Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
File:                     bj5QHSUT5a7UQj1-smXmCCKo540.mft (raw, json)
Hash identifier:          Mpi/U9wmOjghxfWNnPcnhjed5YmKhA1AnmCS0/rdcx8=
Subject key identifier:   FB:31:03:45:D9:0D:E3:94:32:CE:22:26:A7:BC:2D:08:62:DB:E0:47
Authority key identifier: 6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D
Certificate issuer:       /CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
Certificate serial:       01962FAB07639624FE9AB5E28243F56C4F3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft
Manifest number:          11D6
Signing time:             Sun 13 Apr 2025 15:00:59 +0000
Manifest this update:     Sun 13 Apr 2025 15:00:59 +0000
Manifest next update:     Mon 14 Apr 2025 15:00:59 +0000
Files and hashes:         1: OpzjX_30NcDVzI3ln4sLOuG7_Mo.roa (hash: rW6xgGR1vzj/wyImvrzrumKsIhFoGNfZPJbpPmbWZ1U=)
                          2: bj5QHSUT5a7UQj1-smXmCCKo540.crl (hash: FQ+76hDzrsXufYbOUYAnPdhv7U7kuSxsI5xaRXkN/FI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:07:63:96:24:fe:9a:b5:e2:82:43:f5:6c:4f:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d
        Validity
            Not Before: Apr 13 15:00:59 2025 GMT
            Not After : Apr 14 15:00:59 2025 GMT
        Subject: CN=fb310345d90de39432ce2226a7bc2d0862dbe047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8a:dc:6a:c3:61:b0:a3:bc:cb:fc:69:8b:64:
                    2f:9e:95:79:bf:5a:2e:7b:e1:14:46:54:71:93:9c:
                    1f:d4:4b:1f:2e:11:ac:59:aa:32:a4:f7:47:04:88:
                    a2:d2:31:c9:ea:8f:2c:25:4e:e2:ae:d4:e8:64:88:
                    f5:48:9a:d3:f0:3a:3e:71:b1:cd:c9:d9:3a:9a:a7:
                    40:ac:e9:65:4a:8a:f1:6a:b2:50:8e:1d:89:d9:85:
                    a9:13:5a:51:35:40:9a:67:bf:e8:71:28:c2:b4:68:
                    0b:ae:ee:9c:d0:80:cd:30:a8:06:80:92:1f:ca:c6:
                    c0:80:b3:8e:90:b2:38:84:aa:88:b0:ae:c4:6e:1d:
                    ca:4a:02:b5:e9:89:3f:f6:72:16:2a:0f:1b:60:24:
                    31:94:94:a1:82:30:7c:37:ab:fb:47:f2:37:90:ff:
                    21:2b:d8:6f:7a:98:8e:a8:6b:fd:9d:7d:99:c5:5b:
                    51:5c:3f:6b:db:10:79:ea:d4:62:46:c4:13:d5:59:
                    4a:f1:9c:82:46:f5:ce:3d:79:80:31:63:e9:07:36:
                    4f:c9:0a:9c:ba:46:67:2f:fe:65:03:fe:ba:60:a0:
                    19:6b:85:c7:f2:50:a9:be:38:fb:9a:d2:08:0c:7e:
                    87:1e:bd:89:6c:c1:e1:1e:30:3f:f0:de:56:c3:f3:
                    1b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:31:03:45:D9:0D:E3:94:32:CE:22:26:A7:BC:2D:08:62:DB:E0:47
            X509v3 Authority Key Identifier:
                keyid:6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:d2:84:73:39:ca:dc:91:aa:98:8e:a9:02:57:a0:8e:67:c6:
         a9:fe:f1:9c:6a:9d:df:cb:ba:d7:cc:0a:45:ca:94:34:98:77:
         0b:03:c1:62:2b:b1:9f:bf:eb:1e:64:84:a3:d9:22:c6:3c:0f:
         b7:f1:7e:7f:e8:34:df:3c:28:9c:b8:c5:6e:97:d3:e6:0d:40:
         31:28:41:f5:2f:d7:c8:d0:13:80:72:0f:1a:36:41:3d:a0:59:
         ec:e8:e2:57:0b:38:06:e3:91:7e:c2:bd:0a:d1:f8:a0:fe:ea:
         e8:58:10:db:d6:23:e9:88:16:55:e0:b6:3b:dc:aa:9f:44:25:
         1f:d2:7a:c0:ec:0d:53:4c:0b:59:e2:77:3b:7b:31:78:ef:1e:
         13:1e:22:1a:df:c7:50:f4:fd:3f:90:79:3c:bc:a8:66:a1:b8:
         d2:0e:08:32:19:d9:22:13:79:09:71:81:12:0f:0e:76:be:25:
         d4:77:6f:71:00:01:17:7a:95:49:cb:c3:d1:3c:85:44:02:c1:
         6c:f5:58:86:3f:f5:93:41:67:02:80:88:b7:e6:76:3b:2a:6b:
         65:6f:7c:58:6a:db:c5:02:5f:eb:0d:bd:dc:48:37:51:27:f3:
         14:e6:75:8e:f4:84:7c:8d:be:e8:04:b5:a3:fb:f7:d7:0b:4c:
         cf:93:ce:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqwdjliT+mrXigkP1bE87MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlM2U1MDFkMjUxM2U1YWVkNDQyM2Q3ZWIyNjVlNjA4MjJh
OGU3OGQwHhcNMjUwNDEzMTUwMDU5WhcNMjUwNDE0MTUwMDU5WjAzMTEwLwYDVQQD
EyhmYjMxMDM0NWQ5MGRlMzk0MzJjZTIyMjZhN2JjMmQwODYyZGJlMDQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IrcasNhsKO8y/xpi2QvnpV5v1ou
e+EURlRxk5wf1EsfLhGsWaoypPdHBIii0jHJ6o8sJU7irtToZIj1SJrT8Do+cbHN
ydk6mqdArOllSorxarJQjh2J2YWpE1pRNUCaZ7/ocSjCtGgLru6c0IDNMKgGgJIf
ysbAgLOOkLI4hKqIsK7Ebh3KSgK16Yk/9nIWKg8bYCQxlJShgjB8N6v7R/I3kP8h
K9hvepiOqGv9nX2ZxVtRXD9r2xB56tRiRsQT1VlK8ZyCRvXOPXmAMWPpBzZPyQqc
ukZnL/5lA/66YKAZa4XH8lCpvjj7mtIIDH6HHr2JbMHhHjA/8N5Ww/MbpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsxA0XZDeOUMs4iJqe8LQhi2+BHMB8GA1UdIwQY
MBaAFG4+UB0lE+Wu1EI9frJl5ggiqOeNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmo1UUhTVVQ1YTdVUWoxLXNtWG1DQ0tvNTQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy85ZDVmZGMtNjZiMi00NzE4LThiMjQt
MTFkYWYxNzBkN2NkLzEvYmo1UUhTVVQ1YTdVUWoxLXNtWG1DQ0tvNTQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy85ZDVmZGMtNjZiMi00NzE4LThiMjQtMTFkYWYxNzBkN2Nk
LzEvYmo1UUhTVVQ1YTdVUWoxLXNtWG1DQ0tvNTQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv9KEcznK
3JGqmI6pAlegjmfGqf7xnGqd38u618wKRcqUNJh3CwPBYiuxn7/rHmSEo9kixjwP
t/F+f+g03zwonLjFbpfT5g1AMShB9S/XyNATgHIPGjZBPaBZ7OjiVws4BuORfsK9
CtH4oP7q6FgQ29Yj6YgWVeC2O9yqn0QlH9J6wOwNU0wLWeJ3O3sxeO8eEx4iGt/H
UPT9P5B5PLyoZqG40g4IMhnZIhN5CXGBEg8Odr4l1HdvcQABF3qVScvD0TyFRALB
bPVYhj/1k0FnAoCIt+Z2OyprZW98WGrbxQJf6w293Eg3USfzFOZ1jvSEfI2+6AS1
o/v31wtMz5POQQ==
-----END CERTIFICATE-----