Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
File:                     BnhRF5hq2qQ3vsMKK_nxV6klffI.mft (raw, json)
Hash identifier:          8yE6w3DHn0SLGWR475QX4HwLueImma2tL4Q2Jpl9u8c=
Subject key identifier:   99:3F:F4:17:80:A6:41:BC:BF:9A:1F:04:77:01:0F:08:39:87:43:74
Authority key identifier: 06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2
Certificate issuer:       /CN=06785117986adaa437bec30a2bf9f157a9257df2
Certificate serial:       01962F067AE85F636BDDA2802EB0B4AD128D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:15 +0000
Files and hashes:         1: BnhRF5hq2qQ3vsMKK_nxV6klffI.crl (hash: B1E9w633yCkkbLYt0C76OYR4AsCjsRBXQw9+WnM9blI=)
                          2: OseFlpN5BBrbNEKlLXg6nEL0mf0.roa (hash: 656ZLuWKc6figtfDxdhxBQM6z66wyeYFhuGY7fphkn0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:7a:e8:5f:63:6b:dd:a2:80:2e:b0:b4:ad:12:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06785117986adaa437bec30a2bf9f157a9257df2
        Validity
            Not Before: Apr 13 12:01:15 2025 GMT
            Not After : Apr 14 12:01:15 2025 GMT
        Subject: CN=993ff41780a641bcbf9a1f0477010f0839874374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4c:1f:40:40:0f:a4:a4:9c:4f:09:f8:45:6a:
                    63:dd:a9:68:51:bb:3c:61:02:8d:df:e7:55:39:4d:
                    04:92:ba:04:38:1e:82:2e:9d:59:83:dc:e3:5e:84:
                    a0:1d:3d:5d:ce:ff:44:75:51:d9:03:b6:51:e5:53:
                    53:86:7e:12:5c:41:94:9e:f7:2d:fb:f6:d4:28:c1:
                    26:c9:85:62:e6:87:3f:a1:8a:8e:3c:1e:54:04:0c:
                    74:a1:41:aa:67:46:68:81:c7:b3:9b:33:95:49:2b:
                    41:9e:93:5f:ca:57:a3:05:b6:f5:15:f7:6a:ad:b6:
                    85:92:72:a7:57:fe:61:6a:a1:44:f4:a9:f2:47:d8:
                    44:e8:e6:1d:35:a5:6c:e3:fd:3b:1f:af:bf:21:08:
                    03:c4:43:9c:d0:57:19:67:7b:90:a3:e7:a6:c3:f0:
                    a7:d3:b5:3c:31:46:cd:84:1f:2e:85:29:5e:7c:a1:
                    01:c2:64:0a:38:c7:d7:59:f1:73:2c:dd:76:80:78:
                    2c:59:ba:7e:54:f6:4c:24:1a:ee:09:e7:85:4e:7b:
                    8a:20:6e:8a:da:b0:91:d2:39:63:2b:f2:25:b2:13:
                    e6:9c:4c:ad:94:67:3e:04:cb:1d:2a:aa:2b:a9:da:
                    c0:50:d9:b7:c4:79:54:aa:c3:01:d6:10:9d:56:4e:
                    27:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:3F:F4:17:80:A6:41:BC:BF:9A:1F:04:77:01:0F:08:39:87:43:74
            X509v3 Authority Key Identifier:
                keyid:06:78:51:17:98:6A:DA:A4:37:BE:C3:0A:2B:F9:F1:57:A9:25:7D:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnhRF5hq2qQ3vsMKK_nxV6klffI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/48f964-a431-4de6-99ce-84ee488566f1/1/BnhRF5hq2qQ3vsMKK_nxV6klffI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:81:fa:a5:98:5e:90:12:a8:2b:49:f1:0e:05:4b:ae:59:91:
         a9:cc:01:0c:16:e0:b6:fe:05:32:3b:ad:27:0b:71:8d:67:af:
         ee:df:3b:24:3e:35:3d:ad:06:f9:b2:f2:e3:9f:53:c7:5d:06:
         0c:22:cb:49:3e:dd:cb:5a:f6:10:07:eb:21:d4:64:5a:d1:2a:
         a3:61:0f:b9:a0:7f:26:db:a5:c3:fd:1a:f2:20:72:9c:91:ba:
         22:16:78:0b:1f:68:76:5c:e2:14:15:18:41:ef:cb:c1:bf:3a:
         ca:3a:5e:de:8b:8f:27:38:c3:6d:59:e2:6e:dd:2c:de:eb:ae:
         94:ca:b6:6b:64:ff:49:37:f9:d6:84:e9:f3:13:0d:89:98:94:
         88:7d:77:5f:02:6b:72:bb:05:83:9e:df:ff:33:d1:ff:4d:5d:
         45:27:df:01:88:00:f6:52:ac:de:1d:e4:2f:7e:88:95:f2:90:
         3b:38:ca:ac:33:64:8c:ad:ec:6a:44:fb:1f:89:72:db:df:03:
         90:89:a6:16:2c:a2:d9:ef:60:5c:e9:8f:df:c5:35:42:9b:af:
         03:32:2f:0d:3a:be:e4:8c:ce:c2:98:4c:66:4e:c5:d1:2f:55:
         9d:10:87:78:16:06:0b:19:d9:79:c0:ea:15:11:d0:58:77:99:
         93:63:4e:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBnroX2Nr3aKALrC0rRKNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2Nzg1MTE3OTg2YWRhYTQzN2JlYzMwYTJiZjlmMTU3YTky
NTdkZjIwHhcNMjUwNDEzMTIwMTE1WhcNMjUwNDE0MTIwMTE1WjAzMTEwLwYDVQQD
Eyg5OTNmZjQxNzgwYTY0MWJjYmY5YTFmMDQ3NzAxMGYwODM5ODc0Mzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEwfQEAPpKScTwn4RWpj3aloUbs8
YQKN3+dVOU0EkroEOB6CLp1Zg9zjXoSgHT1dzv9EdVHZA7ZR5VNThn4SXEGUnvct
+/bUKMEmyYVi5oc/oYqOPB5UBAx0oUGqZ0ZogcezmzOVSStBnpNfylejBbb1Ffdq
rbaFknKnV/5haqFE9KnyR9hE6OYdNaVs4/07H6+/IQgDxEOc0FcZZ3uQo+emw/Cn
07U8MUbNhB8uhSlefKEBwmQKOMfXWfFzLN12gHgsWbp+VPZMJBruCeeFTnuKIG6K
2rCR0jljK/IlshPmnEytlGc+BMsdKqorqdrAUNm3xHlUqsMB1hCdVk4n0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJk/9BeApkG8v5ofBHcBDwg5h0N0MB8GA1UdIwQY
MBaAFAZ4UReYatqkN77DCiv58VepJX3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5oUkY1aHEycVEzdnNNS0tfbnhWNmtsZmZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80OGY5NjQtYTQzMS00ZGU2LTk5Y2Ut
ODRlZTQ4ODU2NmYxLzEvQm5oUkY1aHEycVEzdnNNS0tfbnhWNmtsZmZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC80OGY5NjQtYTQzMS00ZGU2LTk5Y2UtODRlZTQ4ODU2NmYx
LzEvQm5oUkY1aHEycVEzdnNNS0tfbnhWNmtsZmZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXIH6pZhe
kBKoK0nxDgVLrlmRqcwBDBbgtv4FMjutJwtxjWev7t87JD41Pa0G+bLy459Tx10G
DCLLST7dy1r2EAfrIdRkWtEqo2EPuaB/Jtulw/0a8iBynJG6IhZ4Cx9odlziFBUY
Qe/Lwb86yjpe3ouPJzjDbVnibt0s3uuulMq2a2T/STf51oTp8xMNiZiUiH13XwJr
crsFg57f/zPR/01dRSffAYgA9lKs3h3kL36IlfKQOzjKrDNkjK3sakT7H4ly298D
kImmFiyi2e9gXOmP38U1QpuvAzIvDTq+5IzOwphMZk7F0S9VnRCHeBYGCxnZecDq
FRHQWHeZk2NOEQ==
-----END CERTIFICATE-----