Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
File:                     BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft (raw, json)
Hash identifier:          kxUQ9JBuvPRfEGz9xmCakzI/12egaWXaLcJKteNs/0M=
Subject key identifier:   90:02:41:3B:43:BB:BF:F6:0E:A0:E9:0F:EE:3F:56:BD:22:36:F6:BF
Authority key identifier: 05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
Certificate issuer:       /CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Certificate serial:       01962F3D73C06D5D579661E1B987944804F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
Manifest number:          07A9
Signing time:             Sun 13 Apr 2025 13:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:18 +0000
Files and hashes:         1: 8wFv-nR7He4By0-yWjzDqasqWiA.roa (hash: Tegeoj66rXi91zg3veSuF/d35ix15E2u1G/QxmxwwNg=)
                          2: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl (hash: 5H+q8GzRYsTn13mGk3zCpxVtJcyiTrPRF/UC/op6og8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:73:c0:6d:5d:57:96:61:e1:b9:87:94:48:04:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056f4a43e0b0651247fc3629c627b9c385f0c376
        Validity
            Not Before: Apr 13 13:01:18 2025 GMT
            Not After : Apr 14 13:01:18 2025 GMT
        Subject: CN=9002413b43bbbff60ea0e90fee3f56bd2236f6bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2b:f0:b6:a9:2c:65:b6:96:0c:1b:7a:d7:5b:
                    4e:f1:10:45:5c:71:7e:6d:d9:cb:a1:19:0b:ae:48:
                    65:bc:01:0f:be:f7:83:7e:ec:44:74:8a:72:01:b6:
                    67:86:89:2c:55:81:85:f1:23:ef:65:40:52:47:85:
                    4d:40:1a:d5:32:97:b4:e8:5e:7b:20:bb:e6:53:8e:
                    ca:18:d8:4b:8c:51:c0:a0:63:c2:7f:32:43:e1:f8:
                    10:72:97:f6:44:f9:fb:e7:8f:ea:b6:ae:6a:1b:8e:
                    39:ff:8d:a6:5e:62:45:2e:13:2c:47:db:e0:54:d3:
                    1e:78:a4:24:4a:35:da:d8:cc:fe:3f:f2:04:f4:c5:
                    d6:15:41:e5:21:d4:57:95:38:ba:2d:5e:30:3a:e7:
                    61:43:7f:7b:88:7e:ed:40:34:b5:dd:b0:4e:2e:ff:
                    f0:83:89:02:3b:f5:1c:b0:01:a8:e5:2c:5f:e8:22:
                    70:6b:4d:6c:29:ab:87:45:24:0a:60:32:27:96:02:
                    07:bb:79:fd:54:96:af:15:e0:a0:17:d6:e4:4e:e4:
                    ff:bd:1c:fc:6f:96:e8:09:2a:aa:b5:9f:36:ed:d6:
                    c1:67:2b:85:e5:00:cb:aa:cd:69:bd:2c:a1:37:3e:
                    6c:aa:18:1d:f1:cf:99:79:66:ee:45:f0:d2:e3:4c:
                    12:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:02:41:3B:43:BB:BF:F6:0E:A0:E9:0F:EE:3F:56:BD:22:36:F6:BF
            X509v3 Authority Key Identifier:
                keyid:05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:e2:c1:77:36:6f:3a:0d:32:28:2b:f9:ca:27:9e:6b:f9:0b:
         2c:00:da:24:c4:44:4a:94:18:35:ff:86:6d:d4:fd:c4:4a:32:
         46:20:4f:b7:77:2e:7a:f2:e0:de:e4:57:6a:cf:c0:77:54:12:
         5a:5e:25:49:72:be:50:2f:07:a7:67:6e:bb:3e:69:59:fd:4e:
         5b:61:10:d6:2c:dd:c3:2c:8f:9f:87:9c:5b:c9:8b:c9:52:a7:
         53:11:e3:2c:45:d6:ee:31:41:3a:eb:f0:c9:4d:ce:13:51:5d:
         25:8c:da:49:97:7f:86:ba:8e:e3:29:1a:a1:7e:ac:c6:85:b6:
         eb:0e:48:27:3a:1a:eb:fa:2a:08:d3:67:3a:a1:8f:b2:0e:d6:
         5d:57:50:96:0a:21:38:09:3b:df:45:c1:8c:b4:5c:dd:9e:2f:
         b2:e9:d2:39:1c:19:b2:4e:f0:73:b2:9a:6e:77:9c:a1:38:8c:
         69:8f:7f:72:ea:8f:84:ab:e2:23:00:07:02:b6:02:44:d2:2e:
         f0:84:61:f6:ae:29:81:bc:7c:49:97:c4:80:18:fe:b5:32:24:
         0f:06:40:94:76:44:a7:2d:61:8b:15:51:55:57:d4:65:37:a3:
         81:e3:63:45:77:a7:64:83:bc:fd:96:aa:af:72:c0:67:d3:2b:
         31:63:de:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPXPAbV1XlmHhuYeUSAT5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NmY0YTQzZTBiMDY1MTI0N2ZjMzYyOWM2MjdiOWMzODVm
MGMzNzYwHhcNMjUwNDEzMTMwMTE4WhcNMjUwNDE0MTMwMTE4WjAzMTEwLwYDVQQD
Eyg5MDAyNDEzYjQzYmJiZmY2MGVhMGU5MGZlZTNmNTZiZDIyMzZmNmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArivwtqksZbaWDBt611tO8RBFXHF+
bdnLoRkLrkhlvAEPvveDfuxEdIpyAbZnhoksVYGF8SPvZUBSR4VNQBrVMpe06F57
ILvmU47KGNhLjFHAoGPCfzJD4fgQcpf2RPn754/qtq5qG445/42mXmJFLhMsR9vg
VNMeeKQkSjXa2Mz+P/IE9MXWFUHlIdRXlTi6LV4wOudhQ397iH7tQDS13bBOLv/w
g4kCO/UcsAGo5Sxf6CJwa01sKauHRSQKYDInlgIHu3n9VJavFeCgF9bkTuT/vRz8
b5boCSqqtZ827dbBZyuF5QDLqs1pvSyhNz5sqhgd8c+ZeWbuRfDS40wS4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJACQTtDu7/2DqDpD+4/Vr0iNva/MB8GA1UdIwQY
MBaAFAVvSkPgsGUSR/w2KcYnucOF8MN2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yNWI2Y2UtYzIxMS00NjY4LTlhNDct
ZmU1OGY4NGRkM2ZkLzEvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yNWI2Y2UtYzIxMS00NjY4LTlhNDctZmU1OGY4NGRkM2Zk
LzEvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOLBdzZv
Og0yKCv5yieea/kLLADaJMRESpQYNf+GbdT9xEoyRiBPt3cuevLg3uRXas/Ad1QS
Wl4lSXK+UC8Hp2duuz5pWf1OW2EQ1izdwyyPn4ecW8mLyVKnUxHjLEXW7jFBOuvw
yU3OE1FdJYzaSZd/hrqO4ykaoX6sxoW26w5IJzoa6/oqCNNnOqGPsg7WXVdQlgoh
OAk730XBjLRc3Z4vsunSORwZsk7wc7KabnecoTiMaY9/cuqPhKviIwAHArYCRNIu
8IRh9q4pgbx8SZfEgBj+tTIkDwZAlHZEpy1hixVRVVfUZTejgeNjRXenZIO8/Zaq
r3LAZ9MrMWPeEA==
-----END CERTIFICATE-----