:3C:98:D2:6C:4E:4B:19:E3:62:57:40:C1:FD:67
Authority key identifier: 6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F
Certificate issuer:       /CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
Certificate serial:       01962FAB15F2A04106117A45F0A7C75553BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:03 +0000
Files and hashes:         1: 7vv8BVob_ZO7xZBFUxLEwiHRqsI.roa (hash: a9e9u4Kh69S/npnlVehDJcUBqvJOaHqrRNt0cx8h5Bs=)
                          2: bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl (hash: 5c6U/i1IfRkubbVETk8+POeUe+N7lErSXV60jqB4S1k=)
                          3: cjqlxXd9d603JmJ-9nME9vd7MMs.roa (hash: k/vf9BXXM6xYOCcjVLyRSPCeCSgUP+JptIGKabcT1E8=)
                          4: hZzdEV89UIlpyAqq4Kc3si8CNoM.roa (hash: d1WlFoJHZ3C9ZD8ErKPK4CYZhKvTRioRSz/Q+loHQuE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:15:f2:a0:41:06:11:7a:45:f0:a7:c7:55:53:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
        Validity
            Not Before: Apr 13 15:01:03 2025 GMT
            Not After : Apr 14 15:01:03 2025 GMT
        Subject: CN=cd4b03d157ef3c98d26c4e4b19e3625740c1fd67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:77:e6:35:09:e4:ca:74:7c:f2:bf:cf:72:4c:
                    1d:d1:b2:0c:78:06:1b:07:32:c9:93:4e:22:05:8b:
                    15:63:9c:71:fa:c9:ee:76:b2:ed:a9:fa:1d:6b:e3:
                    fa:b4:c6:4d:6b:71:35:84:e6:ca:a0:36:9f:aa:3f:
                    c2:c4:01:37:cb:f1:24:b3:bd:30:f2:e2:e3:61:2e:
                    5e:cf:ea:49:40:cb:40:ba:05:f0:7c:79:31:be:2d:
                    b1:41:a1:12:d1:a1:e0:4c:d1:b3:9f:4c:23:71:33:
                    52:2c:a4:e1:50:d4:3d:b8:52:da:c0:72:5c:72:15:
                    96:e3:d6:b5:a9:b8:f2:64:63:21:d5:70:46:db:36:
                    ef:da:8c:7e:4b:5e:aa:86:0e:98:0d:35:82:6e:21:
                    da:74:a7:e1:91:a8:36:92:c0:d3:79:c1:20:a4:36:
                    4a:81:65:6f:a6:c4:bf:83:c8:a3:80:c1:43:30:19:
                    ee:96:c8:91:a5:b4:64:5f:af:74:96:c5:69:98:00:
                    e8:51:2c:3b:f4:fb:8e:9a:5c:3d:a1:65:d8:c9:8e:
                    bf:7e:b3:15:e8:5a:66:5b:9e:01:0d:2d:8a:30:ad:
                    13:bc:13:b3:c4:ae:91:1c:a0:19:9a:83:c8:1e:b3:
                    53:39:d5:3f:c2:de:ae:76:c6:bd:16:8a:5f:b3:8d:
                    67:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4B:03:D1:57:EF:3C:98:D2:6C:4E:4B:19:E3:62:57:40:C1:FD:67
            X509v3 Authority Key Identifier:
                keyid:6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:a6:f4:f0:d6:6b:de:89:4b:57:d3:65:2e:7b:13:85:6c:61:
         02:c0:36:b0:91:38:8c:c7:b7:4b:2e:4e:44:a7:df:35:8b:4c:
         2c:81:08:b7:ea:c5:ef:88:8a:eb:c8:aa:7b:07:e9:8a:13:19:
         a2:07:5c:4f:49:3d:8d:6e:cf:30:fa:22:5c:e6:ed:9d:c3:6a:
         8a:4e:d6:54:ee:68:12:8b:5e:60:ac:a2:93:b8:ed:09:00:18:
         df:5a:be:d1:a3:4b:82:44:dd:74:bc:95:63:c5:1b:ca:53:ba:
         30:57:a7:c0:9d:bd:07:6b:f6:d9:9a:eb:48:c7:80:94:7a:2d:
         b1:21:47:87:47:ac:b5:91:de:05:d9:71:e8:dd:11:65:6e:fd:
         4e:07:68:85:4a:01:c1:36:13:bd:94:1d:9e:66:77:42:07:aa:
         86:4c:32:51:cf:ac:01:4b:44:2c:66:21:6f:07:64:b8:67:8b:
         d6:ac:2e:84:2c:9e:52:e3:80:3e:09:18:96:f1:a3:2b:fa:6a:
         31:9d:81:97:4d:20:17:e0:02:82:7f:ec:06:ee:98:89:7d:2d:
         5f:d7:94:ad:05:a4:9b:d1:80:d6:36:37:2d:1c:f2:ca:3f:78:
         4b:c2:3a:0d:08:68:c3:24:b0:79:01:f0:08:c8:79:e5:d0:29:
         d7:fa:44:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqxXyoEEGEXpF8KfHVVO6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZjJmYjBmYTUyZGUxM2MzMzY2ODljZjNmNDgyOWQ2MzUw
Njc1MGYwHhcNMjUwNDEzMTUwMTAzWhcNMjUwNDE0MTUwMTAzWjAzMTEwLwYDVQQD
EyhjZDRiMDNkMTU3ZWYzYzk4ZDI2YzRlNGIxOWUzNjI1NzQwYzFmZDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXfmNQnkynR88r/Pckwd0bIMeAYb
BzLJk04iBYsVY5xx+snudrLtqfoda+P6tMZNa3E1hObKoDafqj/CxAE3y/Eks70w
8uLjYS5ez+pJQMtAugXwfHkxvi2xQaES0aHgTNGzn0wjcTNSLKThUNQ9uFLawHJc
chWW49a1qbjyZGMh1XBG2zbv2ox+S16qhg6YDTWCbiHadKfhkag2ksDTecEgpDZK
gWVvpsS/g8ijgMFDMBnulsiRpbRkX690lsVpmADoUSw79PuOmlw9oWXYyY6/frMV
6FpmW54BDS2KMK0TvBOzxK6RHKAZmoPIHrNTOdU/wt6udsa9Fopfs41n0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1LA9FX7zyY0mxOSxnjYldAwf1nMB8GA1UdIwQY
MBaAFGzy+w+lLeE8M2aJzz9IKdY1BnUPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlBMN0Q2VXQ0VHd6Wm9uUFAwZ3AxalVHZFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jZjA3MTUtYjk5My00MzQ4LTk3ZTkt
NmVjOTgyOTUxY2Y3LzEvYlBMN0Q2VXQ0VHd6Wm9uUFAwZ3AxalVHZFE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9jZjA3MTUtYjk5My00MzQ4LTk3ZTktNmVjOTgyOTUxY2Y3
LzEvYlBMN0Q2VXQ0VHd6Wm9uUFAwZ3AxalVHZFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEKb08NZr
3olLV9NlLnsThWxhAsA2sJE4jMe3Sy5ORKffNYtMLIEIt+rF74iK68iqewfpihMZ
ogdcT0k9jW7PMPoiXObtncNqik7WVO5oEoteYKyik7jtCQAY31q+0aNLgkTddLyV
Y8UbylO6MFenwJ29B2v22ZrrSMeAlHotsSFHh0estZHeBdlx6N0RZW79TgdohUoB
wTYTvZQdnmZ3QgeqhkwyUc+sAUtELGYhbwdkuGeL1qwuhCyeUuOAPgkYlvGjK/pq
MZ2Bl00gF+ACgn/sBu6YiX0tX9eUrQWkm9GA1jY3LRzyyj94S8I6DQhowySweQHw
CMh55dAp1/pEDQ==
-----END CERTIFICATE-----