Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
File:                     bxOPLgM_lCu5TnMf9FJEjGgCroI.mft (raw, json)
Hash identifier:          ZQZNRHgGmDr90kRc47aL792JwIgjnM7DLDAGyJbpszw=
Subject key identifier:   02:4D:6F:D3:E8:1A:F9:30:86:BB:F6:43:D1:5F:DA:83:9F:3F:67:74
Authority key identifier: 6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82
Certificate issuer:       /CN=6f138f2e033f942bb94e731ff452448c6802ae82
Certificate serial:       01962DF3994C74D37129725685B7DDA0C6E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:01 +0000
Files and hashes:         1: 2cCUJtYhVepSHvUymWA4difKbm4.roa (hash: 2GZetLN+ABzzZiJpVfwp76NOZrbjBE0afEtmIXZxkxM=)
                          2: bxOPLgM_lCu5TnMf9FJEjGgCroI.crl (hash: 64g6DpQlt8IRzMyMzmk8vy/8A0j+kaQbGhMCePjT92Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:99:4c:74:d3:71:29:72:56:85:b7:dd:a0:c6:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f138f2e033f942bb94e731ff452448c6802ae82
        Validity
            Not Before: Apr 13 07:01:01 2025 GMT
            Not After : Apr 14 07:01:01 2025 GMT
        Subject: CN=024d6fd3e81af93086bbf643d15fda839f3f6774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0a:5b:bd:e3:c1:ab:a7:a5:20:ca:5c:d4:a6:
                    86:96:aa:a5:8e:ef:05:d3:63:b8:d3:b6:69:cf:87:
                    1d:0e:22:65:24:14:d2:f6:ba:d3:ec:07:29:e3:b0:
                    cc:84:86:63:c5:8d:ae:34:42:36:21:0d:f1:cf:0e:
                    4e:34:30:5c:18:61:15:01:39:16:29:33:64:04:1c:
                    86:b6:05:43:76:0f:e5:cd:ba:c4:3e:2a:f2:67:62:
                    f3:a1:fe:81:ee:a6:a2:cd:15:29:c7:cd:83:71:21:
                    2f:2b:d4:21:ad:52:ca:62:70:9e:99:bb:b8:c3:2d:
                    37:52:26:a0:cd:f0:3c:9e:a1:e0:e0:c6:99:6a:79:
                    e5:c5:08:32:8a:24:0e:3a:46:90:85:31:06:7c:97:
                    22:dd:48:e7:6d:56:ec:4f:69:e3:14:85:e4:1c:82:
                    94:10:18:16:fe:9e:d8:16:2c:c9:64:5d:3c:fb:d0:
                    e5:e2:70:fd:ef:1d:93:61:f8:74:6a:e4:61:19:fb:
                    e3:9a:eb:ba:37:ab:0d:b6:90:3c:d9:3f:1b:72:7e:
                    7f:95:ad:63:33:43:c7:f5:8f:9d:04:ca:79:1b:04:
                    31:0d:e8:ee:57:67:50:91:ba:5d:06:2d:6c:d5:14:
                    52:46:5e:71:12:fb:d2:c4:b0:58:52:14:af:ba:62:
                    51:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:4D:6F:D3:E8:1A:F9:30:86:BB:F6:43:D1:5F:DA:83:9F:3F:67:74
            X509v3 Authority Key Identifier:
                keyid:6F:13:8F:2E:03:3F:94:2B:B9:4E:73:1F:F4:52:44:8C:68:02:AE:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxOPLgM_lCu5TnMf9FJEjGgCroI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/abb8fc-a82b-4157-b28e-e139fbc279b9/1/bxOPLgM_lCu5TnMf9FJEjGgCroI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:5f:19:bb:0d:2e:0d:73:87:e0:e2:7d:c6:93:46:fe:c9:f8:
         07:be:f3:a5:4a:6e:62:85:9a:da:42:91:25:6d:6c:ea:11:62:
         94:5d:4e:75:c9:9c:d4:e7:b4:95:4b:1a:41:73:22:5d:4d:32:
         4d:fa:8e:69:7d:d2:83:1d:5f:4b:76:a1:81:0a:cb:1b:85:b9:
         54:39:65:5b:f7:df:c1:11:3e:50:41:19:72:ce:0c:57:bc:03:
         fe:e7:83:f5:53:4a:fb:81:94:8d:a5:2b:9c:0b:e7:49:db:6d:
         1a:7c:e1:53:ed:b6:16:90:a3:84:6f:e0:99:fc:55:c8:37:15:
         d1:8e:a5:6f:40:0a:89:17:a2:2e:99:7d:e8:ad:9d:09:f8:28:
         cb:13:1d:4a:6f:b0:3e:c3:6b:64:39:75:20:55:70:f1:f4:92:
         be:3d:f9:5e:e8:b2:23:a9:e4:8a:a4:2f:bb:a7:44:a7:29:e7:
         f1:3e:bd:33:ba:41:4c:d0:46:ee:2c:5c:1b:f8:a4:2a:7b:53:
         15:ca:2c:a2:d0:c2:e1:e4:a7:ee:50:83:4e:e3:e2:12:0a:10:
         e8:c6:0c:09:d9:a8:5e:f7:39:f4:08:68:67:39:9e:c8:55:c2:
         95:f0:8b:32:06:31:7c:06:bd:5d:49:f3:f7:a7:08:3a:37:c8:
         23:47:84:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt85lMdNNxKXJWhbfdoMbkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMTM4ZjJlMDMzZjk0MmJiOTRlNzMxZmY0NTI0NDhjNjgw
MmFlODIwHhcNMjUwNDEzMDcwMTAxWhcNMjUwNDE0MDcwMTAxWjAzMTEwLwYDVQQD
EygwMjRkNmZkM2U4MWFmOTMwODZiYmY2NDNkMTVmZGE4MzlmM2Y2Nzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwpbvePBq6elIMpc1KaGlqqlju8F
02O407Zpz4cdDiJlJBTS9rrT7Acp47DMhIZjxY2uNEI2IQ3xzw5ONDBcGGEVATkW
KTNkBByGtgVDdg/lzbrEPiryZ2Lzof6B7qaizRUpx82DcSEvK9QhrVLKYnCembu4
wy03UiagzfA8nqHg4MaZannlxQgyiiQOOkaQhTEGfJci3UjnbVbsT2njFIXkHIKU
EBgW/p7YFizJZF08+9Dl4nD97x2TYfh0auRhGfvjmuu6N6sNtpA82T8bcn5/la1j
M0PH9Y+dBMp5GwQxDejuV2dQkbpdBi1s1RRSRl5xEvvSxLBYUhSvumJRdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJNb9PoGvkwhrv2Q9Ff2oOfP2d0MB8GA1UdIwQY
MBaAFG8Tjy4DP5QruU5zH/RSRIxoAq6CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnhPUExnTV9sQ3U1VG5NZjlGSkVqR2dDcm9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9hYmI4ZmMtYTgyYi00MTU3LWIyOGUt
ZTEzOWZiYzI3OWI5LzEvYnhPUExnTV9sQ3U1VG5NZjlGSkVqR2dDcm9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9hYmI4ZmMtYTgyYi00MTU3LWIyOGUtZTEzOWZiYzI3OWI5
LzEvYnhPUExnTV9sQ3U1VG5NZjlGSkVqR2dDcm9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArF8Zuw0u
DXOH4OJ9xpNG/sn4B77zpUpuYoWa2kKRJW1s6hFilF1Odcmc1Oe0lUsaQXMiXU0y
TfqOaX3Sgx1fS3ahgQrLG4W5VDllW/ffwRE+UEEZcs4MV7wD/ueD9VNK+4GUjaUr
nAvnSdttGnzhU+22FpCjhG/gmfxVyDcV0Y6lb0AKiReiLpl96K2dCfgoyxMdSm+w
PsNrZDl1IFVw8fSSvj35XuiyI6nkiqQvu6dEpynn8T69M7pBTNBG7ixcG/ikKntT
FcosotDC4eSn7lCDTuPiEgoQ6MYMCdmoXvc59AhoZzmeyFXClfCLMgYxfAa9XUnz
96cIOjfII0eE9A==
-----END CERTIFICATE-----