Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
File:                     BbzEhnSas6uATPEZjL9XWoQFqNQ.mft (raw, json)
Hash identifier:          MCwL3q0Imy5xFY2TgJ7N1ELFZYhOS2IhtcTMCZ6A4Wg=
Subject key identifier:   55:34:65:45:74:7A:4E:19:D7:EE:4B:9E:5D:4E:6F:B5:39:0F:61:2C
Authority key identifier: 05:BC:C4:86:74:9A:B3:AB:80:4C:F1:19:8C:BF:57:5A:84:05:A8:D4
Certificate issuer:       /CN=05bcc486749ab3ab804cf1198cbf575a8405a8d4
Certificate serial:       01962E61B2DAD9A9AA227C46006191C7980B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbzEhnSas6uATPEZjL9XWoQFqNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft
Manifest number:          094E
Signing time:             Sun 13 Apr 2025 09:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:16 +0000
Files and hashes:         1: BbzEhnSas6uATPEZjL9XWoQFqNQ.crl (hash: ybt/67Ifeq3LDnBpCAcYaJwtp9lL2L3IhhdSrMitd+M=)
                          2: HdSf7jxZaH01dUDGuwQ5_CAc8SM.roa (hash: vOZ90+a3LR4dhFjRdZIzUR1sgVMd52zRpkbxFOcgn4g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b2:da:d9:a9:aa:22:7c:46:00:61:91:c7:98:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05bcc486749ab3ab804cf1198cbf575a8405a8d4
        Validity
            Not Before: Apr 13 09:01:16 2025 GMT
            Not After : Apr 14 09:01:16 2025 GMT
        Subject: CN=55346545747a4e19d7ee4b9e5d4e6fb5390f612c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7c:1f:79:74:17:a4:ad:35:65:d8:86:9e:b2:
                    fc:09:27:22:5e:d2:5a:f8:cf:e6:c9:27:69:bc:b3:
                    96:77:b0:6a:76:41:09:2b:7a:93:f3:f7:18:84:33:
                    33:11:57:f7:e1:c1:4c:4b:80:4d:67:5b:43:33:eb:
                    8f:1f:05:9a:a6:4b:52:57:13:f1:c8:07:76:f6:1f:
                    bf:6b:98:ff:93:25:08:17:98:a2:f6:1f:a0:f7:63:
                    72:de:1a:69:f2:ab:13:50:10:49:0b:08:8a:14:aa:
                    f5:7b:9a:6c:f5:7a:52:07:e3:a0:8e:6b:be:08:5a:
                    e0:eb:6d:d3:6e:a5:44:76:fa:ec:77:14:2f:84:25:
                    1b:b1:8f:de:63:fc:5c:f1:c3:60:98:80:b2:f2:e1:
                    16:be:f4:13:27:ca:af:97:17:19:7e:54:53:8a:27:
                    1d:e8:ae:fe:ef:e0:13:ea:f2:20:53:2f:f6:90:92:
                    e1:d2:23:7a:36:36:ff:ea:83:4e:41:ba:de:cc:f4:
                    9f:d6:cb:3c:75:b1:19:d2:4e:8c:35:ef:4a:b5:13:
                    7f:39:b1:c8:08:31:ab:38:4d:26:ca:3c:38:65:3b:
                    04:db:57:db:56:5f:d1:ec:fc:8a:57:3f:49:a7:1f:
                    2e:02:30:3d:44:15:33:b8:31:a9:4f:98:99:2a:f9:
                    c7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:34:65:45:74:7A:4E:19:D7:EE:4B:9E:5D:4E:6F:B5:39:0F:61:2C
            X509v3 Authority Key Identifier:
                keyid:05:BC:C4:86:74:9A:B3:AB:80:4C:F1:19:8C:BF:57:5A:84:05:A8:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzEhnSas6uATPEZjL9XWoQFqNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/535a67-f540-4f14-ad11-7f699a83bb0c/1/BbzEhnSas6uATPEZjL9XWoQFqNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:7b:19:c9:9c:ac:1e:64:94:d9:75:f5:31:fb:65:a9:01:bf:
         af:c3:9f:22:6f:bb:12:53:87:6e:77:e9:1e:b1:f1:7f:3b:49:
         e4:79:02:dc:49:c9:ab:4c:08:21:de:ac:d9:78:db:e4:f6:d2:
         43:a5:4e:6c:3a:db:79:ce:de:93:c8:18:ee:89:e7:d3:c8:d7:
         00:f9:01:30:df:7e:cd:25:1e:ab:c7:52:e5:e1:4d:e5:71:bd:
         44:00:e4:4d:70:9f:fb:6a:46:c4:fc:53:1e:59:c1:7e:ef:08:
         5a:c5:b1:a7:e7:70:b5:fe:36:d9:55:6b:47:75:9e:39:96:3d:
         a1:6a:ea:b3:0c:dd:bf:3e:93:56:30:53:c6:cd:c1:22:9d:66:
         8b:80:b3:e0:ec:0b:1f:6b:d9:99:8a:ff:7a:69:80:91:ac:4b:
         4a:30:af:fa:96:e6:b7:32:f3:4e:2f:ef:21:a0:c6:c1:f3:db:
         bc:86:42:68:bc:13:fa:24:ee:16:b2:4e:cb:fc:70:11:78:4c:
         de:fa:a8:9f:7b:60:87:67:ae:2d:8e:0e:ca:01:a7:8a:cf:ca:
         b9:ff:b7:91:4d:a9:02:d6:1f:f5:eb:38:9b:a8:a4:e0:45:2c:
         22:68:75:0e:4b:1d:e2:09:17:4d:f4:98:1e:c9:49:1a:4c:b6:
         41:1b:cf:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYbLa2amqInxGAGGRx5gLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YmNjNDg2NzQ5YWIzYWI4MDRjZjExOThjYmY1NzVhODQw
NWE4ZDQwHhcNMjUwNDEzMDkwMTE2WhcNMjUwNDE0MDkwMTE2WjAzMTEwLwYDVQQD
Eyg1NTM0NjU0NTc0N2E0ZTE5ZDdlZTRiOWU1ZDRlNmZiNTM5MGY2MTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HwfeXQXpK01ZdiGnrL8CSciXtJa
+M/mySdpvLOWd7BqdkEJK3qT8/cYhDMzEVf34cFMS4BNZ1tDM+uPHwWapktSVxPx
yAd29h+/a5j/kyUIF5ii9h+g92Ny3hpp8qsTUBBJCwiKFKr1e5ps9XpSB+Ogjmu+
CFrg623TbqVEdvrsdxQvhCUbsY/eY/xc8cNgmICy8uEWvvQTJ8qvlxcZflRTiicd
6K7+7+AT6vIgUy/2kJLh0iN6Njb/6oNOQbrezPSf1ss8dbEZ0k6MNe9KtRN/ObHI
CDGrOE0myjw4ZTsE21fbVl/R7PyKVz9Jpx8uAjA9RBUzuDGpT5iZKvnHHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFU0ZUV0ek4Z1+5Lnl1Ob7U5D2EsMB8GA1UdIwQY
MBaAFAW8xIZ0mrOrgEzxGYy/V1qEBajUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJ6RWhuU2FzNnVBVFBFWmpMOVhXb1FGcU5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC81MzVhNjctZjU0MC00ZjE0LWFkMTEt
N2Y2OTlhODNiYjBjLzEvQmJ6RWhuU2FzNnVBVFBFWmpMOVhXb1FGcU5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC81MzVhNjctZjU0MC00ZjE0LWFkMTEtN2Y2OTlhODNiYjBj
LzEvQmJ6RWhuU2FzNnVBVFBFWmpMOVhXb1FGcU5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXXsZyZys
HmSU2XX1MftlqQG/r8OfIm+7ElOHbnfpHrHxfztJ5HkC3EnJq0wIId6s2Xjb5PbS
Q6VObDrbec7ek8gY7onn08jXAPkBMN9+zSUeq8dS5eFN5XG9RADkTXCf+2pGxPxT
HlnBfu8IWsWxp+dwtf422VVrR3WeOZY9oWrqswzdvz6TVjBTxs3BIp1mi4Cz4OwL
H2vZmYr/emmAkaxLSjCv+pbmtzLzTi/vIaDGwfPbvIZCaLwT+iTuFrJOy/xwEXhM
3vqon3tgh2euLY4OygGnis/Kuf+3kU2pAtYf9es4m6ik4EUsImh1Dksd4gkXTfSY
HslJGky2QRvPtA==
-----END CERTIFICATE-----