Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
File:                     BUHqG_Ktqt02piLrPqg13Ju2gZs.mft (raw, json)
Hash identifier:          q4a8zbIvHny3NxJB65qLGYrXCTcgHASOxbxL9OuUylk=
Subject key identifier:   53:2F:6F:05:D0:54:9D:F3:9D:28:58:50:EB:70:55:43:ED:F5:D7:19
Authority key identifier: 05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B
Certificate issuer:       /CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b
Certificate serial:       01962F3D4EEF82374DDE07EE59BE2D0E8AEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft
Manifest number:          139F
Signing time:             Sun 13 Apr 2025 13:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:09 +0000
Files and hashes:         1: BUHqG_Ktqt02piLrPqg13Ju2gZs.crl (hash: W2NaFZAwoU+LRq3J6/8oIlz4/FXx1kRscNS46Y9Iuzw=)
                          2: GIPybF1nvDpVQajMG8DWoYzoWhc.roa (hash: o+zoF0xKL9l55iOY2y1WPp4gwlsjSDH8TktFrJp4Gm0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4e:ef:82:37:4d:de:07:ee:59:be:2d:0e:8a:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b
        Validity
            Not Before: Apr 13 13:01:09 2025 GMT
            Not After : Apr 14 13:01:09 2025 GMT
        Subject: CN=532f6f05d0549df39d285850eb705543edf5d719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1d:70:d8:a1:3e:c0:af:f6:e8:c4:00:4b:9a:
                    2f:63:bb:0c:ff:41:1e:de:bd:7b:96:78:4b:ba:37:
                    cd:78:5b:3a:87:23:7a:d9:a8:72:b8:5e:fc:4d:f0:
                    82:5d:51:de:6a:d9:e9:f6:0a:3e:5f:22:23:c2:f7:
                    ee:bf:d3:76:22:0e:ad:97:35:87:ba:60:fa:e3:b3:
                    0d:63:eb:07:be:fb:a0:49:88:26:9b:03:7d:4f:92:
                    71:8b:08:33:d4:f5:f3:0f:00:43:21:72:95:5e:5d:
                    28:3f:ef:e2:05:b8:15:28:17:d3:3d:53:0a:d4:16:
                    80:ec:c2:00:e5:94:5d:15:0d:e1:c1:d4:37:d5:0a:
                    d0:3d:14:6e:c0:b0:1a:85:33:a5:59:03:3f:a4:da:
                    9c:cc:53:33:83:c1:d1:42:dd:db:0b:85:28:ec:fd:
                    42:c6:4e:65:82:04:85:7b:34:69:bb:93:59:85:a2:
                    d2:05:6e:9f:bc:4a:a6:ac:bd:69:3e:74:64:5a:69:
                    37:d1:ef:31:2c:8c:51:37:2c:a2:31:9c:a4:3f:40:
                    86:97:2c:3a:02:23:e6:8e:2f:d2:9c:83:bf:b1:b4:
                    08:8d:6b:a7:19:52:91:4b:07:00:ab:de:4a:1d:4a:
                    49:33:29:66:0d:15:87:0e:d1:5f:96:a0:d0:c6:70:
                    e2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2F:6F:05:D0:54:9D:F3:9D:28:58:50:EB:70:55:43:ED:F5:D7:19
            X509v3 Authority Key Identifier:
                keyid:05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:34:15:2d:d1:50:17:cf:f6:7b:19:2d:a9:12:64:0b:34:91:
         68:cf:8c:74:06:d1:e5:92:0a:0b:fb:05:79:30:27:0d:52:7d:
         ac:05:7b:b1:13:66:8f:cf:bc:60:d8:fa:5e:75:d8:2f:95:ff:
         a9:94:02:ff:df:b9:7d:32:bd:35:b0:92:c3:26:37:76:dd:f4:
         83:ad:9b:2f:10:de:5a:53:29:5c:6d:ef:c2:5f:f8:78:94:4b:
         e7:b3:03:22:68:87:f0:ab:ca:7d:03:26:a7:cb:c8:bd:2a:ed:
         fc:6f:64:ae:34:25:61:64:d4:21:da:c9:d4:bd:5c:97:91:41:
         cb:3e:86:bc:ad:3b:27:92:b5:51:e5:10:cd:a5:55:19:16:d6:
         6c:7f:c7:c0:8f:75:0e:2a:5c:cc:69:35:68:24:3c:d4:32:a3:
         79:86:b3:89:69:d0:a2:5d:6f:cd:f8:d8:3f:f8:fa:cd:0b:2e:
         33:10:2a:21:74:a9:0d:3e:10:7d:7c:97:66:ed:ad:be:4f:67:
         de:ef:19:8c:34:22:17:74:4d:f8:8a:58:75:87:ea:a7:6a:7a:
         62:e2:1d:1e:57:b4:bb:a7:0c:c4:21:02:14:e0:3b:a0:15:9f:
         79:9b:10:3f:06:3b:e1:e6:76:2c:d7:9c:8b:21:20:3b:61:76:
         85:56:e3:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPU7vgjdN3gfuWb4tDorsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDFlYTFiZjJhZGFhZGQzNmE2MjJlYjNlYTgzNWRjOWJi
NjgxOWIwHhcNMjUwNDEzMTMwMTA5WhcNMjUwNDE0MTMwMTA5WjAzMTEwLwYDVQQD
Eyg1MzJmNmYwNWQwNTQ5ZGYzOWQyODU4NTBlYjcwNTU0M2VkZjVkNzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB1w2KE+wK/26MQAS5ovY7sM/0Ee
3r17lnhLujfNeFs6hyN62ahyuF78TfCCXVHeatnp9go+XyIjwvfuv9N2Ig6tlzWH
umD647MNY+sHvvugSYgmmwN9T5Jxiwgz1PXzDwBDIXKVXl0oP+/iBbgVKBfTPVMK
1BaA7MIA5ZRdFQ3hwdQ31QrQPRRuwLAahTOlWQM/pNqczFMzg8HRQt3bC4Uo7P1C
xk5lggSFezRpu5NZhaLSBW6fvEqmrL1pPnRkWmk30e8xLIxRNyyiMZykP0CGlyw6
AiPmji/SnIO/sbQIjWunGVKRSwcAq95KHUpJMylmDRWHDtFflqDQxnDi6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMvbwXQVJ3znShYUOtwVUPt9dcZMB8GA1UdIwQY
MBaAFAVB6hvyrardNqYi6z6oNdybtoGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVIcUdfS3RxdDAycGlMclBxZzEzSnUyZ1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi82NGEwNjMtNWM0ZC00MTBjLTg2YWEt
MjRhZmNlZjRmM2Y1LzEvQlVIcUdfS3RxdDAycGlMclBxZzEzSnUyZ1pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi82NGEwNjMtNWM0ZC00MTBjLTg2YWEtMjRhZmNlZjRmM2Y1
LzEvQlVIcUdfS3RxdDAycGlMclBxZzEzSnUyZ1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFzQVLdFQ
F8/2exktqRJkCzSRaM+MdAbR5ZIKC/sFeTAnDVJ9rAV7sRNmj8+8YNj6XnXYL5X/
qZQC/9+5fTK9NbCSwyY3dt30g62bLxDeWlMpXG3vwl/4eJRL57MDImiH8KvKfQMm
p8vIvSrt/G9krjQlYWTUIdrJ1L1cl5FByz6GvK07J5K1UeUQzaVVGRbWbH/HwI91
DipczGk1aCQ81DKjeYaziWnQol1vzfjYP/j6zQsuMxAqIXSpDT4QfXyXZu2tvk9n
3u8ZjDQiF3RN+IpYdYfqp2p6YuIdHle0u6cMxCECFOA7oBWfeZsQPwY74eZ2LNec
iyEgO2F2hVbj1g==
-----END CERTIFICATE-----