Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
File:                     bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft (raw, json)
Hash identifier:          MgqUmaZ4JyiSM6gFkv22w+Zuda4u2jGtQDlT4TFrgsU=
Subject key identifier:   82:89:B9:E1:AA:3D:3E:7C:A3:3E:0B:C5:57:9B:D8:1C:CA:63:15:D5
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Certificate issuer:       /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial:       01962E618CA6069E781BC7E0B74A1BE49B7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
Manifest number:          14FC
Signing time:             Sun 13 Apr 2025 09:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:06 +0000
Files and hashes:         1: 1-azSbIQFoiVO3W2ZCWv9_QAR8i8.roa (hash: FijndDQD15Q5KHsLR44grscBnJeuQXrV0d05uzJTvBY=)
                          2: AVQz8sHW23ixrQTRE03QG3YvTuU.roa (hash: SrjP+GRC/1VbpeKx6pNwtWpLK3oTGv/QT5J47D5iwOs=)
                          3: EVOvB7sDScf41BENRNWFN92qCOc.roa (hash: v9rFJdO6bVhF4g/DVUTlP2lnOU6R9fjrxCCGGRzmhBo=)
                          4: QjaJHSSDpfkaW3VbsOBmx9Mwnzo.roa (hash: lX+/PQmgzRGcO03gKK10JR9EWKqWcF8NtT9etzyJ8ik=)
                          5: RXltaGeVSLLvEtVhuI8kryyqAEY.roa (hash: Sq4O0eAJlnMKv+pxipVDsrh+Q6PzS4fGsNzZeo0CJmQ=)
                          6: ZRpAC-jGxlGBX0TpAicAbhbJP7s.roa (hash: AYh7o4pPNeSE82/KXuBs2qGeurfhiF1NFTbsPaoM8YM=)
                          7: bO4Y5DyMm5PVD_pzuU-0jz4Eg9I.roa (hash: 5jBL9u4QzLNJlmw7QwIFNZbn9Ii2njf8Ib+9j7ROPhw=)
                          8: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl (hash: Gj7eKWXx+EI1hi4wV9qgAkaxKmxjylAo2aYkYoo9Km4=)
                          9: vvWlGNuFGuXkBItTH9Zxu-JLKW8.roa (hash: 1uFZJRbOaGcxjskFgOQZk9WcrerBZqMlxk6lZA11nCQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8c:a6:06:9e:78:1b:c7:e0:b7:4a:1b:e4:9b:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
        Validity
            Not Before: Apr 13 09:01:06 2025 GMT
            Not After : Apr 14 09:01:06 2025 GMT
        Subject: CN=8289b9e1aa3d3e7ca33e0bc5579bd81cca6315d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9a:ef:ac:65:9d:71:93:aa:22:4b:7c:50:a2:
                    a4:25:88:08:79:d0:6d:ec:2a:73:db:18:26:c5:ba:
                    32:d6:bb:9a:11:ef:06:9e:f4:4e:34:85:ab:fb:9a:
                    7b:64:b3:6d:a8:cc:c7:19:26:a1:07:3f:4a:8a:0b:
                    cc:d9:95:f1:f4:f9:a5:8c:91:8f:f2:6c:a3:70:51:
                    f2:75:29:1c:c9:89:43:a4:1b:70:6e:07:bc:48:77:
                    5b:8e:c9:07:74:ed:5a:88:5a:90:e0:3e:52:41:42:
                    af:99:34:90:57:37:6c:21:52:7c:de:ef:73:ec:81:
                    5a:a3:d9:03:e1:7f:fc:bd:74:2e:fe:bb:a9:5a:04:
                    65:10:6b:f8:0f:18:c3:96:7b:a9:7b:16:ab:f7:2e:
                    eb:38:19:30:88:98:8b:a8:f0:b8:f0:d9:84:51:3b:
                    c4:d2:61:3c:f8:79:39:14:6a:3b:93:f4:32:74:84:
                    e3:aa:50:75:48:05:36:d5:0e:8d:a6:bd:88:dc:70:
                    f0:6b:fb:f0:2e:7d:73:fc:70:3a:21:db:4b:60:41:
                    2c:3d:d4:08:80:39:6b:7d:ac:f1:ec:75:2e:ee:1d:
                    87:95:87:00:d3:63:ef:be:7f:ca:a1:5d:b0:61:42:
                    f2:32:88:14:45:22:1b:0e:c8:0f:e1:5d:0a:84:94:
                    5a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:89:B9:E1:AA:3D:3E:7C:A3:3E:0B:C5:57:9B:D8:1C:CA:63:15:D5
            X509v3 Authority Key Identifier:
                keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:d6:8a:54:e2:e9:cd:31:7f:0d:0d:9d:2f:86:f3:6a:12:9f:
         44:1c:ab:fe:ba:7d:38:a3:1c:47:68:6e:e4:e5:c2:45:1a:1d:
         8f:b7:e9:13:10:2e:16:35:55:da:08:0b:eb:1d:a9:54:ed:2d:
         61:a6:b0:76:5a:e1:f9:fb:ee:d1:58:9d:d3:4f:fe:e1:4b:cf:
         76:2f:37:5d:c2:96:a0:a2:92:52:85:44:69:33:2b:67:df:80:
         69:97:20:e6:30:3c:22:f1:92:15:7a:86:fd:34:33:1f:84:8f:
         9c:4f:76:e4:e6:7c:4a:3e:1e:df:27:10:1a:69:04:ac:94:73:
         a6:05:0a:3a:8b:1f:36:d0:53:af:82:6a:3e:99:5e:29:23:fc:
         62:57:20:24:46:1d:19:1d:a9:47:7c:41:4d:5a:e8:2b:68:fc:
         08:60:64:9e:b2:50:e6:c2:8b:72:7e:2e:f2:1a:9d:83:cd:63:
         4b:e2:3a:47:dc:9d:59:e9:ef:e5:c6:e4:d5:39:d8:3e:4a:24:
         7e:fa:30:a6:28:01:f8:05:b7:66:fb:ea:38:d0:3c:95:32:31:
         c5:2f:ce:17:dc:5f:4f:00:1e:0c:20:00:8f:36:69:29:94:53:
         30:30:56:35:c0:07:11:56:2d:c7:81:96:84:4d:b2:be:bc:d6:
         1d:4e:e9:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYYymBp54G8fgt0ob5Jt6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMDY5ZTE5ZTEyYzEwNDAwNGU4YjRiNzVmOGE3Nzg5Yjdl
MTEzOTYwHhcNMjUwNDEzMDkwMTA2WhcNMjUwNDE0MDkwMTA2WjAzMTEwLwYDVQQD
Eyg4Mjg5YjllMWFhM2QzZTdjYTMzZTBiYzU1NzliZDgxY2NhNjMxNWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5rvrGWdcZOqIkt8UKKkJYgIedBt
7Cpz2xgmxboy1ruaEe8GnvRONIWr+5p7ZLNtqMzHGSahBz9KigvM2ZXx9PmljJGP
8myjcFHydSkcyYlDpBtwbge8SHdbjskHdO1aiFqQ4D5SQUKvmTSQVzdsIVJ83u9z
7IFao9kD4X/8vXQu/rupWgRlEGv4DxjDlnupexar9y7rOBkwiJiLqPC48NmEUTvE
0mE8+Hk5FGo7k/QydITjqlB1SAU21Q6Npr2I3HDwa/vwLn1z/HA6IdtLYEEsPdQI
gDlrfazx7HUu7h2HlYcA02Pvvn/KoV2wYULyMogURSIbDsgP4V0KhJRaZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKJueGqPT58oz4LxVeb2BzKYxXVMB8GA1UdIwQY
MBaAFG0GnhnhLBBABOi0t1+Kd4m34ROWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlFhZUdlRXNFRUFFNkxTM1g0cDNpYmZoRTVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jZjY0ZjYtMDc4OS00M2UzLWJkNmIt
N2JmZjI5NmM2YjAyLzEvYlFhZUdlRXNFRUFFNkxTM1g0cDNpYmZoRTVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jZjY0ZjYtMDc4OS00M2UzLWJkNmItN2JmZjI5NmM2YjAy
LzEvYlFhZUdlRXNFRUFFNkxTM1g0cDNpYmZoRTVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg9aKVOLp
zTF/DQ2dL4bzahKfRByr/rp9OKMcR2hu5OXCRRodj7fpExAuFjVV2ggL6x2pVO0t
Yaawdlrh+fvu0Vid00/+4UvPdi83XcKWoKKSUoVEaTMrZ9+AaZcg5jA8IvGSFXqG
/TQzH4SPnE925OZ8Sj4e3ycQGmkErJRzpgUKOosfNtBTr4JqPpleKSP8YlcgJEYd
GR2pR3xBTVroK2j8CGBknrJQ5sKLcn4u8hqdg81jS+I6R9ydWenv5cbk1TnYPkok
fvowpigB+AW3ZvvqONA8lTIxxS/OF9xfTwAeDCAAjzZpKZRTMDBWNcAHEVYtx4GW
hE2yvrzWHU7pug==
-----END CERTIFICATE-----