Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
File:                     bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft (raw, json)
Hash identifier:          UCloM4J+xPRIe1woHxTp2gI5+N9OinKXR/brhWowstg=
Subject key identifier:   5F:CA:8E:40:65:22:00:9A:A8:7F:E9:0D:40:A7:2F:9D:3D:C8:02:F3
Authority key identifier: 6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C
Certificate issuer:       /CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
Certificate serial:       01962F3D509CE1ED44413839E9BF08D92614
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
Manifest number:          08F7
Signing time:             Sun 13 Apr 2025 13:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:09 +0000
Files and hashes:         1: bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl (hash: DbQMupcgCLgOAxtbL8j+f6ndAxrzMAHz/QN3EOGosgc=)
                          2: kYlX8uk50adCvLD80f5Fzepy0uA.roa (hash: ha3QcBHkgMvicsrTAgTGPAD+hk2VZnwH2+hSQHLSUdM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:50:9c:e1:ed:44:41:38:39:e9:bf:08:d9:26:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
        Validity
            Not Before: Apr 13 13:01:09 2025 GMT
            Not After : Apr 14 13:01:09 2025 GMT
        Subject: CN=5fca8e406522009aa87fe90d40a72f9d3dc802f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ca:bb:f8:72:11:c1:a2:7c:ae:2c:76:4c:71:
                    5a:f5:95:f6:7c:1e:6b:8c:dd:5f:14:cc:07:4c:68:
                    cd:19:31:7a:c3:9c:de:25:ec:5c:c0:f4:70:39:a9:
                    98:c7:06:b9:5c:b8:73:f2:db:e3:4c:69:c5:7f:48:
                    b1:b4:a1:89:4a:25:43:16:95:1f:c7:79:26:97:31:
                    11:85:22:1b:4c:a8:0a:9a:f4:e2:45:8c:29:87:77:
                    50:fb:63:a1:e5:43:f7:8b:9d:2b:4b:18:e2:b7:96:
                    23:e2:57:e8:0a:97:53:8f:19:df:96:c4:a6:76:eb:
                    67:a7:74:f9:3a:fc:9e:68:72:97:1f:84:ef:c7:5e:
                    40:3a:01:2e:be:e0:5e:16:b1:3b:26:89:71:02:f5:
                    a4:9c:e5:0d:ae:af:17:5b:06:81:9a:44:8a:9a:fa:
                    45:44:c1:a0:c2:16:b9:f1:b9:4a:98:a8:45:cf:b6:
                    fa:14:d5:1a:41:34:b8:53:fa:b2:71:04:d7:72:40:
                    d4:38:93:fe:99:d5:c0:36:59:d4:ad:09:e7:21:c1:
                    3f:c9:8e:0b:4b:9b:7b:03:86:1e:42:ee:4a:2b:b3:
                    da:c4:a0:24:e6:96:6f:e1:46:bb:be:d7:4e:51:60:
                    96:b0:4c:32:dc:ec:65:28:08:e9:87:22:e6:c7:dd:
                    12:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:CA:8E:40:65:22:00:9A:A8:7F:E9:0D:40:A7:2F:9D:3D:C8:02:F3
            X509v3 Authority Key Identifier:
                keyid:6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:0a:f0:69:30:1e:5e:71:45:8e:dc:52:0d:e1:0d:98:7f:a9:
         4f:c3:48:60:9c:88:00:65:69:2b:1c:59:04:71:68:4a:33:e4:
         2b:53:89:59:b9:7c:b4:24:e5:66:07:34:e2:8f:86:4a:6e:00:
         c3:61:b8:63:82:77:a2:f8:82:1a:1d:97:ec:6a:94:28:25:0e:
         7b:49:a1:a6:72:ca:a0:75:c2:59:fb:73:de:07:df:32:5c:fb:
         f7:0c:69:99:e1:f6:89:0e:77:50:a9:1d:ea:3f:ec:41:06:f9:
         91:a4:1c:91:c8:7b:dc:41:43:bc:f1:99:12:5d:25:ab:02:0a:
         1c:d7:08:45:6f:79:91:a0:88:bb:52:45:bf:16:f5:fd:87:09:
         55:e1:98:48:ed:7d:7b:d7:d7:e1:9d:93:af:09:e5:a1:5f:c4:
         87:75:24:9b:2c:82:4f:3e:18:95:a1:9d:80:05:5f:b5:ab:37:
         a1:d0:3c:ba:8b:31:ed:37:cc:01:80:8e:ac:1f:0b:b0:03:bf:
         f8:53:13:bf:b0:1e:bb:2f:93:fe:e5:5f:0a:11:a8:05:92:e7:
         10:fb:59:5c:71:49:4f:6c:6e:29:4c:6f:ea:fc:ce:da:10:85:
         b6:fc:df:cc:35:38:39:2b:25:09:c8:e5:a9:4d:0f:0e:b4:10:
         8a:09:55:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPVCc4e1EQTg56b8I2SYUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNjhkMzNkM2RhMTRkM2JiY2ZjZmMyZTQ5MmRjMTY3Mzg0
OWFhNmMwHhcNMjUwNDEzMTMwMTA5WhcNMjUwNDE0MTMwMTA5WjAzMTEwLwYDVQQD
Eyg1ZmNhOGU0MDY1MjIwMDlhYTg3ZmU5MGQ0MGE3MmY5ZDNkYzgwMmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMq7+HIRwaJ8rix2THFa9ZX2fB5r
jN1fFMwHTGjNGTF6w5zeJexcwPRwOamYxwa5XLhz8tvjTGnFf0ixtKGJSiVDFpUf
x3kmlzERhSIbTKgKmvTiRYwph3dQ+2Oh5UP3i50rSxjit5Yj4lfoCpdTjxnflsSm
dutnp3T5OvyeaHKXH4Tvx15AOgEuvuBeFrE7JolxAvWknOUNrq8XWwaBmkSKmvpF
RMGgwha58blKmKhFz7b6FNUaQTS4U/qycQTXckDUOJP+mdXANlnUrQnnIcE/yY4L
S5t7A4YeQu5KK7PaxKAk5pZv4Ua7vtdOUWCWsEwy3OxlKAjphyLmx90SeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/KjkBlIgCaqH/pDUCnL509yALzMB8GA1UdIwQY
MBaAFG1o0z09oU07vPz8LkktwWc4SapsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYldqVFBUMmhUVHU4X1B3dVNTM0JaemhKcW13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9kNjMxNzgtNWQ1My00MWU0LWE3MGUt
MmExZTM5ZGQ2MzNjLzEvYldqVFBUMmhUVHU4X1B3dVNTM0JaemhKcW13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9kNjMxNzgtNWQ1My00MWU0LWE3MGUtMmExZTM5ZGQ2MzNj
LzEvYldqVFBUMmhUVHU4X1B3dVNTM0JaemhKcW13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHgrwaTAe
XnFFjtxSDeENmH+pT8NIYJyIAGVpKxxZBHFoSjPkK1OJWbl8tCTlZgc04o+GSm4A
w2G4Y4J3oviCGh2X7GqUKCUOe0mhpnLKoHXCWftz3gffMlz79wxpmeH2iQ53UKkd
6j/sQQb5kaQckch73EFDvPGZEl0lqwIKHNcIRW95kaCIu1JFvxb1/YcJVeGYSO19
e9fX4Z2TrwnloV/Eh3UkmyyCTz4YlaGdgAVftas3odA8uosx7TfMAYCOrB8LsAO/
+FMTv7Aeuy+T/uVfChGoBZLnEPtZXHFJT2xuKUxv6vzO2hCFtvzfzDU4OSslCcjl
qU0PDrQQiglVYQ==
-----END CERTIFICATE-----