Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
File:                     Bjutx4U7BRAKayJN3O_Bji59PdU.mft (raw, json)
Hash identifier:          gX6KdikFvswniggZhc/Orm3vfjSSMY9aIdpdDcNucaA=
Subject key identifier:   C5:E2:9B:22:9C:4E:DB:39:21:29:A6:D8:3C:14:A7:D2:FA:FB:E0:00
Authority key identifier: 06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5
Certificate issuer:       /CN=063badc7853b05100a6b224ddcefc18e2e7d3dd5
Certificate serial:       01962E61CCBFC5C0A1F62931DF80C8785B87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft
Manifest number:          0C8F
Signing time:             Sun 13 Apr 2025 09:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:23 +0000
Files and hashes:         1: Bjutx4U7BRAKayJN3O_Bji59PdU.crl (hash: wjDeh/voISPvTHpLO6jn9ruFh6oiQkGg2g/OaSG32ug=)
                          2: noBL3J3r3tsM2aoB7sMnaFXK45A.roa (hash: 1slbvNJzht+Braw0JbEJxueE4i9IP1ZbfhD3OHI5Tsw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:cc:bf:c5:c0:a1:f6:29:31:df:80:c8:78:5b:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=063badc7853b05100a6b224ddcefc18e2e7d3dd5
        Validity
            Not Before: Apr 13 09:01:23 2025 GMT
            Not After : Apr 14 09:01:23 2025 GMT
        Subject: CN=c5e29b229c4edb392129a6d83c14a7d2fafbe000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:63:d0:bc:d0:fe:72:0e:87:7c:3f:57:1a:7b:
                    d0:24:13:9b:9c:a4:0e:60:1f:09:80:5f:56:9c:31:
                    18:a9:40:31:68:8e:9e:14:24:1e:8b:dc:87:b1:af:
                    3d:ed:e9:f0:98:94:b4:6d:28:7a:11:07:7d:16:15:
                    1b:4e:50:fe:86:70:76:8d:46:72:f8:d8:7e:26:82:
                    a5:96:76:08:46:91:68:26:d5:a3:f0:0a:eb:ea:d3:
                    f2:2e:eb:77:75:1b:92:04:30:23:89:df:5b:19:97:
                    e5:5d:dc:c5:8d:68:0f:bb:e0:1b:a9:a5:58:2e:fc:
                    39:b6:9a:8b:e1:c6:36:a1:95:4c:81:bc:62:7c:b0:
                    30:43:90:59:39:c2:5c:90:80:11:80:8d:2c:52:f7:
                    fb:f7:90:55:1f:97:93:69:33:fb:bf:23:9a:90:65:
                    b7:1d:c5:ac:26:48:9b:33:f6:a8:df:64:1d:d8:07:
                    06:67:b8:27:94:fa:bd:cd:77:49:f1:38:d3:09:71:
                    a8:27:fc:3b:d3:95:b6:d3:56:d3:79:3f:22:73:f8:
                    9f:ae:dc:99:c3:50:ed:a2:bf:b9:5e:90:c7:d9:b4:
                    8b:3b:c8:17:c4:18:8f:76:fa:ce:96:49:5b:9b:cd:
                    be:7e:c7:83:2f:b8:37:4e:2c:46:00:d1:26:b3:85:
                    35:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E2:9B:22:9C:4E:DB:39:21:29:A6:D8:3C:14:A7:D2:FA:FB:E0:00
            X509v3 Authority Key Identifier:
                keyid:06:3B:AD:C7:85:3B:05:10:0A:6B:22:4D:DC:EF:C1:8E:2E:7D:3D:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bjutx4U7BRAKayJN3O_Bji59PdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d09fb0-9aa5-4b5a-8a4f-a237444af829/1/Bjutx4U7BRAKayJN3O_Bji59PdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:63:f3:50:b2:11:9c:bd:ee:3c:f1:ac:0a:24:0f:04:30:16:
         8b:8f:86:7a:99:e5:7f:77:3f:3f:47:69:98:58:b8:b1:7b:04:
         6e:f5:ae:51:c6:88:5e:aa:2c:9f:03:a4:a7:bb:a3:62:50:8d:
         12:55:27:0f:94:4d:2d:f3:6e:31:7f:4e:4e:cf:12:7e:93:ce:
         96:9c:ac:03:38:00:d1:cb:9c:15:95:07:8d:f0:47:23:f2:ad:
         a0:2b:c8:b2:0e:a9:a6:80:d9:96:e3:20:56:5f:8b:a1:f6:f6:
         ea:31:e8:de:ba:93:51:9c:1b:a7:c1:9a:40:44:55:81:6f:2f:
         01:4b:3f:da:ed:6a:9c:1c:ba:cc:bb:17:b0:34:fb:b8:c7:99:
         fe:d5:33:db:7c:43:45:f4:42:57:64:67:20:4c:bd:f1:4d:d4:
         8e:e9:0e:f2:ab:5b:94:0c:d2:e9:60:af:a0:a7:33:e6:66:56:
         3e:20:89:d6:83:bf:35:34:be:ec:f6:c4:50:80:47:d3:a6:d9:
         8e:66:b9:7d:2a:5c:71:ef:bc:38:c4:cd:45:cc:64:87:d7:40:
         49:b5:77:e7:5e:5e:22:d8:0b:11:48:3c:07:f4:fb:ed:d1:89:
         17:ab:8f:52:3b:76:ee:18:87:d2:a6:92:24:f7:59:7d:41:7c:
         29:94:f4:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYcy/xcCh9ikx34DIeFuHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2M2JhZGM3ODUzYjA1MTAwYTZiMjI0ZGRjZWZjMThlMmU3
ZDNkZDUwHhcNMjUwNDEzMDkwMTIzWhcNMjUwNDE0MDkwMTIzWjAzMTEwLwYDVQQD
EyhjNWUyOWIyMjljNGVkYjM5MjEyOWE2ZDgzYzE0YTdkMmZhZmJlMDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52PQvND+cg6HfD9XGnvQJBObnKQO
YB8JgF9WnDEYqUAxaI6eFCQei9yHsa897enwmJS0bSh6EQd9FhUbTlD+hnB2jUZy
+Nh+JoKllnYIRpFoJtWj8Arr6tPyLut3dRuSBDAjid9bGZflXdzFjWgPu+AbqaVY
Lvw5tpqL4cY2oZVMgbxifLAwQ5BZOcJckIARgI0sUvf795BVH5eTaTP7vyOakGW3
HcWsJkibM/ao32Qd2AcGZ7gnlPq9zXdJ8TjTCXGoJ/w705W201bTeT8ic/ifrtyZ
w1Dtor+5XpDH2bSLO8gXxBiPdvrOlklbm82+fseDL7g3TixGANEms4U1nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXimyKcTts5ISmm2DwUp9L6++AAMB8GA1UdIwQY
MBaAFAY7rceFOwUQCmsiTdzvwY4ufT3VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmp1dHg0VTdCUkFLYXlKTjNPX0JqaTU5UGRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9kMDlmYjAtOWFhNS00YjVhLThhNGYt
YTIzNzQ0NGFmODI5LzEvQmp1dHg0VTdCUkFLYXlKTjNPX0JqaTU5UGRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9kMDlmYjAtOWFhNS00YjVhLThhNGYtYTIzNzQ0NGFmODI5
LzEvQmp1dHg0VTdCUkFLYXlKTjNPX0JqaTU5UGRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUWPzULIR
nL3uPPGsCiQPBDAWi4+Gepnlf3c/P0dpmFi4sXsEbvWuUcaIXqosnwOkp7ujYlCN
ElUnD5RNLfNuMX9OTs8SfpPOlpysAzgA0cucFZUHjfBHI/KtoCvIsg6ppoDZluMg
Vl+Lofb26jHo3rqTUZwbp8GaQERVgW8vAUs/2u1qnBy6zLsXsDT7uMeZ/tUz23xD
RfRCV2RnIEy98U3UjukO8qtblAzS6WCvoKcz5mZWPiCJ1oO/NTS+7PbEUIBH06bZ
jma5fSpcce+8OMTNRcxkh9dASbV3515eItgLEUg8B/T77dGJF6uPUjt27hiH0qaS
JPdZfUF8KZT0Ow==
-----END CERTIFICATE-----