Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
File:                     BCTBFlgYpDL3l8jd9LUwex5a73Q.mft (raw, json)
Hash identifier:          wsE0nvFIs2DLoPDEPoAiG4X4Nz8MQ0crJaerS6JTkyA=
Subject key identifier:   6B:FA:34:CD:1C:BF:9B:94:1F:18:A7:11:0D:EE:40:4F:97:6D:A0:EE
Authority key identifier: 04:24:C1:16:58:18:A4:32:F7:97:C8:DD:F4:B5:30:7B:1E:5A:EF:74
Certificate issuer:       /CN=0424c1165818a432f797c8ddf4b5307b1e5aef74
Certificate serial:       01962E61B3518B0342FA6923C866B71A5E07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:16 +0000
Files and hashes:         1: BCTBFlgYpDL3l8jd9LUwex5a73Q.crl (hash: Mmkss4pf0SmuIY3ORBr4MVlTMU9T2U2lOscHiTG1Css=)
                          2: etJJULXuEpA4QGWaRQ6bhvJFlYY.roa (hash: bLfeWna6CHVgTNdnQXDkU5zoQ0SXs8EuETZb9amfVlo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:b3:51:8b:03:42:fa:69:23:c8:66:b7:1a:5e:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0424c1165818a432f797c8ddf4b5307b1e5aef74
        Validity
            Not Before: Apr 13 09:01:16 2025 GMT
            Not After : Apr 14 09:01:16 2025 GMT
        Subject: CN=6bfa34cd1cbf9b941f18a7110dee404f976da0ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:43:ce:64:be:b6:8d:c4:c8:71:2d:1b:74:52:
                    4f:47:38:b9:22:22:e9:f5:f9:53:5f:6b:49:07:88:
                    d4:15:28:7b:d8:7a:74:6a:74:53:e6:fe:f3:de:1e:
                    d5:b3:7e:a2:04:e8:03:ce:4b:30:0d:82:5e:61:a8:
                    f1:91:c6:75:61:c3:87:64:a2:85:6f:23:d8:b1:e1:
                    42:e2:d3:56:57:01:47:c5:1c:de:a9:ad:0a:76:0d:
                    b7:1b:d7:94:96:c7:ea:84:20:da:4b:c6:f1:56:de:
                    3f:7a:82:6b:dd:cc:d3:94:d2:a1:0f:84:60:1d:17:
                    da:a0:b4:16:80:fc:95:dd:db:e9:1c:55:a2:cc:4f:
                    98:32:e5:39:c9:fc:18:e0:5b:58:1d:03:6f:1a:65:
                    b6:d6:56:44:84:f3:21:fc:3b:29:e1:29:22:10:07:
                    ce:b7:d5:90:cb:18:ca:a5:86:6f:2e:59:38:46:da:
                    a0:bc:00:f6:77:5b:74:39:fa:2d:5e:8d:98:7c:bb:
                    e3:6f:f9:9b:54:bf:e4:13:1a:f8:9a:bf:54:4d:b4:
                    29:7f:37:30:49:9d:97:5d:e7:c8:0d:b4:0b:0e:a9:
                    44:2f:32:69:27:b6:13:db:af:dc:d9:51:26:b3:0c:
                    d7:72:c2:cf:a1:6e:58:63:21:bc:64:60:d5:80:4d:
                    15:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FA:34:CD:1C:BF:9B:94:1F:18:A7:11:0D:EE:40:4F:97:6D:A0:EE
            X509v3 Authority Key Identifier:
                keyid:04:24:C1:16:58:18:A4:32:F7:97:C8:DD:F4:B5:30:7B:1E:5A:EF:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCTBFlgYpDL3l8jd9LUwex5a73Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c75a39-afca-4fbd-ab99-c339ccaf3a1e/1/BCTBFlgYpDL3l8jd9LUwex5a73Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:f6:f7:ce:7c:81:de:a5:01:bb:a3:38:02:ab:23:cd:4e:55:
         0c:88:78:df:ea:83:09:9d:2e:af:b3:ed:c7:3f:8e:1f:f3:d3:
         d2:8d:ec:77:b3:bd:37:91:e3:3a:24:1b:dc:b1:c1:4a:97:dd:
         8a:0a:34:c5:1d:c4:51:64:85:a7:72:8c:22:51:8c:31:40:f8:
         88:ef:27:eb:c2:d5:0a:f8:3c:20:b3:5d:f0:5a:0b:c8:d3:32:
         77:da:01:14:5f:19:b2:8c:c8:1d:9c:42:63:16:b6:32:31:a8:
         98:b5:f6:f4:38:da:c4:23:aa:27:cf:e3:ca:2c:9d:e0:8d:f7:
         5e:7a:8b:f1:05:dd:9c:7f:fb:15:b9:ff:32:5c:fa:4a:e0:f1:
         87:43:a1:0c:2a:e9:df:bf:63:98:8e:4c:ae:cf:f6:6f:8e:dd:
         29:cb:2a:94:9c:fa:3f:e1:18:f9:21:34:c5:b1:55:cc:61:a8:
         26:43:71:9b:a5:31:9c:c7:d5:d4:28:b9:8e:86:57:f9:6a:be:
         2c:c3:0b:7d:83:c5:46:02:7b:c7:4c:c7:73:2c:7c:cd:fa:d1:
         4f:1f:87:b6:3d:97:20:f8:a7:1e:85:56:54:88:41:2a:fb:db:
         bb:61:b7:7e:3c:ae:ee:65:e0:d8:b1:c1:5c:dd:20:75:73:1e:
         4b:d2:5a:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYbNRiwNC+mkjyGa3Gl4HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MjRjMTE2NTgxOGE0MzJmNzk3YzhkZGY0YjUzMDdiMWU1
YWVmNzQwHhcNMjUwNDEzMDkwMTE2WhcNMjUwNDE0MDkwMTE2WjAzMTEwLwYDVQQD
Eyg2YmZhMzRjZDFjYmY5Yjk0MWYxOGE3MTEwZGVlNDA0Zjk3NmRhMGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UPOZL62jcTIcS0bdFJPRzi5IiLp
9flTX2tJB4jUFSh72Hp0anRT5v7z3h7Vs36iBOgDzkswDYJeYajxkcZ1YcOHZKKF
byPYseFC4tNWVwFHxRzeqa0Kdg23G9eUlsfqhCDaS8bxVt4/eoJr3czTlNKhD4Rg
HRfaoLQWgPyV3dvpHFWizE+YMuU5yfwY4FtYHQNvGmW21lZEhPMh/Dsp4SkiEAfO
t9WQyxjKpYZvLlk4RtqgvAD2d1t0OfotXo2YfLvjb/mbVL/kExr4mr9UTbQpfzcw
SZ2XXefIDbQLDqlELzJpJ7YT26/c2VEmswzXcsLPoW5YYyG8ZGDVgE0VOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGv6NM0cv5uUHxinEQ3uQE+XbaDuMB8GA1UdIwQY
MBaAFAQkwRZYGKQy95fI3fS1MHseWu90MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkNUQkZsZ1lwREwzbDhqZDlMVXdleDVhNzNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9jNzVhMzktYWZjYS00ZmJkLWFiOTkt
YzMzOWNjYWYzYTFlLzEvQkNUQkZsZ1lwREwzbDhqZDlMVXdleDVhNzNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9jNzVhMzktYWZjYS00ZmJkLWFiOTktYzMzOWNjYWYzYTFl
LzEvQkNUQkZsZ1lwREwzbDhqZDlMVXdleDVhNzNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/b3znyB
3qUBu6M4AqsjzU5VDIh43+qDCZ0ur7Ptxz+OH/PT0o3sd7O9N5HjOiQb3LHBSpfd
igo0xR3EUWSFp3KMIlGMMUD4iO8n68LVCvg8ILNd8FoLyNMyd9oBFF8ZsozIHZxC
Yxa2MjGomLX29DjaxCOqJ8/jyiyd4I33XnqL8QXdnH/7Fbn/Mlz6SuDxh0OhDCrp
379jmI5Mrs/2b47dKcsqlJz6P+EY+SE0xbFVzGGoJkNxm6UxnMfV1Ci5joZX+Wq+
LMMLfYPFRgJ7x0zHcyx8zfrRTx+Htj2XIPinHoVWVIhBKvvbu2G3fjyu7mXg2LHB
XN0gdXMeS9JaaA==
-----END CERTIFICATE-----