Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
File:                     Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft (raw, json)
Hash identifier:          w/rbBYMdNBzmVxsLEOxYG2hLRELuvV6kFslPAf2LC5w=
Subject key identifier:   7D:80:13:42:71:12:88:4E:34:E3:A9:0E:B3:A4:3A:C8:67:BD:B0:F3
Authority key identifier: 06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F
Certificate issuer:       /CN=06edfd28350f73d39855c475a1516ae0b7791a0f
Certificate serial:       01962E98A789EE435EF968A5055D6B68D03C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 10:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:18 +0000
Files and hashes:         1: Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl (hash: adUoLj1+Bgv56Y8jcLPeCJfqHyJ3TVhTjnoFozhy+3g=)
                          2: ommcgtarI65YI1kcqlSBP2uGJm0.roa (hash: 4y+wKlBvRSXHODdQDqeioxxZ7eEyNb3DpNEaFBajPZU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a7:89:ee:43:5e:f9:68:a5:05:5d:6b:68:d0:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06edfd28350f73d39855c475a1516ae0b7791a0f
        Validity
            Not Before: Apr 13 10:01:18 2025 GMT
            Not After : Apr 14 10:01:18 2025 GMT
        Subject: CN=7d8013427112884e34e3a90eb3a43ac867bdb0f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:01:be:53:6a:2d:f0:d3:f7:06:70:bc:ce:07:
                    a7:c0:12:ff:fb:0c:8e:10:e5:69:f2:da:93:5e:01:
                    3e:92:b0:ea:55:19:f7:0d:14:10:21:5c:eb:48:65:
                    e4:36:84:62:e0:49:b7:9a:0b:d8:5c:7f:35:bc:61:
                    bd:c0:20:d0:f5:7a:a3:27:d7:a3:75:d2:d5:9a:e8:
                    0e:f7:19:a2:ac:99:d9:ef:e4:c2:b6:6d:5e:44:46:
                    de:3c:50:33:ad:d2:a9:27:cd:74:fa:91:db:19:b9:
                    91:82:76:ea:3c:7f:6b:ff:c8:07:ae:a8:2a:17:74:
                    72:c4:97:21:dd:58:fe:82:55:b3:fa:ae:27:21:1e:
                    fb:2f:3f:06:14:19:92:2f:09:d2:97:17:ea:64:0f:
                    83:33:1a:3e:3c:1b:2c:4b:04:2b:4f:c4:d8:18:78:
                    f7:7b:2d:6c:89:61:88:b7:fb:ab:6c:bc:67:c1:b9:
                    21:8e:8c:f9:c2:a3:e0:34:7d:48:b0:2b:69:39:b2:
                    7f:44:86:59:74:e1:99:d2:c6:8f:3e:33:5c:02:8a:
                    8b:8f:85:cc:d4:55:33:37:73:54:58:32:33:c4:31:
                    21:f1:cb:46:87:48:4a:11:97:b2:69:77:b6:7d:74:
                    de:46:6e:38:14:65:0a:25:1e:84:87:d6:33:34:d1:
                    be:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:80:13:42:71:12:88:4E:34:E3:A9:0E:B3:A4:3A:C8:67:BD:B0:F3
            X509v3 Authority Key Identifier:
                keyid:06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e3:58:f9:0e:b0:7a:8b:53:fe:ed:3a:b0:ea:1c:86:96:0f:03:
         14:68:28:6a:f6:20:bf:f9:c7:07:36:9a:2b:21:09:ad:b0:91:
         ea:6a:67:9f:d7:be:d9:0c:25:5d:76:46:37:4b:c5:15:33:60:
         9d:e6:95:43:27:89:40:ac:6a:e6:da:96:91:87:86:4a:47:2c:
         ce:ae:2e:0d:75:20:d1:37:43:ec:44:69:8e:ff:e5:8e:1b:f9:
         61:d4:2b:da:69:e2:1b:d8:18:ab:c8:11:78:ac:09:91:5f:e3:
         ae:67:d7:e2:a5:43:57:42:0f:90:bf:bf:c4:00:3a:3e:c1:8b:
         ed:92:4a:52:b6:78:b5:74:f9:c2:7c:48:5b:b3:67:e6:d4:4b:
         dd:d1:71:c4:65:96:00:c0:d5:6a:22:59:57:92:a9:14:f9:8e:
         bf:c4:9a:54:9a:9a:d3:e7:0a:a3:fe:98:57:69:d9:1c:fd:7f:
         df:85:76:d1:cc:0f:c8:e7:27:cb:28:2d:ed:f8:fb:f9:7a:b5:
         f4:84:35:83:d9:f0:b2:50:96:6c:66:12:c8:a2:50:c5:db:b8:
         e8:76:61:45:04:79:d4:e1:fd:3e:6a:1a:04:97:63:72:82:e5:
         ab:e4:bc:6d:ba:f0:df:54:fd:eb:e2:61:f5:ba:86:17:f4:06:
         5e:ed:42:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumKeJ7kNe+WilBV1raNA8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2ZWRmZDI4MzUwZjczZDM5ODU1YzQ3NWExNTE2YWUwYjc3
OTFhMGYwHhcNMjUwNDEzMTAwMTE4WhcNMjUwNDE0MTAwMTE4WjAzMTEwLwYDVQQD
Eyg3ZDgwMTM0MjcxMTI4ODRlMzRlM2E5MGViM2E0M2FjODY3YmRiMGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQG+U2ot8NP3BnC8zgenwBL/+wyO
EOVp8tqTXgE+krDqVRn3DRQQIVzrSGXkNoRi4Em3mgvYXH81vGG9wCDQ9XqjJ9ej
ddLVmugO9xmirJnZ7+TCtm1eREbePFAzrdKpJ810+pHbGbmRgnbqPH9r/8gHrqgq
F3RyxJch3Vj+glWz+q4nIR77Lz8GFBmSLwnSlxfqZA+DMxo+PBssSwQrT8TYGHj3
ey1siWGIt/urbLxnwbkhjoz5wqPgNH1IsCtpObJ/RIZZdOGZ0saPPjNcAoqLj4XM
1FUzN3NUWDIzxDEh8ctGh0hKEZeyaXe2fXTeRm44FGUKJR6Eh9YzNNG+0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2AE0JxEohONOOpDrOkOshnvbDzMB8GA1UdIwQY
MBaAFAbt/Sg1D3PTmFXEdaFRauC3eRoPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnUzOUtEVVBjOU9ZVmNSMW9WRnE0TGQ1R2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi82MTNmYjQtOGEwMC00YjJkLThkMWMt
ZjZkNzI5YTkzZWM4LzEvQnUzOUtEVVBjOU9ZVmNSMW9WRnE0TGQ1R2c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi82MTNmYjQtOGEwMC00YjJkLThkMWMtZjZkNzI5YTkzZWM4
LzEvQnUzOUtEVVBjOU9ZVmNSMW9WRnE0TGQ1R2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA41j5DrB6
i1P+7Tqw6hyGlg8DFGgoavYgv/nHBzaaKyEJrbCR6mpnn9e+2QwlXXZGN0vFFTNg
neaVQyeJQKxq5tqWkYeGSkcszq4uDXUg0TdD7ERpjv/ljhv5YdQr2mniG9gYq8gR
eKwJkV/jrmfX4qVDV0IPkL+/xAA6PsGL7ZJKUrZ4tXT5wnxIW7Nn5tRL3dFxxGWW
AMDVaiJZV5KpFPmOv8SaVJqa0+cKo/6YV2nZHP1/34V20cwPyOcnyygt7fj7+Xq1
9IQ1g9nwslCWbGYSyKJQxdu46HZhRQR51OH9PmoaBJdjcoLlq+S8bbrw31T96+Jh
9bqGF/QGXu1Chg==
-----END CERTIFICATE-----