Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.mft
File:                     BQJMtECm3Xana1aUwOL07jMOCnw.mft (raw, json)
Hash identifier:          +f9z52EvXXeD0/XPt/l9aJf1xIxYXXKaq8xyR8LJhU8=
Subject key identifier:   BF:28:8C:93:79:97:CE:1E:81:1A:37:E3:0F:02:50:9D:73:2C:95:04
Authority key identifier: 05:02:4C:B4:40:A6:DD:76:A7:6B:56:94:C0:E2:F4:EE:33:0E:0A:7C
Certificate issuer:       /CN=05024cb440a6dd76a76b5694c0e2f4ee330e0a7c
Certificate serial:       01962E61AF3C7F18ED8742A9FB8ED0DAAA39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BQJMtECm3Xana1aUwOL07jMOCnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.mft
Manifest number:          0214
Signing time:             Sun 13 Apr 2025 09:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:15 +0000
Files and hashes:         1: BQJMtECm3Xana1aUwOL07jMOCnw.crl (hash: I9Sw1SbYwaopFn6Pfsh9QFN2bXUzVnfqtSurDvbf/n4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:af:3c:7f:18:ed:87:42:a9:fb:8e:d0:da:aa:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05024cb440a6dd76a76b5694c0e2f4ee330e0a7c
        Validity
            Not Before: Apr 13 09:01:15 2025 GMT
            Not After : Apr 14 09:01:15 2025 GMT
        Subject: CN=bf288c937997ce1e811a37e30f02509d732c9504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:18:b2:d1:25:58:bd:cb:2a:22:74:53:76:4b:
                    d3:f2:f3:6d:f8:b8:59:53:13:41:d2:5a:39:8b:39:
                    a9:3e:84:c5:11:1b:50:1e:92:ae:62:2b:8b:80:d8:
                    f7:e4:eb:47:72:f9:93:22:c1:27:b8:f0:5a:5b:82:
                    43:3a:66:77:cc:42:5a:25:d0:98:0a:70:a1:e2:ee:
                    8d:3e:a2:4c:83:2c:60:e0:4b:06:3d:64:be:a3:11:
                    42:59:e2:65:f2:fc:11:97:10:d0:c5:d0:04:f1:1d:
                    a8:de:d4:1e:60:78:d3:17:b0:e4:20:ab:b1:49:6e:
                    35:8f:67:33:64:b3:7e:e1:db:67:2c:b3:18:5f:d3:
                    e8:ae:f3:95:12:5f:db:39:43:86:65:19:0b:4d:21:
                    e6:b1:e6:2e:7c:71:a8:4c:8d:02:0b:be:28:25:27:
                    c2:ce:9e:e6:01:86:ae:fc:fe:01:eb:2c:42:d0:e0:
                    f4:19:73:62:1d:67:bf:ee:cf:35:f3:c3:aa:3b:bf:
                    cf:9f:c9:72:43:54:90:c3:f8:d1:e9:f0:89:f6:5f:
                    bd:da:2b:04:9c:0b:20:43:a8:34:0b:52:14:dd:1d:
                    de:e8:62:b1:77:69:75:8c:3d:2f:44:37:d8:70:51:
                    90:d2:a8:f0:28:b9:22:74:32:49:50:1b:a1:97:bd:
                    ea:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:28:8C:93:79:97:CE:1E:81:1A:37:E3:0F:02:50:9D:73:2C:95:04
            X509v3 Authority Key Identifier:
                keyid:05:02:4C:B4:40:A6:DD:76:A7:6B:56:94:C0:E2:F4:EE:33:0E:0A:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQJMtECm3Xana1aUwOL07jMOCnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a60b1a-27bb-4604-9340-a82262204e38/1/BQJMtECm3Xana1aUwOL07jMOCnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:d0:34:8b:4b:b7:43:82:12:f7:72:0c:38:eb:7f:bb:60:9e:
         0e:b5:c8:21:7a:51:1c:d8:66:f6:12:fd:97:20:dc:be:28:72:
         3d:73:d8:b2:c5:ce:a3:45:62:66:7d:d5:8b:7d:24:72:f4:6a:
         bb:b0:79:a0:c8:d2:1b:c9:37:2d:d6:5f:9a:5f:69:da:93:b0:
         74:f8:c0:97:a8:a6:74:56:c9:0e:28:96:fb:d6:17:2e:89:03:
         d6:34:0e:f8:e4:24:3c:35:11:ae:59:86:f5:ea:61:82:eb:77:
         54:3e:f9:6d:a5:96:97:8c:3f:46:3c:df:0c:4c:9f:d7:7e:47:
         9c:d7:36:2d:c4:bb:b7:36:f4:54:4f:38:66:55:53:0e:78:f1:
         3c:0a:41:3b:82:b3:72:7f:48:c7:82:24:e0:1e:14:fd:92:68:
         49:fd:1f:da:31:d0:0d:3a:49:61:2c:fd:b9:65:1a:3f:52:65:
         b2:4f:1f:3c:56:f6:ff:45:17:69:bf:9b:11:aa:78:8c:90:67:
         8d:da:34:04:97:a1:fe:89:5a:24:63:dc:f2:dc:7d:62:91:15:
         cd:cb:8b:8c:5f:8b:9d:24:27:e2:fe:ab:bf:5b:fa:bc:9e:74:
         95:4e:32:0b:6a:3c:09:ef:fd:64:0c:08:04:24:1f:c8:d6:59:
         dd:c6:57:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYa88fxjth0Kp+47Q2qo5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MDI0Y2I0NDBhNmRkNzZhNzZiNTY5NGMwZTJmNGVlMzMw
ZTBhN2MwHhcNMjUwNDEzMDkwMTE1WhcNMjUwNDE0MDkwMTE1WjAzMTEwLwYDVQQD
EyhiZjI4OGM5Mzc5OTdjZTFlODExYTM3ZTMwZjAyNTA5ZDczMmM5NTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hiy0SVYvcsqInRTdkvT8vNt+LhZ
UxNB0lo5izmpPoTFERtQHpKuYiuLgNj35OtHcvmTIsEnuPBaW4JDOmZ3zEJaJdCY
CnCh4u6NPqJMgyxg4EsGPWS+oxFCWeJl8vwRlxDQxdAE8R2o3tQeYHjTF7DkIKux
SW41j2czZLN+4dtnLLMYX9PorvOVEl/bOUOGZRkLTSHmseYufHGoTI0CC74oJSfC
zp7mAYau/P4B6yxC0OD0GXNiHWe/7s8188OqO7/Pn8lyQ1SQw/jR6fCJ9l+92isE
nAsgQ6g0C1IU3R3e6GKxd2l1jD0vRDfYcFGQ0qjwKLkidDJJUBuhl73qiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8ojJN5l84egRo34w8CUJ1zLJUEMB8GA1UdIwQY
MBaAFAUCTLRApt12p2tWlMDi9O4zDgp8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlFKTXRFQ20zWGFuYTFhVXdPTDA3ak1PQ253LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hNjBiMWEtMjdiYi00NjA0LTkzNDAt
YTgyMjYyMjA0ZTM4LzEvQlFKTXRFQ20zWGFuYTFhVXdPTDA3ak1PQ253Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9hNjBiMWEtMjdiYi00NjA0LTkzNDAtYTgyMjYyMjA0ZTM4
LzEvQlFKTXRFQ20zWGFuYTFhVXdPTDA3ak1PQ253LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgNA0i0u3
Q4IS93IMOOt/u2CeDrXIIXpRHNhm9hL9lyDcvihyPXPYssXOo0ViZn3Vi30kcvRq
u7B5oMjSG8k3LdZfml9p2pOwdPjAl6imdFbJDiiW+9YXLokD1jQO+OQkPDURrlmG
9ephgut3VD75baWWl4w/RjzfDEyf135HnNc2LcS7tzb0VE84ZlVTDnjxPApBO4Kz
cn9Ix4Ik4B4U/ZJoSf0f2jHQDTpJYSz9uWUaP1Jlsk8fPFb2/0UXab+bEap4jJBn
jdo0BJeh/olaJGPc8tx9YpEVzcuLjF+LnSQn4v6rv1v6vJ50lU4yC2o8Ce/9ZAwI
BCQfyNZZ3cZXiQ==
-----END CERTIFICATE-----