Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
File:                     BqTBjS4g22T_nbUpKzefU4t2oVE.mft (raw, json)
Hash identifier:          09Faq66oGrRU2wuOnlT1NPBKa89mL4a8LAQi6+X7sLM=
Subject key identifier:   14:5F:58:F5:E0:BF:1F:3B:B3:02:DC:4B:46:05:B6:27:AC:1C:92:66
Authority key identifier: 06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51
Certificate issuer:       /CN=06a4c18d2e20db64ff9db5292b379f538b76a151
Certificate serial:       01962E2B0632BA5D03AB741A328EB93ACB0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft
Manifest number:          0BE7
Signing time:             Sun 13 Apr 2025 08:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:33 +0000
Files and hashes:         1: BqTBjS4g22T_nbUpKzefU4t2oVE.crl (hash: 40vNivv+Q3Gx0RPvBGSBHeEn6QWiUuKjU3g1tEddqO4=)
                          2: wr12a9AIrcr_aNyfTvBnBd_4UPk.roa (hash: q/68eMJ+gUB4PpFkh+pkPW+TmRs5+PPrtN+mSwC3zqU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:06:32:ba:5d:03:ab:74:1a:32:8e:b9:3a:cb:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06a4c18d2e20db64ff9db5292b379f538b76a151
        Validity
            Not Before: Apr 13 08:01:33 2025 GMT
            Not After : Apr 14 08:01:33 2025 GMT
        Subject: CN=145f58f5e0bf1f3bb302dc4b4605b627ac1c9266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1a:10:99:2b:a5:1f:44:36:10:90:10:92:b8:
                    04:db:2b:c9:04:60:95:8c:26:0c:3a:93:3e:39:33:
                    d3:e6:8d:44:fc:45:f7:f5:d9:f2:84:b5:c8:96:28:
                    da:f1:b9:56:15:91:f4:57:d2:50:a7:9e:90:f0:f1:
                    04:cb:9e:68:f5:e7:57:01:dd:a1:48:fa:10:9d:39:
                    2b:c9:38:3e:cf:12:89:6e:0f:e6:c2:e1:1e:21:8c:
                    9e:f9:bc:f0:1d:08:0c:4a:58:e3:ee:ad:4f:95:43:
                    d6:ad:46:0f:25:08:a1:48:c3:c4:e7:1f:9b:a4:c9:
                    6b:29:3a:e3:9c:6b:22:e1:36:2d:f1:26:d1:4a:eb:
                    9e:1c:34:89:2f:d1:7e:ad:eb:98:12:7e:8b:3a:50:
                    a8:18:a8:e0:62:6a:c1:0e:6c:72:36:cc:e0:d0:be:
                    ee:b7:26:bb:47:f4:e8:6c:79:bc:78:f5:24:9c:ca:
                    7a:d8:d0:45:ef:1a:a5:ff:14:1a:88:6e:c2:6a:49:
                    ad:ab:68:65:f4:29:c3:2f:73:a7:13:45:a3:db:38:
                    d2:b4:8a:70:3d:43:4f:cc:56:62:a9:51:e8:b6:d0:
                    df:14:e9:a7:09:ce:97:7f:ee:a3:fc:1a:69:3c:4f:
                    94:7a:dd:ed:1a:68:3b:a5:47:81:19:36:c3:e2:27:
                    13:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5F:58:F5:E0:BF:1F:3B:B3:02:DC:4B:46:05:B6:27:AC:1C:92:66
            X509v3 Authority Key Identifier:
                keyid:06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:61:1f:26:e5:7b:f6:b2:bf:73:f4:50:ea:1a:be:fd:42:3e:
         77:5e:f6:88:97:b5:ae:44:dd:2f:1d:77:c1:77:8b:11:42:12:
         f6:3e:26:ed:c1:88:65:0e:32:06:da:ed:1d:91:d2:2e:1c:e1:
         2a:9d:bc:8e:42:02:9e:19:dc:7e:b3:a6:be:f9:6f:5a:a3:d0:
         a7:b5:d0:a5:a0:10:cf:4b:58:bd:57:e3:42:80:d9:f8:73:72:
         61:6f:65:d9:26:32:68:34:2c:be:6b:36:34:d0:39:01:5d:ff:
         48:34:5f:15:e5:3d:3e:cf:b9:fc:fa:42:5d:76:25:01:ed:dd:
         5e:ab:c8:ee:95:42:df:a5:59:b8:8a:fe:ed:f9:57:1b:ee:51:
         10:99:8f:c9:ab:c7:31:54:6e:81:b6:70:48:0f:a8:27:7a:4d:
         f1:7e:94:9f:59:6e:28:eb:34:d3:a2:a4:f8:d5:88:ba:f6:a5:
         f7:7e:a0:a7:4c:ca:28:05:29:53:5f:4b:e3:a0:11:31:4f:a4:
         18:07:4e:39:15:c2:8d:97:58:d6:d3:df:dd:8d:d6:5a:dd:7a:
         7c:72:24:9f:3f:e2:51:a6:4b:ba:2b:fd:0f:4a:fc:a5:41:6a:
         43:7b:2c:27:bd:9a:74:5f:1c:5c:4e:7f:1b:6f:12:4d:48:92:
         2c:fd:eb:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKwYyul0Dq3QaMo65OssOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YTRjMThkMmUyMGRiNjRmZjlkYjUyOTJiMzc5ZjUzOGI3
NmExNTEwHhcNMjUwNDEzMDgwMTMzWhcNMjUwNDE0MDgwMTMzWjAzMTEwLwYDVQQD
EygxNDVmNThmNWUwYmYxZjNiYjMwMmRjNGI0NjA1YjYyN2FjMWM5MjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BoQmSulH0Q2EJAQkrgE2yvJBGCV
jCYMOpM+OTPT5o1E/EX39dnyhLXIlija8blWFZH0V9JQp56Q8PEEy55o9edXAd2h
SPoQnTkryTg+zxKJbg/mwuEeIYye+bzwHQgMSljj7q1PlUPWrUYPJQihSMPE5x+b
pMlrKTrjnGsi4TYt8SbRSuueHDSJL9F+reuYEn6LOlCoGKjgYmrBDmxyNszg0L7u
tya7R/TobHm8ePUknMp62NBF7xql/xQaiG7Cakmtq2hl9CnDL3OnE0Wj2zjStIpw
PUNPzFZiqVHottDfFOmnCc6Xf+6j/BppPE+Uet3tGmg7pUeBGTbD4icT6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRfWPXgvx87swLcS0YFtiesHJJmMB8GA1UdIwQY
MBaAFAakwY0uINtk/521KSs3n1OLdqFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnFUQmpTNGcyMlRfbmJVcEt6ZWZVNHQyb1ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8zZDI4OTQtMzJlOS00ZjAyLWE4Yjkt
NTMyZWQyNTY3ZTliLzEvQnFUQmpTNGcyMlRfbmJVcEt6ZWZVNHQyb1ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8zZDI4OTQtMzJlOS00ZjAyLWE4YjktNTMyZWQyNTY3ZTli
LzEvQnFUQmpTNGcyMlRfbmJVcEt6ZWZVNHQyb1ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS2EfJuV7
9rK/c/RQ6hq+/UI+d172iJe1rkTdLx13wXeLEUIS9j4m7cGIZQ4yBtrtHZHSLhzh
Kp28jkICnhncfrOmvvlvWqPQp7XQpaAQz0tYvVfjQoDZ+HNyYW9l2SYyaDQsvms2
NNA5AV3/SDRfFeU9Ps+5/PpCXXYlAe3dXqvI7pVC36VZuIr+7flXG+5REJmPyavH
MVRugbZwSA+oJ3pN8X6Un1luKOs006Kk+NWIuval936gp0zKKAUpU19L46ARMU+k
GAdOORXCjZdY1tPf3Y3WWt16fHIknz/iUaZLuiv9D0r8pUFqQ3ssJ72adF8cXE5/
G28STUiSLP3r+w==
-----END CERTIFICATE-----