Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
File:                     Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft (raw, json)
Hash identifier:          V3Cci9L7YlUwPflnZPPy75BLOnNCqvDoKeo51Kn2SA0=
Subject key identifier:   4E:56:25:D2:19:73:DC:75:73:1F:7A:8B:AC:B3:68:A8:36:82:4A:75
Authority key identifier: 06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C
Certificate issuer:       /CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
Certificate serial:       01962E9878B409CD4FBFCA22C1F15AA05187
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft
Manifest number:          1044
Signing time:             Sun 13 Apr 2025 10:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:06 +0000
Files and hashes:         1: Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl (hash: bUI7V6AWLsbTsL6ODpHtqmuVZ14qlGwuK01aKn6ruok=)
                          2: xewq6JL7wUlqxM-_oFBJPbWzZVw.roa (hash: gGSE6S3F5awwRunu5t2dFHcZlnB1N7Se7jB7GkE6lSg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:78:b4:09:cd:4f:bf:ca:22:c1:f1:5a:a0:51:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06cf19e197bdaf94e6100e0e17808e13d4854f9c
        Validity
            Not Before: Apr 13 10:01:06 2025 GMT
            Not After : Apr 14 10:01:06 2025 GMT
        Subject: CN=4e5625d21973dc75731f7a8bacb368a836824a75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c8:7d:36:93:a4:72:19:42:05:64:4d:86:32:
                    57:52:b6:c9:4a:13:46:26:b4:ed:0d:7d:b5:c3:14:
                    fb:db:80:6d:e4:cc:5a:36:0e:2f:43:7b:8d:64:f6:
                    c6:53:6f:7f:77:ff:c2:15:ee:9c:57:8a:ef:7a:26:
                    7d:a7:fb:e7:cd:b0:d0:2f:96:78:c6:cd:ed:c9:d9:
                    ae:bd:23:6a:f0:ee:09:de:e8:29:34:b1:ce:f1:37:
                    be:fc:2d:47:b8:e6:fe:93:ba:1e:7a:99:51:ba:23:
                    4a:01:20:f7:29:8b:cd:16:0d:a8:d9:72:7a:f4:72:
                    a0:5d:f6:1d:8c:3c:3d:93:49:66:8e:e5:ef:8a:f6:
                    7a:e5:f0:1e:bf:56:10:e3:1f:28:f8:0e:e9:77:a0:
                    ff:0b:92:c5:13:cf:15:1d:7e:8f:3f:65:2b:4c:d0:
                    41:56:2e:c7:43:21:1c:af:73:53:6a:18:35:2f:59:
                    5b:4a:99:dd:c1:ef:26:18:a5:f3:1b:b1:f5:35:fb:
                    11:da:a2:7c:20:f6:c1:86:81:82:f9:78:b2:4a:3d:
                    14:c0:0b:a5:86:92:23:54:20:33:d4:ff:1c:8d:aa:
                    9f:17:92:99:40:b4:8b:93:7f:4a:a0:d2:0f:04:5b:
                    41:0d:ec:a8:14:0e:7d:32:3d:a8:16:fe:54:5e:a7:
                    85:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:56:25:D2:19:73:DC:75:73:1F:7A:8B:AC:B3:68:A8:36:82:4A:75
            X509v3 Authority Key Identifier:
                keyid:06:CF:19:E1:97:BD:AF:94:E6:10:0E:0E:17:80:8E:13:D4:85:4F:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/98d620-1599-4863-9629-356505303c49/1/Bs8Z4Ze9r5TmEA4OF4COE9SFT5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:97:68:e0:5b:20:cd:c6:1f:01:b0:13:d3:6f:97:24:6c:77:
         10:da:82:5f:7e:a7:7b:d8:91:ee:bc:3f:5f:ab:06:fe:f6:df:
         ea:c1:9c:f0:61:82:aa:c5:e8:75:4f:3a:3e:32:ad:69:9d:cc:
         6a:7c:2a:de:b8:c0:7c:53:5e:23:20:26:4b:7d:d5:09:c2:24:
         59:c6:b7:0e:3d:ec:24:f6:0a:b7:ac:21:c0:01:4e:1f:79:36:
         af:76:0b:3a:cc:59:92:f7:8a:d5:3d:a2:14:37:7f:fb:d5:a1:
         d9:34:2a:20:79:ae:53:f3:16:85:0a:7e:f9:54:7a:e7:c0:ae:
         29:fc:ac:7c:15:d5:1b:44:05:dc:be:aa:c7:6e:39:3c:ff:af:
         22:44:22:54:f6:3a:0c:95:7c:83:7a:cf:55:a9:f8:d6:8b:85:
         16:72:50:76:4b:20:7c:86:b4:56:ee:24:09:e3:4d:de:3a:3d:
         5e:a2:cc:fb:fa:60:69:a7:28:e5:bd:05:c0:c2:d3:cc:e4:3a:
         03:67:69:54:89:bb:9d:81:4c:02:93:35:06:c1:25:4d:17:30:
         ec:f8:08:d3:44:b8:60:4d:38:35:1a:09:8c:2b:f9:6f:ea:1f:
         a6:1a:b2:f8:ba:ff:b8:46:45:d7:3e:ae:79:f7:4f:aa:b4:44:
         6c:38:84:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumHi0Cc1Pv8oiwfFaoFGHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2Y2YxOWUxOTdiZGFmOTRlNjEwMGUwZTE3ODA4ZTEzZDQ4
NTRmOWMwHhcNMjUwNDEzMTAwMTA2WhcNMjUwNDE0MTAwMTA2WjAzMTEwLwYDVQQD
Eyg0ZTU2MjVkMjE5NzNkYzc1NzMxZjdhOGJhY2IzNjhhODM2ODI0YTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMh9NpOkchlCBWRNhjJXUrbJShNG
JrTtDX21wxT724Bt5MxaNg4vQ3uNZPbGU29/d//CFe6cV4rveiZ9p/vnzbDQL5Z4
xs3tydmuvSNq8O4J3ugpNLHO8Te+/C1HuOb+k7oeeplRuiNKASD3KYvNFg2o2XJ6
9HKgXfYdjDw9k0lmjuXvivZ65fAev1YQ4x8o+A7pd6D/C5LFE88VHX6PP2UrTNBB
Vi7HQyEcr3NTahg1L1lbSpndwe8mGKXzG7H1NfsR2qJ8IPbBhoGC+XiySj0UwAul
hpIjVCAz1P8cjaqfF5KZQLSLk39KoNIPBFtBDeyoFA59Mj2oFv5UXqeFLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5WJdIZc9x1cx96i6yzaKg2gkp1MB8GA1UdIwQY
MBaAFAbPGeGXva+U5hAODheAjhPUhU+cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnM4WjRaZTlyNVRtRUE0T0Y0Q09FOVNGVDV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi85OGQ2MjAtMTU5OS00ODYzLTk2Mjkt
MzU2NTA1MzAzYzQ5LzEvQnM4WjRaZTlyNVRtRUE0T0Y0Q09FOVNGVDV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi85OGQ2MjAtMTU5OS00ODYzLTk2MjktMzU2NTA1MzAzYzQ5
LzEvQnM4WjRaZTlyNVRtRUE0T0Y0Q09FOVNGVDV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL5do4Fsg
zcYfAbAT02+XJGx3ENqCX36ne9iR7rw/X6sG/vbf6sGc8GGCqsXodU86PjKtaZ3M
anwq3rjAfFNeIyAmS33VCcIkWca3Dj3sJPYKt6whwAFOH3k2r3YLOsxZkveK1T2i
FDd/+9Wh2TQqIHmuU/MWhQp++VR658CuKfysfBXVG0QF3L6qx245PP+vIkQiVPY6
DJV8g3rPVan41ouFFnJQdksgfIa0Vu4kCeNN3jo9XqLM+/pgaaco5b0FwMLTzOQ6
A2dpVIm7nYFMApM1BsElTRcw7PgI00S4YE04NRoJjCv5b+ofphqy+Lr/uEZF1z6u
efdPqrREbDiERg==
-----END CERTIFICATE-----