Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
File:                     BGWHkB8TB5vtiYL2KendFUaM_vE.mft (raw, json)
Hash identifier:          RWf6UE9jxKTVpAGC5Cr6GdEw1Pz+c7+kEXNE93lz104=
Subject key identifier:   58:A9:09:B2:30:E0:22:CC:6D:E6:8D:2C:62:80:C2:FC:C6:F0:5B:F9
Authority key identifier: 04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1
Certificate issuer:       /CN=046587901f13079bed8982f629e9dd15468cfef1
Certificate serial:       01962DF3F1A028C06CF4931554EB9FE3E84F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft
Manifest number:          0EDF
Signing time:             Sun 13 Apr 2025 07:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:23 +0000
Files and hashes:         1: BGWHkB8TB5vtiYL2KendFUaM_vE.crl (hash: 0CO8akQ7cqM5DkFx3a664DFseeI4LvnedKxJox90enI=)
                          2: elV1APoKiSk_9XkOBJQhYkqxHiw.roa (hash: 8zT6bhkdxlFlI+FWNJggqU5g/ZNnR60ACpbk2nou4yY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f1:a0:28:c0:6c:f4:93:15:54:eb:9f:e3:e8:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=046587901f13079bed8982f629e9dd15468cfef1
        Validity
            Not Before: Apr 13 07:01:23 2025 GMT
            Not After : Apr 14 07:01:23 2025 GMT
        Subject: CN=58a909b230e022cc6de68d2c6280c2fcc6f05bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:21:91:30:3e:9f:19:4b:3b:99:58:9c:86:cd:
                    94:8c:81:7c:41:5d:6e:7f:95:b3:ae:6b:1a:f1:ed:
                    0a:51:a4:83:e6:33:91:6b:45:52:4e:1c:16:bf:0b:
                    b9:76:00:9c:90:98:1d:f3:72:c2:f2:d3:f6:c5:6e:
                    e5:0e:96:22:51:f4:7a:2d:f5:31:cf:67:39:3b:82:
                    3a:08:7f:1d:01:82:32:a5:98:e4:fb:0b:3d:00:e3:
                    f8:1d:0c:68:54:bd:d8:0c:7e:da:61:9d:ae:ed:69:
                    7d:9a:95:bc:b9:9e:59:0f:d5:f6:1f:59:46:ce:9e:
                    31:58:c0:85:d0:a1:33:ff:16:92:98:29:02:9b:14:
                    a8:85:45:6b:72:b0:58:79:98:b6:ab:89:0c:ab:83:
                    df:a9:62:75:57:e6:84:11:79:ee:98:be:18:35:74:
                    0a:ce:17:d4:d5:d9:d1:a9:78:16:11:08:0c:49:ec:
                    b7:5b:89:36:8b:76:96:ca:30:51:86:d8:9d:e2:87:
                    c7:2f:f4:30:30:24:51:c7:7f:06:30:a6:6f:ca:f8:
                    df:6e:cf:2a:71:22:bd:ee:0f:af:de:c1:81:49:d1:
                    3a:ec:19:88:ac:e7:73:1c:77:79:56:92:f8:62:a0:
                    db:95:e5:71:5f:59:e8:60:87:5c:be:78:d0:80:b8:
                    2b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A9:09:B2:30:E0:22:CC:6D:E6:8D:2C:62:80:C2:FC:C6:F0:5B:F9
            X509v3 Authority Key Identifier:
                keyid:04:65:87:90:1F:13:07:9B:ED:89:82:F6:29:E9:DD:15:46:8C:FE:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGWHkB8TB5vtiYL2KendFUaM_vE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/63d394-42bd-40b1-a2a1-74d5901a8c56/1/BGWHkB8TB5vtiYL2KendFUaM_vE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:4e:63:ad:a3:eb:bf:26:46:19:0e:55:68:85:73:09:96:af:
         95:27:f6:d9:67:64:b1:ea:b1:fc:fb:fb:6a:92:d8:80:cb:55:
         6c:de:a5:0b:f1:bb:3a:4d:0e:e4:3c:84:3d:b6:75:7e:44:24:
         d4:05:98:80:50:e5:88:8a:60:0d:d0:eb:c5:0c:f4:e4:c1:d1:
         b1:fe:e0:95:94:47:2c:82:ad:3c:5e:a0:6a:4e:61:86:6c:85:
         f7:13:97:29:19:df:d7:f3:f2:f0:0f:24:ed:aa:ce:c3:9e:ff:
         ea:64:b3:b2:50:c7:06:03:ea:e4:06:17:07:3c:2b:1d:ce:74:
         77:5f:e0:d6:50:75:20:45:7c:cb:57:21:cb:2d:9c:bc:e6:4e:
         5d:5d:d7:68:7d:20:d9:6e:9a:18:e3:f1:35:76:ff:38:d8:f1:
         80:64:26:dd:78:9d:23:e8:ec:81:8d:33:39:2f:51:8d:65:97:
         d5:f8:10:74:e5:a9:60:d8:e7:21:f6:13:de:36:27:91:ac:41:
         28:9c:7b:71:d7:d6:62:57:dc:79:9c:4e:99:53:da:4f:09:c6:
         d6:c3:2f:b0:15:8d:34:38:80:b5:f7:c9:5f:d9:1f:aa:90:b1:
         52:ac:18:37:6c:37:75:89:1b:f2:e7:be:2b:36:a2:88:64:a1:
         f7:f4:a4:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt8/GgKMBs9JMVVOuf4+hPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NjU4NzkwMWYxMzA3OWJlZDg5ODJmNjI5ZTlkZDE1NDY4
Y2ZlZjEwHhcNMjUwNDEzMDcwMTIzWhcNMjUwNDE0MDcwMTIzWjAzMTEwLwYDVQQD
Eyg1OGE5MDliMjMwZTAyMmNjNmRlNjhkMmM2MjgwYzJmY2M2ZjA1YmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yGRMD6fGUs7mVichs2UjIF8QV1u
f5Wzrmsa8e0KUaSD5jORa0VSThwWvwu5dgCckJgd83LC8tP2xW7lDpYiUfR6LfUx
z2c5O4I6CH8dAYIypZjk+ws9AOP4HQxoVL3YDH7aYZ2u7Wl9mpW8uZ5ZD9X2H1lG
zp4xWMCF0KEz/xaSmCkCmxSohUVrcrBYeZi2q4kMq4PfqWJ1V+aEEXnumL4YNXQK
zhfU1dnRqXgWEQgMSey3W4k2i3aWyjBRhtid4ofHL/QwMCRRx38GMKZvyvjfbs8q
cSK97g+v3sGBSdE67BmIrOdzHHd5VpL4YqDbleVxX1noYIdcvnjQgLgrTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFipCbIw4CLMbeaNLGKAwvzG8Fv5MB8GA1UdIwQY
MBaAFARlh5AfEweb7YmC9inp3RVGjP7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkdXSGtCOFRCNXZ0aVlMMktlbmRGVWFNX3ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82M2QzOTQtNDJiZC00MGIxLWEyYTEt
NzRkNTkwMWE4YzU2LzEvQkdXSGtCOFRCNXZ0aVlMMktlbmRGVWFNX3ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82M2QzOTQtNDJiZC00MGIxLWEyYTEtNzRkNTkwMWE4YzU2
LzEvQkdXSGtCOFRCNXZ0aVlMMktlbmRGVWFNX3ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXU5jraPr
vyZGGQ5VaIVzCZavlSf22Wdkseqx/Pv7apLYgMtVbN6lC/G7Ok0O5DyEPbZ1fkQk
1AWYgFDliIpgDdDrxQz05MHRsf7glZRHLIKtPF6gak5hhmyF9xOXKRnf1/Py8A8k
7arOw57/6mSzslDHBgPq5AYXBzwrHc50d1/g1lB1IEV8y1chyy2cvOZOXV3XaH0g
2W6aGOPxNXb/ONjxgGQm3XidI+jsgY0zOS9RjWWX1fgQdOWpYNjnIfYT3jYnkaxB
KJx7cdfWYlfceZxOmVPaTwnG1sMvsBWNNDiAtffJX9kfqpCxUqwYN2w3dYkb8ue+
KzaiiGSh9/Sk+A==
-----END CERTIFICATE-----