Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
File:                     vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft (raw, json)
Hash identifier:          xEz6mmXSnMGyaKN0txi+WXBa5gi4fpkQOYaD/QOjgKw=
Subject key identifier:   DB:BE:CA:C4:C9:42:8F:F4:14:B2:25:C8:27:18:1F:6A:94:92:02:1F
Authority key identifier: BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB
Certificate issuer:       /CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
Certificate serial:       01962E2B18D677430674C05EBBE711C29414
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 08:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:38 +0000
Files and hashes:         1: qBn6ockm6JSiEH-8udw_bpsms9g.roa (hash: nCADL7lFGk+Q6O3ajQCgcYhE2O5JRszPFiBp0Ov4f98=)
                          2: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl (hash: XX92wKaKfrCD1NVsd4SlApFaWfteJQawQp5d1w8PVDY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:18:d6:77:43:06:74:c0:5e:bb:e7:11:c2:94:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
        Validity
            Not Before: Apr 13 08:01:38 2025 GMT
            Not After : Apr 14 08:01:38 2025 GMT
        Subject: CN=dbbecac4c9428ff414b225c827181f6a9492021f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ef:04:b4:29:fb:ea:08:49:c3:65:be:a4:e9:
                    e6:db:d2:97:3c:28:f6:5b:8b:05:80:a1:d3:b4:88:
                    58:c5:90:b5:14:4f:12:2e:14:26:30:1b:17:df:b5:
                    c5:96:41:d9:65:27:fc:99:59:cc:90:7d:e0:06:16:
                    90:dd:76:c2:09:49:2f:ae:96:9e:7b:d1:d9:4b:4d:
                    dc:b0:8d:5d:24:1c:97:8d:4c:1a:7a:53:4c:0d:5e:
                    ee:4c:41:0f:e2:0d:99:f0:c9:ba:ba:44:a0:67:24:
                    a5:8b:f5:8e:50:6a:94:2b:2b:e5:91:44:02:25:75:
                    70:5a:54:c1:d7:f7:7a:7f:5c:3d:e2:50:ac:00:4f:
                    4b:8a:50:27:55:9f:58:5a:68:09:bb:0f:32:44:34:
                    65:4b:04:f6:15:82:3a:2c:81:21:11:92:9e:62:35:
                    5e:44:81:4b:e3:ee:54:86:a5:3c:91:bf:6d:b4:96:
                    9d:34:05:5b:cd:37:f7:06:3c:3f:cf:35:f9:15:d5:
                    95:40:96:ec:2e:7e:d3:28:80:4f:20:6d:87:79:1d:
                    16:a1:40:ea:75:da:7b:6d:c7:da:5d:3e:50:83:e0:
                    7c:37:0c:55:ee:92:91:62:1e:5c:1d:22:64:76:3f:
                    43:9b:bb:69:cb:d2:cd:85:6f:88:b7:8c:03:3c:4c:
                    66:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:BE:CA:C4:C9:42:8F:F4:14:B2:25:C8:27:18:1F:6A:94:92:02:1F
            X509v3 Authority Key Identifier:
                keyid:BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:32:e5:53:fc:ba:f7:a2:c4:55:fb:00:32:7e:3f:c2:6a:c2:
         6f:c3:1a:8e:fa:ac:01:5e:33:5e:7a:fc:be:3c:5d:44:06:c3:
         ad:71:5c:a1:0b:67:72:dc:9e:d4:45:76:6b:11:5e:29:0e:4e:
         30:33:fd:31:4b:0f:6f:28:42:ee:9c:30:d4:08:54:20:f9:fe:
         46:0c:d2:17:d5:24:cc:6e:0b:88:94:8b:fc:99:d8:a7:24:6a:
         39:c7:97:51:b2:3d:bb:71:4e:88:d2:c8:de:86:c3:62:7c:15:
         f3:7c:c6:cf:94:a9:b9:02:5a:fd:62:03:55:64:64:9e:4d:19:
         be:33:cd:45:77:fe:7d:13:57:bb:0a:24:bf:41:00:bb:7c:e9:
         f7:ff:97:6f:4e:54:53:dd:b6:aa:4d:e8:59:f8:6f:98:93:03:
         ae:31:fd:fe:e0:c8:7c:d1:dd:6e:b6:be:5a:87:96:fe:9a:f3:
         7a:ca:cc:6d:db:37:a5:e4:a3:d4:21:d1:23:75:0b:ed:ef:c3:
         ff:7f:f4:16:f9:82:85:df:b8:7b:3e:04:45:4c:dc:fd:32:96:
         08:03:d9:e8:91:38:ca:28:f1:32:76:98:2b:a4:b2:5c:4a:70:
         df:ce:ed:50:1d:e7:8f:be:91:6a:1d:4f:0a:62:ee:a5:96:13:
         e3:36:13:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKxjWd0MGdMBeu+cRwpQUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMmVlZmE3YzYwNDhlNmEwYTVhNjVjMDdlM2UyNTUzNDFl
MTQzYmIwHhcNMjUwNDEzMDgwMTM4WhcNMjUwNDE0MDgwMTM4WjAzMTEwLwYDVQQD
EyhkYmJlY2FjNGM5NDI4ZmY0MTRiMjI1YzgyNzE4MWY2YTk0OTIwMjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoO8EtCn76ghJw2W+pOnm29KXPCj2
W4sFgKHTtIhYxZC1FE8SLhQmMBsX37XFlkHZZSf8mVnMkH3gBhaQ3XbCCUkvrpae
e9HZS03csI1dJByXjUwaelNMDV7uTEEP4g2Z8Mm6ukSgZySli/WOUGqUKyvlkUQC
JXVwWlTB1/d6f1w94lCsAE9LilAnVZ9YWmgJuw8yRDRlSwT2FYI6LIEhEZKeYjVe
RIFL4+5UhqU8kb9ttJadNAVbzTf3Bjw/zzX5FdWVQJbsLn7TKIBPIG2HeR0WoUDq
ddp7bcfaXT5Qg+B8NwxV7pKRYh5cHSJkdj9Dm7tpy9LNhW+It4wDPExmQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNu+ysTJQo/0FLIlyCcYH2qUkgIfMB8GA1UdIwQY
MBaAFL8u76fGBI5qClplwH4+JVNB4UO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnk3dnA4WUVqbW9LV21YQWZqNGxVMEhoUTdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yYTYwYWMtZGM4My00Y2EzLWI3ODgt
MjFlYzY1NjVjOWJlLzEvdnk3dnA4WUVqbW9LV21YQWZqNGxVMEhoUTdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8yYTYwYWMtZGM4My00Y2EzLWI3ODgtMjFlYzY1NjVjOWJl
LzEvdnk3dnA4WUVqbW9LV21YQWZqNGxVMEhoUTdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTLlU/y6
96LEVfsAMn4/wmrCb8MajvqsAV4zXnr8vjxdRAbDrXFcoQtnctye1EV2axFeKQ5O
MDP9MUsPbyhC7pww1AhUIPn+RgzSF9UkzG4LiJSL/JnYpyRqOceXUbI9u3FOiNLI
3obDYnwV83zGz5SpuQJa/WIDVWRknk0ZvjPNRXf+fRNXuwokv0EAu3zp9/+Xb05U
U922qk3oWfhvmJMDrjH9/uDIfNHdbra+WoeW/przesrMbds3peSj1CHRI3UL7e/D
/3/0FvmChd+4ez4ERUzc/TKWCAPZ6JE4yijxMnaYK6SyXEpw387tUB3nj76Rah1P
CmLupZYT4zYTug==
-----END CERTIFICATE-----