Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
File:                     BsRLghq121QsxTbB-IuEuvBiFlQ.mft (raw, json)
Hash identifier:          eMA8cR11BnbGqOsPMHl6vPU7TIXt1akxCSMUfM6OQZk=
Subject key identifier:   FD:6C:EC:50:02:7A:05:FC:4F:43:4F:8F:60:D2:CE:E0:F5:76:52:76
Authority key identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
Certificate issuer:       /CN=06c44b821ab5db542cc536c1f88b84baf0621654
Certificate serial:       01962F3D563E03336B1468A351DDB717DA47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 13:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:11 +0000
Files and hashes:         1: 8FxVFuW_oUKRR2bbRCVTojM73sY.roa (hash: VrCY5yDzoOr7RNufMtvUlC9GTknboOTsJCKPyCRZ9uU=)
                          2: BsRLghq121QsxTbB-IuEuvBiFlQ.crl (hash: i6RjyQ3YqNk31z8QUD0pEun2VhiOhD9h/FnvOZOnrQ0=)
                          3: L7e4J1RQTn0nIwk--GSUaD-UmoM.roa (hash: 2gs+pIrBMmE/Jpl0M+ftbVMtlfnyIgG+tIOj7MBw26s=)
                          4: QSsP3hVliieFZmqEh-oXRbOngVs.roa (hash: +SXMbXSSzjopaotKF7OHij1zUgdfHzWAWlGpHYpJIV8=)
                          5: oOnTeBcATSnpY8kitycXVQ1C_S8.roa (hash: l6l3Ce6tclEVymfIGsnHtdS0yV4TM8oW3r1alBKEgkw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:56:3e:03:33:6b:14:68:a3:51:dd:b7:17:da:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06c44b821ab5db542cc536c1f88b84baf0621654
        Validity
            Not Before: Apr 13 13:01:11 2025 GMT
            Not After : Apr 14 13:01:11 2025 GMT
        Subject: CN=fd6cec50027a05fc4f434f8f60d2cee0f5765276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1e:0c:c5:7f:3e:9a:bf:9e:18:cc:66:fc:ee:
                    ac:9e:c3:1a:80:15:b7:e2:58:b1:00:d2:61:04:e4:
                    d3:cf:ac:48:5f:d5:43:f5:fd:3a:6b:8f:05:c8:ee:
                    17:58:0d:91:08:6f:e7:97:5a:3f:8f:0e:7f:e1:c7:
                    84:e9:60:61:e3:eb:4e:fa:73:19:a5:91:59:da:13:
                    97:a7:6c:8b:78:c2:04:b2:71:b0:54:45:e1:bd:65:
                    ab:fa:3b:0f:cd:b8:75:d1:00:0a:36:01:98:6e:96:
                    23:ea:07:e5:ce:fa:71:32:c9:5d:79:ee:cf:ff:f9:
                    35:71:6c:97:55:41:65:07:9e:af:11:f6:87:92:9d:
                    52:6b:60:79:f0:59:3f:b4:4f:be:30:ac:6f:c6:26:
                    d0:ab:e3:ef:7a:89:d5:44:1e:bb:67:a9:7b:3f:4a:
                    f1:95:f2:40:71:58:6a:0c:81:9d:9a:e4:aa:13:af:
                    0e:04:51:34:d6:b8:0f:a8:cc:52:19:1f:bd:03:c1:
                    0c:69:c2:35:5d:59:de:9f:69:cb:50:a8:29:fd:17:
                    3b:b7:64:d5:e9:d0:10:ff:ba:75:61:77:b3:fa:ed:
                    f3:45:8e:7c:02:44:f2:91:26:1b:be:6c:73:66:d6:
                    10:aa:be:48:6e:14:f6:f0:89:a6:ff:2e:f3:12:36:
                    19:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6C:EC:50:02:7A:05:FC:4F:43:4F:8F:60:D2:CE:E0:F5:76:52:76
            X509v3 Authority Key Identifier:
                keyid:06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:23:77:80:5c:6d:3d:9c:34:37:d2:56:7d:a7:00:df:9a:b5:
         23:77:72:bd:ca:df:bb:1b:87:af:47:73:f2:06:5b:07:d5:0a:
         ff:3f:df:7c:65:57:30:6f:0a:e9:12:51:7e:d3:c4:f2:d0:b5:
         8a:21:69:cd:64:5d:0d:1c:5c:ce:e5:49:4a:d0:85:e3:75:89:
         bc:95:da:35:31:3c:0b:07:16:88:e3:77:f6:ce:21:b3:6c:54:
         b2:c3:d3:39:a4:ea:4a:57:6e:1c:cc:06:dd:b5:f1:d2:6c:46:
         cf:10:ef:7e:95:60:13:b4:d5:10:47:4d:2a:a0:17:52:4d:f2:
         31:60:67:6b:be:00:08:a9:c8:30:90:98:ca:ca:ba:28:0f:e3:
         f3:bd:a3:2e:b2:f2:cb:df:97:5f:f5:cb:b3:e0:d9:e5:1c:2a:
         c2:f9:02:1d:2f:40:f9:50:83:7a:9b:66:d9:5d:54:42:96:70:
         cb:b5:70:f6:f3:ee:36:22:82:53:d1:1d:9d:36:f2:ea:40:04:
         0f:91:82:0e:cc:ae:84:d8:85:4f:23:4b:f6:f2:4b:76:24:31:
         21:59:25:42:b7:6c:0e:63:03:6b:c7:bc:69:d2:5a:cc:47:c4:
         bf:bc:44:e9:b9:a6:19:cf:c3:3c:fc:b8:6e:11:1a:84:26:6c:
         10:f6:8e:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPVY+AzNrFGijUd23F9pHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YzQ0YjgyMWFiNWRiNTQyY2M1MzZjMWY4OGI4NGJhZjA2
MjE2NTQwHhcNMjUwNDEzMTMwMTExWhcNMjUwNDE0MTMwMTExWjAzMTEwLwYDVQQD
EyhmZDZjZWM1MDAyN2EwNWZjNGY0MzRmOGY2MGQyY2VlMGY1NzY1Mjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxR4MxX8+mr+eGMxm/O6snsMagBW3
4lixANJhBOTTz6xIX9VD9f06a48FyO4XWA2RCG/nl1o/jw5/4ceE6WBh4+tO+nMZ
pZFZ2hOXp2yLeMIEsnGwVEXhvWWr+jsPzbh10QAKNgGYbpYj6gflzvpxMsldee7P
//k1cWyXVUFlB56vEfaHkp1Sa2B58Fk/tE++MKxvxibQq+PveonVRB67Z6l7P0rx
lfJAcVhqDIGdmuSqE68OBFE01rgPqMxSGR+9A8EMacI1XVnen2nLUKgp/Rc7t2TV
6dAQ/7p1YXez+u3zRY58AkTykSYbvmxzZtYQqr5IbhT28Imm/y7zEjYZtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1s7FACegX8T0NPj2DSzuD1dlJ2MB8GA1UdIwQY
MBaAFAbES4IatdtULMU2wfiLhLrwYhZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnNSTGdocTEyMVFzeFRiQi1JdUV1dkJpRmxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83OWNlZjgtNDNhMS00MDg5LTgwOWYt
ZGM5ODQyNjU1NjdkLzEvQnNSTGdocTEyMVFzeFRiQi1JdUV1dkJpRmxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi83OWNlZjgtNDNhMS00MDg5LTgwOWYtZGM5ODQyNjU1Njdk
LzEvQnNSTGdocTEyMVFzeFRiQi1JdUV1dkJpRmxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATiN3gFxt
PZw0N9JWfacA35q1I3dyvcrfuxuHr0dz8gZbB9UK/z/ffGVXMG8K6RJRftPE8tC1
iiFpzWRdDRxczuVJStCF43WJvJXaNTE8CwcWiON39s4hs2xUssPTOaTqSlduHMwG
3bXx0mxGzxDvfpVgE7TVEEdNKqAXUk3yMWBna74ACKnIMJCYysq6KA/j872jLrLy
y9+XX/XLs+DZ5RwqwvkCHS9A+VCDeptm2V1UQpZwy7Vw9vPuNiKCU9EdnTby6kAE
D5GCDsyuhNiFTyNL9vJLdiQxIVklQrdsDmMDa8e8adJazEfEv7xE6bmmGc/DPPy4
bhEahCZsEPaOLw==
-----END CERTIFICATE-----