Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft
File:                     0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft (raw, json)
Hash identifier:          oQbRQEphjjltaLfWsOQHyl7tDasqGavhwGJC4qhBQiM=
Subject key identifier:   96:78:0E:1C:C8:C2:D7:D7:1B:20:14:59:FC:F2:46:92:C9:6D:E0:0F
Authority key identifier: D1:B7:AC:BB:E6:54:27:C3:E3:61:15:4E:FC:3E:9B:38:AC:CD:C9:0C
Certificate issuer:       /CN=d1b7acbbe65427c3e361154efc3e9b38accdc90c
Certificate serial:       01962ECF98A9CD3E9DC48B4AA649A0361F32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft
Manifest number:          1293
Signing time:             Sun 13 Apr 2025 11:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:18 +0000
Files and hashes:         1: 0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl (hash: 1o/UCnJqHCmkbmYpLpFcPBXjjkIzAHTb8LZ52kU/OAU=)
                          2: aslvAzWrkieZYpSVHXy9ukXCbnc.roa (hash: yIgr60ZsmvtMcpizBEZgSYhdXH9PzjNeiOmyJWJcUDs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:98:a9:cd:3e:9d:c4:8b:4a:a6:49:a0:36:1f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1b7acbbe65427c3e361154efc3e9b38accdc90c
        Validity
            Not Before: Apr 13 11:01:18 2025 GMT
            Not After : Apr 14 11:01:18 2025 GMT
        Subject: CN=96780e1cc8c2d7d71b201459fcf24692c96de00f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cf:33:7b:38:3d:97:85:c6:81:39:64:ef:0c:
                    8b:7b:a5:10:34:12:fa:7b:8f:4d:e9:cf:bf:85:3b:
                    8f:fd:b4:e7:ad:a0:2c:88:96:75:31:9e:08:5d:45:
                    72:bb:f1:6e:5e:bd:66:a8:7b:06:4e:0c:6f:41:cf:
                    e7:f1:1e:8d:78:ea:4a:e1:4a:4b:b5:42:b7:61:b1:
                    ed:19:1f:2d:03:91:9e:d4:a9:77:39:22:2a:ed:76:
                    31:cd:b7:14:99:30:58:ac:91:f8:48:ef:ea:b8:af:
                    33:b6:ad:d4:05:0a:38:e2:d6:05:c8:4f:a1:8a:3c:
                    a4:f8:7b:4a:1f:10:e1:a6:6c:a9:00:d4:4b:50:b2:
                    28:d6:3c:64:65:6f:1f:b6:f9:24:0e:0d:99:ab:65:
                    96:3e:c8:18:ac:01:47:f9:ee:07:98:30:0d:5a:9b:
                    45:08:4c:f5:68:27:94:91:51:8e:20:40:f9:6d:62:
                    4a:bb:d3:3f:79:9c:bf:2b:26:54:4a:73:72:66:4d:
                    8f:04:c8:e7:d9:26:46:7e:31:4b:4f:05:dd:b9:94:
                    84:56:64:72:98:84:5e:ea:5b:8b:fd:36:52:d9:64:
                    6d:08:01:a0:d3:aa:8b:9b:1f:4b:45:95:7f:fa:0e:
                    fc:e0:2f:2c:b7:20:a0:5c:06:9c:24:21:32:b1:88:
                    1a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:78:0E:1C:C8:C2:D7:D7:1B:20:14:59:FC:F2:46:92:C9:6D:E0:0F
            X509v3 Authority Key Identifier:
                keyid:D1:B7:AC:BB:E6:54:27:C3:E3:61:15:4E:FC:3E:9B:38:AC:CD:C9:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0besu-ZUJ8PjYRVO_D6bOKzNyQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e25540-6683-452a-a173-1d4f4f96dad4/1/0besu-ZUJ8PjYRVO_D6bOKzNyQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:7b:62:f0:c9:1e:7a:f5:f6:76:30:ff:d1:33:e6:00:c8:67:
         21:50:7f:54:2d:49:c6:be:5d:df:32:42:a9:5a:87:2d:df:c2:
         03:42:fe:47:3d:7e:e3:c4:2a:7d:c5:c8:df:5d:89:11:af:a8:
         ed:5e:20:69:3d:54:76:28:ed:42:8d:db:fe:dc:27:c9:f0:7e:
         c6:80:95:c4:79:b7:46:92:bd:8d:fe:a4:35:dc:6e:eb:3a:d7:
         e5:a7:06:33:56:ff:8b:04:9e:2a:57:5f:4d:7f:e7:54:66:c8:
         cc:04:e9:31:d4:7e:83:0e:ce:4d:28:f9:a0:b2:13:28:80:fa:
         0c:8d:e8:52:58:2a:b7:08:c1:60:1d:d8:d2:d4:ca:ec:09:d7:
         67:dd:05:28:18:31:60:fe:4f:53:99:f4:b6:ab:46:fd:9a:1e:
         d5:8d:6c:ad:34:28:d3:fe:d0:ac:85:51:eb:51:9b:c2:f3:be:
         00:a0:21:24:1f:c1:3e:a1:c2:56:a9:11:47:3a:83:fc:85:6d:
         05:21:3f:90:0a:74:a3:b9:ed:ec:9c:fb:d5:f2:5c:fc:2a:09:
         ab:43:ce:60:30:3b:4c:a0:a8:1e:8e:8a:19:10:0b:93:25:73:
         28:b3:08:82:a9:72:0c:dd:d2:d7:7c:ab:96:e3:13:5d:63:4a:
         e9:45:3f:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz5ipzT6dxItKpkmgNh8yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYjdhY2JiZTY1NDI3YzNlMzYxMTU0ZWZjM2U5YjM4YWNj
ZGM5MGMwHhcNMjUwNDEzMTEwMTE4WhcNMjUwNDE0MTEwMTE4WjAzMTEwLwYDVQQD
Eyg5Njc4MGUxY2M4YzJkN2Q3MWIyMDE0NTlmY2YyNDY5MmM5NmRlMDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0s8zezg9l4XGgTlk7wyLe6UQNBL6
e49N6c+/hTuP/bTnraAsiJZ1MZ4IXUVyu/FuXr1mqHsGTgxvQc/n8R6NeOpK4UpL
tUK3YbHtGR8tA5Ge1Kl3OSIq7XYxzbcUmTBYrJH4SO/quK8ztq3UBQo44tYFyE+h
ijyk+HtKHxDhpmypANRLULIo1jxkZW8ftvkkDg2Zq2WWPsgYrAFH+e4HmDANWptF
CEz1aCeUkVGOIED5bWJKu9M/eZy/KyZUSnNyZk2PBMjn2SZGfjFLTwXduZSEVmRy
mIRe6luL/TZS2WRtCAGg06qLmx9LRZV/+g784C8styCgXAacJCEysYgaOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZ4DhzIwtfXGyAUWfzyRpLJbeAPMB8GA1UdIwQY
MBaAFNG3rLvmVCfD42EVTvw+mziszckMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGJlc3UtWlVKOFBqWVJWT19ENmJPS3pOeVF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9lMjU1NDAtNjY4My00NTJhLWExNzMt
MWQ0ZjRmOTZkYWQ0LzEvMGJlc3UtWlVKOFBqWVJWT19ENmJPS3pOeVF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9lMjU1NDAtNjY4My00NTJhLWExNzMtMWQ0ZjRmOTZkYWQ0
LzEvMGJlc3UtWlVKOFBqWVJWT19ENmJPS3pOeVF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMHti8Mke
evX2djD/0TPmAMhnIVB/VC1Jxr5d3zJCqVqHLd/CA0L+Rz1+48QqfcXI312JEa+o
7V4gaT1UdijtQo3b/twnyfB+xoCVxHm3RpK9jf6kNdxu6zrX5acGM1b/iwSeKldf
TX/nVGbIzATpMdR+gw7OTSj5oLITKID6DI3oUlgqtwjBYB3Y0tTK7AnXZ90FKBgx
YP5PU5n0tqtG/Zoe1Y1srTQo0/7QrIVR61GbwvO+AKAhJB/BPqHCVqkRRzqD/IVt
BSE/kAp0o7nt7Jz71fJc/CoJq0POYDA7TKCoHo6KGRALkyVzKLMIgqlyDN3S13yr
luMTXWNK6UU/fA==
-----END CERTIFICATE-----