Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
File:                     B8nKHieDB7riQFpINK9EfAZBRwE.mft (raw, json)
Hash identifier:          23QFAwjCH1FenTOe07DlexgwyzJQMVeHFDzO4UwmDII=
Subject key identifier:   76:9A:72:0D:D6:8E:45:B6:A3:B7:BB:D6:25:30:97:CC:82:B8:E7:58
Authority key identifier: 07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
Certificate issuer:       /CN=07c9ca1e278307bae2405a4834af447c06414701
Certificate serial:       01962F3DE5A65AB6236000908C62EAD31445
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
Manifest number:          0573
Signing time:             Sun 13 Apr 2025 13:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:47 +0000
Files and hashes:         1: B8nKHieDB7riQFpINK9EfAZBRwE.crl (hash: q/W8rxN5bty0QS8CMlPyle6LMwXJTHWebILzI5MM+lc=)
                          2: F9Q0Mg_SdChrVPmjRELNfy5ikeQ.roa (hash: D+oypEIJiZTBGT95av8yorKEZBq5uNCWOIeANOZvJiA=)
                          3: gpb4-1Pa8jheX2ShBqmDY1Oz_uE.roa (hash: ouq0lXCMNkqwSYjgnbFoNQVBaOceZaj3Z0yPlQ2cSos=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:e5:a6:5a:b6:23:60:00:90:8c:62:ea:d3:14:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c9ca1e278307bae2405a4834af447c06414701
        Validity
            Not Before: Apr 13 13:01:47 2025 GMT
            Not After : Apr 14 13:01:47 2025 GMT
        Subject: CN=769a720dd68e45b6a3b7bbd6253097cc82b8e758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:79:f4:1f:be:f4:5d:f5:bd:86:ea:52:41:6f:
                    80:a4:5e:ac:d9:26:c9:d1:a7:09:4e:33:86:e7:e1:
                    23:cd:a8:91:d5:83:de:d8:6c:8c:51:36:a6:e3:49:
                    49:87:7b:ab:f6:70:9e:38:c1:c0:8e:ca:bd:28:01:
                    19:36:db:61:58:17:45:69:aa:c6:a0:f5:7e:5a:18:
                    81:66:a1:fc:b7:2c:91:e1:35:b3:14:60:c2:d8:a7:
                    92:39:06:57:e6:56:1b:0b:30:43:1f:ef:7e:dd:b7:
                    56:16:f3:41:bc:8d:70:fc:c0:6c:a5:65:d3:a7:b0:
                    0d:f8:a8:c4:95:5b:57:6a:fa:11:b7:e0:33:44:9c:
                    1f:7e:c8:e8:4f:d8:eb:82:15:75:be:d2:b6:52:f1:
                    e3:05:96:17:54:d3:b3:3c:90:cb:fc:fc:f8:df:39:
                    b8:17:d6:4e:c4:fe:9b:73:34:fa:21:76:24:ef:b5:
                    f4:97:5e:b6:72:17:f6:dd:0d:3d:40:0b:c7:ed:95:
                    71:1c:69:7a:43:a2:47:b9:0e:1f:13:85:8c:56:6b:
                    33:55:21:3a:ea:ef:49:c5:cc:0b:3b:06:4d:a8:a5:
                    f1:5c:52:a8:8a:3f:82:f5:5e:ae:b9:a7:2c:28:e2:
                    d4:bd:c2:ac:16:d8:2e:bc:a7:99:d5:bf:62:b3:4b:
                    73:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9A:72:0D:D6:8E:45:B6:A3:B7:BB:D6:25:30:97:CC:82:B8:E7:58
            X509v3 Authority Key Identifier:
                keyid:07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:b1:4e:38:f7:99:f7:b8:27:2b:ce:f0:4b:0b:18:07:6a:ae:
         a4:fe:11:8c:7b:43:c7:0c:6d:2d:3f:37:31:e5:bc:1a:4d:47:
         91:10:85:c7:cd:8c:34:62:ce:04:89:ce:85:fb:ce:7a:27:84:
         36:b7:fe:d0:78:8d:08:00:9c:89:96:70:44:9a:8a:1d:23:53:
         09:09:db:46:e5:c5:a1:f2:75:71:9f:79:9f:20:5f:8f:bf:d5:
         f0:ae:3f:de:c8:58:75:77:90:4e:10:0c:00:a3:60:0a:39:79:
         e6:58:a7:1e:92:3c:96:c6:93:7a:e5:ca:83:50:6d:d6:27:86:
         28:40:4f:38:76:f9:a6:18:2a:2f:f4:cb:8e:b3:0e:70:8a:70:
         c9:09:8e:22:7a:47:89:6e:7b:e3:e7:8c:67:68:4e:fc:91:22:
         51:e6:ae:46:14:d6:19:30:42:21:94:fa:b0:c5:f2:7b:5c:29:
         f9:e5:9e:50:ca:8b:b5:32:77:9f:a4:ff:57:7e:dd:fc:ad:16:
         d5:82:e0:03:1d:ab:8f:fa:f9:b5:4e:86:55:a4:56:65:f6:20:
         7e:8b:94:65:a6:b6:cf:e3:12:8b:11:44:6a:70:88:01:11:f3:
         59:b7:87:c9:8f:35:ef:2f:98:27:10:9d:29:38:03:68:77:3b:
         00:4c:bd:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPeWmWrYjYACQjGLq0xRFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YzljYTFlMjc4MzA3YmFlMjQwNWE0ODM0YWY0NDdjMDY0
MTQ3MDEwHhcNMjUwNDEzMTMwMTQ3WhcNMjUwNDE0MTMwMTQ3WjAzMTEwLwYDVQQD
Eyg3NjlhNzIwZGQ2OGU0NWI2YTNiN2JiZDYyNTMwOTdjYzgyYjhlNzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXn0H770XfW9hupSQW+ApF6s2SbJ
0acJTjOG5+EjzaiR1YPe2GyMUTam40lJh3ur9nCeOMHAjsq9KAEZNtthWBdFaarG
oPV+WhiBZqH8tyyR4TWzFGDC2KeSOQZX5lYbCzBDH+9+3bdWFvNBvI1w/MBspWXT
p7AN+KjElVtXavoRt+AzRJwffsjoT9jrghV1vtK2UvHjBZYXVNOzPJDL/Pz43zm4
F9ZOxP6bczT6IXYk77X0l162chf23Q09QAvH7ZVxHGl6Q6JHuQ4fE4WMVmszVSE6
6u9JxcwLOwZNqKXxXFKoij+C9V6uuacsKOLUvcKsFtguvKeZ1b9is0tzsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaacg3WjkW2o7e71iUwl8yCuOdYMB8GA1UdIwQY
MBaAFAfJyh4ngwe64kBaSDSvRHwGQUcBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjhuS0hpZURCN3JpUUZwSU5LOUVmQVpCUndFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8yNjNjMjYtN2RjYS00NTEyLTgzNGYt
MDA1ZWRmYjc2MWM2LzEvQjhuS0hpZURCN3JpUUZwSU5LOUVmQVpCUndFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8yNjNjMjYtN2RjYS00NTEyLTgzNGYtMDA1ZWRmYjc2MWM2
LzEvQjhuS0hpZURCN3JpUUZwSU5LOUVmQVpCUndFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtbFOOPeZ
97gnK87wSwsYB2qupP4RjHtDxwxtLT83MeW8Gk1HkRCFx82MNGLOBInOhfvOeieE
Nrf+0HiNCACciZZwRJqKHSNTCQnbRuXFofJ1cZ95nyBfj7/V8K4/3shYdXeQThAM
AKNgCjl55linHpI8lsaTeuXKg1Bt1ieGKEBPOHb5phgqL/TLjrMOcIpwyQmOInpH
iW574+eMZ2hO/JEiUeauRhTWGTBCIZT6sMXye1wp+eWeUMqLtTJ3n6T/V37d/K0W
1YLgAx2rj/r5tU6GVaRWZfYgfouUZaa2z+MSixFEanCIARHzWbeHyY817y+YJxCd
KTgDaHc7AEy93Q==
-----END CERTIFICATE-----