Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
File:                     Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft (raw, json)
Hash identifier:          nG5bV0d8ZQZoO+/86DdlhIx8ZeTLAQIAFm2yj8vfvgk=
Subject key identifier:   78:D5:A3:4D:EE:95:83:67:82:80:C3:F7:0B:FB:19:E9:25:16:35:E8
Authority key identifier: 05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D
Certificate issuer:       /CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d
Certificate serial:       01962FAB367DF54A328B82BC86186A2B2FE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:11 +0000
Files and hashes:         1: Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl (hash: pLvOZ1yfQtl8SIZ6d6v8HrC2x0LJzvAUxK9Ue0oa+ZU=)
                          2: FNPjMOoGw_qr5syHiMbZO5lzjMQ.roa (hash: 5qw3tWosyd4KlYSn8mbGOq7ldklrf0oZDzLLsc6wFlk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:36:7d:f5:4a:32:8b:82:bc:86:18:6a:2b:2f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d
        Validity
            Not Before: Apr 13 15:01:11 2025 GMT
            Not After : Apr 14 15:01:11 2025 GMT
        Subject: CN=78d5a34dee9583678280c3f70bfb19e9251635e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ad:84:c2:3f:8c:18:60:b5:6d:8a:6e:c7:fc:
                    76:cf:5e:b5:fe:67:a1:47:a0:0c:25:14:d9:53:5a:
                    95:5a:69:ea:da:0a:8b:66:06:e7:ad:40:3f:34:89:
                    ab:02:a3:69:53:76:81:ff:f7:99:42:62:cb:ad:9a:
                    62:33:c0:57:73:2f:a6:d9:6d:cf:5f:e2:ea:a7:c5:
                    96:05:61:57:14:1c:36:2e:52:49:86:70:22:fa:dd:
                    59:15:ce:21:2c:27:18:03:70:e9:1c:e9:6e:b0:40:
                    3e:bf:b1:85:6d:ac:25:0d:ee:45:f6:5a:64:ad:e8:
                    ec:b2:98:c3:5d:e6:18:f6:e8:62:86:56:8d:43:46:
                    71:00:4f:20:a6:f9:81:73:13:60:49:ec:ac:7f:93:
                    94:17:0d:22:18:32:a8:13:ba:06:13:fc:cd:2f:b3:
                    83:f8:45:17:17:f5:d1:51:12:ea:73:3b:9b:50:2a:
                    06:eb:21:f9:7a:fe:d3:31:97:e5:9a:3c:ce:cd:0d:
                    78:26:2d:1a:f3:92:1b:85:d6:de:8a:f0:34:a9:25:
                    2f:d6:8d:1e:9d:17:20:38:8d:a8:2f:3f:8a:d3:10:
                    f5:00:65:85:34:39:c3:5d:53:ba:b7:87:fa:3a:a3:
                    88:97:a2:72:e7:e5:84:9b:7b:46:b6:1b:0c:ab:bc:
                    26:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D5:A3:4D:EE:95:83:67:82:80:C3:F7:0B:FB:19:E9:25:16:35:E8
            X509v3 Authority Key Identifier:
                keyid:05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:a1:0c:17:a9:d1:62:a2:3a:a4:0d:e6:f4:ba:54:a6:b9:00:
         db:69:46:b6:cd:5d:c4:b4:2d:01:f0:cf:d6:86:40:f0:20:5d:
         5d:a5:16:70:70:14:60:d8:42:f3:3c:f8:8f:55:6d:6c:50:31:
         ca:e1:a0:22:84:a3:1c:a6:4b:a8:c9:b4:4a:58:2f:09:bd:f8:
         cd:0b:48:02:d4:d8:bc:e6:ca:8a:b6:bf:eb:21:50:de:18:dc:
         40:94:54:b4:66:cb:2e:cb:84:03:d6:b9:a7:64:48:61:29:0b:
         4c:3e:76:80:cb:d3:8b:98:e9:e5:42:30:9b:a4:f3:27:98:74:
         8d:ff:0b:ae:25:67:56:d1:6a:98:b3:93:7c:b8:ab:15:b0:16:
         ca:06:04:90:35:60:cf:c3:b2:2d:fe:be:dd:81:e6:bd:59:ed:
         60:06:2a:f1:c6:66:90:5a:df:26:5e:03:25:50:ed:56:83:9d:
         19:d4:d6:ea:ca:0c:3a:28:9e:a1:82:cc:04:86:2e:ce:0b:65:
         37:02:31:14:c1:8e:f2:9a:2b:ba:eb:2f:c6:26:60:b7:59:ee:
         64:3c:fd:d1:63:1c:7a:70:49:c1:a7:df:94:bb:66:aa:47:25:
         f8:cb:19:d3:d4:4f:53:99:56:86:a7:06:70:cd:01:01:cd:1d:
         3f:00:8c:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqzZ99Uoyi4K8hhhqKy/lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZGYxY2EzYjY2NWYyNGNiZTEwMWNmYzJmMzgzNDRkYThi
MTc2OGQwHhcNMjUwNDEzMTUwMTExWhcNMjUwNDE0MTUwMTExWjAzMTEwLwYDVQQD
Eyg3OGQ1YTM0ZGVlOTU4MzY3ODI4MGMzZjcwYmZiMTllOTI1MTYzNWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa2Ewj+MGGC1bYpux/x2z161/meh
R6AMJRTZU1qVWmnq2gqLZgbnrUA/NImrAqNpU3aB//eZQmLLrZpiM8BXcy+m2W3P
X+Lqp8WWBWFXFBw2LlJJhnAi+t1ZFc4hLCcYA3DpHOlusEA+v7GFbawlDe5F9lpk
rejsspjDXeYY9uhihlaNQ0ZxAE8gpvmBcxNgSeysf5OUFw0iGDKoE7oGE/zNL7OD
+EUXF/XRURLqczubUCoG6yH5ev7TMZflmjzOzQ14Ji0a85IbhdbeivA0qSUv1o0e
nRcgOI2oLz+K0xD1AGWFNDnDXVO6t4f6OqOIl6Jy5+WEm3tGthsMq7wm4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHjVo03ulYNngoDD9wv7GeklFjXoMB8GA1UdIwQY
MBaAFAXfHKO2ZfJMvhAc/C84NE2osXaNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmQ4Y283Wmw4a3ktRUJ6OEx6ZzBUYWl4ZG8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi84OGQzYjMtODI1Ny00N2FhLWEyMjct
ZDAyYWFmYjgzMmM0LzEvQmQ4Y283Wmw4a3ktRUJ6OEx6ZzBUYWl4ZG8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi84OGQzYjMtODI1Ny00N2FhLWEyMjctZDAyYWFmYjgzMmM0
LzEvQmQ4Y283Wmw4a3ktRUJ6OEx6ZzBUYWl4ZG8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEaEMF6nR
YqI6pA3m9LpUprkA22lGts1dxLQtAfDP1oZA8CBdXaUWcHAUYNhC8zz4j1VtbFAx
yuGgIoSjHKZLqMm0SlgvCb34zQtIAtTYvObKira/6yFQ3hjcQJRUtGbLLsuEA9a5
p2RIYSkLTD52gMvTi5jp5UIwm6TzJ5h0jf8LriVnVtFqmLOTfLirFbAWygYEkDVg
z8OyLf6+3YHmvVntYAYq8cZmkFrfJl4DJVDtVoOdGdTW6soMOiieoYLMBIYuzgtl
NwIxFMGO8poruusvxiZgt1nuZDz90WMcenBJwafflLtmqkcl+MsZ09RPU5lWhqcG
cM0BAc0dPwCM/w==
-----END CERTIFICATE-----