Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
File:                     BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft (raw, json)
Hash identifier:          9AsUylDnrNMRmGLXH1HVF1ID8UaVDUrzpxDCTQvlnlA=
Subject key identifier:   35:FE:3E:2E:71:F2:E0:E9:7C:D5:FA:0A:09:58:50:2B:56:54:96:28
Authority key identifier: 06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C
Certificate issuer:       /CN=06c3b8b5f37e21068250571f4db83b4714468a2c
Certificate serial:       01962DF419B8F6987800E676B4F6848E0D27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:34 +0000
Files and hashes:         1: BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl (hash: 8okSS9aN/0GPuJzxqLfPnmELf18ZvFz/7W4Ad1Zz5Fg=)
                          2: pa3jfF65O1LeusJmZP9_Hq2CHUA.roa (hash: DB5zR9clFk0B3PVw7uwrAY7t9bq1MxHbsRq/+LHkr9E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:19:b8:f6:98:78:00:e6:76:b4:f6:84:8e:0d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06c3b8b5f37e21068250571f4db83b4714468a2c
        Validity
            Not Before: Apr 13 07:01:34 2025 GMT
            Not After : Apr 14 07:01:34 2025 GMT
        Subject: CN=35fe3e2e71f2e0e97cd5fa0a0958502b56549628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:39:b3:0c:38:4f:b2:38:0d:a4:90:49:b5:c5:
                    95:2b:60:8a:c8:93:3b:df:2d:86:2a:fc:ca:d1:46:
                    1e:48:4d:b6:4b:0b:a4:b0:0a:bc:da:05:f0:34:c7:
                    93:0d:fc:95:52:11:a4:cd:15:8b:dd:67:2a:33:ea:
                    c1:86:5d:26:da:5b:de:25:37:8c:bd:5f:88:36:11:
                    f2:3e:23:fe:8e:1b:93:df:d7:71:47:63:38:c1:24:
                    b3:45:8b:13:9a:72:5c:2d:c8:1a:7d:01:54:75:53:
                    62:e6:e2:d9:f8:26:36:d3:18:13:b0:81:c6:4d:21:
                    60:3c:5c:c8:da:27:f8:00:1c:c2:fc:82:e8:ef:04:
                    90:63:b0:20:70:d3:72:d8:17:f9:c0:10:ea:14:a9:
                    cd:36:6e:ee:f5:89:2d:39:10:dc:c8:6e:0b:17:fb:
                    ba:84:81:92:22:70:c2:56:e9:e7:60:fc:79:57:fe:
                    4c:de:dc:e4:13:1c:c9:75:c1:90:aa:dc:8b:23:81:
                    fb:76:ea:05:96:04:3c:5d:ef:72:2d:be:e0:9c:f3:
                    2e:e7:7f:b3:57:7f:e3:7b:6f:5b:40:1b:05:63:ae:
                    20:d8:f8:9c:44:fa:6a:75:50:a3:1e:48:55:70:ca:
                    92:6a:e1:a2:44:91:d0:ad:8d:db:9b:1c:66:60:94:
                    dc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:FE:3E:2E:71:F2:E0:E9:7C:D5:FA:0A:09:58:50:2B:56:54:96:28
            X509v3 Authority Key Identifier:
                keyid:06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:c2:08:2f:35:79:1a:0d:64:6c:e3:15:f6:12:05:e5:5f:4c:
         c8:8a:84:ba:6e:f9:6e:ba:43:5e:79:8b:96:b1:e0:d4:61:9c:
         b8:40:6d:9f:5a:fb:8d:5d:c5:48:4f:f6:42:15:1d:20:15:07:
         dd:93:b0:0b:de:f2:cd:41:03:ab:84:61:55:7d:e6:62:f2:04:
         aa:3d:e5:b0:57:5b:6f:a1:60:90:55:ee:77:35:b1:15:1a:6d:
         b5:e6:45:34:ea:32:ca:15:26:38:dc:fd:cd:25:b8:43:17:9f:
         30:a9:08:bb:1c:5b:b5:56:5d:f6:b2:ae:ff:0a:7c:cf:8a:dd:
         4a:15:40:a6:40:55:98:d0:75:76:8c:ef:ec:1d:07:8c:9b:de:
         e8:16:7b:4d:34:a0:64:de:a8:ea:5e:f8:5a:e3:2c:03:d5:2b:
         c6:79:66:2b:8a:ae:70:5c:7f:2c:2d:f8:6c:f7:83:12:05:a5:
         0e:af:f1:30:35:3b:52:ea:11:8a:ad:82:2a:2e:ca:55:a8:69:
         87:d6:6f:d7:aa:b5:90:af:b1:ab:9d:d1:7e:fe:06:07:e9:48:
         3f:02:19:4d:73:d9:9e:7b:a7:61:f3:59:d8:b4:72:3d:97:fa:
         7e:b3:c0:c8:be:83:56:dc:80:db:8c:ad:e6:cc:bd:f0:f8:4d:
         33:94:c8:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt9Bm49ph4AOZ2tPaEjg0nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YzNiOGI1ZjM3ZTIxMDY4MjUwNTcxZjRkYjgzYjQ3MTQ0
NjhhMmMwHhcNMjUwNDEzMDcwMTM0WhcNMjUwNDE0MDcwMTM0WjAzMTEwLwYDVQQD
EygzNWZlM2UyZTcxZjJlMGU5N2NkNWZhMGEwOTU4NTAyYjU2NTQ5NjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TmzDDhPsjgNpJBJtcWVK2CKyJM7
3y2GKvzK0UYeSE22SwuksAq82gXwNMeTDfyVUhGkzRWL3WcqM+rBhl0m2lveJTeM
vV+INhHyPiP+jhuT39dxR2M4wSSzRYsTmnJcLcgafQFUdVNi5uLZ+CY20xgTsIHG
TSFgPFzI2if4ABzC/ILo7wSQY7AgcNNy2Bf5wBDqFKnNNm7u9YktORDcyG4LF/u6
hIGSInDCVunnYPx5V/5M3tzkExzJdcGQqtyLI4H7duoFlgQ8Xe9yLb7gnPMu53+z
V3/je29bQBsFY64g2PicRPpqdVCjHkhVcMqSauGiRJHQrY3bmxxmYJTcrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDX+Pi5x8uDpfNX6CglYUCtWVJYoMB8GA1UdIwQY
MBaAFAbDuLXzfiEGglBXH024O0cURoosMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnNPNHRmTi1JUWFDVUZjZlRiZzdSeFJHaWl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9lMjQzZDAtMTlmZS00ZGEzLWEyMGEt
ZTZlZmZkM2NlZjMyLzEvQnNPNHRmTi1JUWFDVUZjZlRiZzdSeFJHaWl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9lMjQzZDAtMTlmZS00ZGEzLWEyMGEtZTZlZmZkM2NlZjMy
LzEvQnNPNHRmTi1JUWFDVUZjZlRiZzdSeFJHaWl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQMIILzV5
Gg1kbOMV9hIF5V9MyIqEum75brpDXnmLlrHg1GGcuEBtn1r7jV3FSE/2QhUdIBUH
3ZOwC97yzUEDq4RhVX3mYvIEqj3lsFdbb6FgkFXudzWxFRptteZFNOoyyhUmONz9
zSW4QxefMKkIuxxbtVZd9rKu/wp8z4rdShVApkBVmNB1dozv7B0HjJve6BZ7TTSg
ZN6o6l74WuMsA9UrxnlmK4qucFx/LC34bPeDEgWlDq/xMDU7UuoRiq2CKi7KVahp
h9Zv16q1kK+xq53Rfv4GB+lIPwIZTXPZnnunYfNZ2LRyPZf6frPAyL6DVtyA24yt
5sy98PhNM5TI/g==
-----END CERTIFICATE-----