Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
File:                     BQKGH5I8fsETK1SPeruGG6yh9AY.mft (raw, json)
Hash identifier:          fNeYtrgRdiPnB5Po22SfH9tJyCw67dxIcVfoSaUMruo=
Subject key identifier:   8D:F6:4D:19:5A:11:F6:81:68:68:80:D5:47:0C:4F:61:03:A8:E4:61
Authority key identifier: 05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06
Certificate issuer:       /CN=0502861f923c7ec1132b548f7abb861baca1f406
Certificate serial:       01962F3D4BF35A25045E9A935875DA9B4B54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:08 +0000
Files and hashes:         1: 1-cuEh2EPyWBKZZW9Ux10_rTtiMs.roa (hash: 0D28OLhEHvWPWn+YHZLbb/jrZsxhbIGE8alDluVW7tA=)
                          2: BQKGH5I8fsETK1SPeruGG6yh9AY.crl (hash: v9CHTMnlY+2Ibw1UMuKWHvuX74YtPWr4wYjJFg1081U=)
                          3: FJdpsV6pjhMSL6IT7vB41CVTVRI.roa (hash: S25aXExUDruwqgW26JBpjwRzCwZa0LN7qVcFUwKAsy4=)
                          4: SHQabxNAl7yCxPIYXS8QEWqbJ8s.roa (hash: 8gBiOpFpyvnrW5MWvLhoQ1iXNHnnsflwwhdtkDHOWgw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4b:f3:5a:25:04:5e:9a:93:58:75:da:9b:4b:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0502861f923c7ec1132b548f7abb861baca1f406
        Validity
            Not Before: Apr 13 13:01:08 2025 GMT
            Not After : Apr 14 13:01:08 2025 GMT
        Subject: CN=8df64d195a11f681686880d5470c4f6103a8e461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fe:5c:eb:53:11:4d:a5:ea:83:b0:ec:23:ef:
                    15:97:3b:55:1c:dd:5b:8d:8f:00:bd:db:1e:51:7b:
                    2c:f6:ef:df:d0:d9:ed:65:d7:cb:5e:cd:26:7d:02:
                    03:8e:0d:8c:32:41:1a:3f:35:df:e5:42:ae:a7:63:
                    d9:a1:1c:69:f1:73:03:a2:10:a1:0c:61:d6:32:48:
                    f5:43:b1:b1:fd:32:9a:55:ee:f0:6c:2c:66:d7:22:
                    d6:8c:7c:0a:73:f6:0e:34:7a:81:e1:1c:7a:ca:ea:
                    6b:bb:5e:ac:75:50:1f:c0:31:06:5e:52:0c:9e:a6:
                    18:4d:1d:d3:3b:8b:bb:c4:de:35:9d:ba:d8:de:58:
                    f4:91:b3:98:06:a1:e7:6b:10:c4:7e:cb:7f:d6:00:
                    2d:f1:89:97:36:9b:fc:77:d1:58:87:96:33:a6:11:
                    74:7b:ab:c0:5d:76:77:58:91:50:4e:2a:8f:78:2c:
                    d6:de:19:6e:f2:8b:ea:69:85:74:f7:11:87:08:03:
                    38:18:9a:bf:ef:80:60:c9:c5:de:f9:fc:4a:4f:da:
                    0e:f8:33:58:46:ec:11:89:1a:37:35:01:b0:38:57:
                    2a:60:76:d6:b8:d3:fb:d6:4f:47:19:1c:a4:e9:6f:
                    be:87:ba:83:c7:a0:84:cf:5e:4b:3d:98:8c:10:c6:
                    ce:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F6:4D:19:5A:11:F6:81:68:68:80:D5:47:0C:4F:61:03:A8:E4:61
            X509v3 Authority Key Identifier:
                keyid:05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:1d:8d:49:e6:c0:3a:08:9e:d3:3a:38:e7:4e:41:55:d5:41:
         5c:b9:62:6e:10:95:67:66:0f:3d:13:dc:8d:b8:ef:bf:8c:29:
         b0:f7:be:da:ed:82:e7:52:86:e5:77:b7:64:67:04:6b:37:9f:
         bd:f4:9e:0b:e9:12:59:96:92:f8:1a:f6:69:35:af:3b:7a:77:
         32:84:7e:d9:a3:84:37:fd:53:71:13:94:3c:38:7a:a9:a4:1c:
         35:69:0f:63:77:81:41:aa:cc:22:98:d8:3e:26:db:de:79:13:
         85:22:66:d8:15:52:cc:72:52:3e:9a:71:57:a0:cc:57:b3:0a:
         df:dc:96:74:4a:9f:d1:98:e3:74:dc:8d:78:8d:6e:26:89:78:
         fe:ef:a0:51:be:6a:47:e9:ee:9d:10:be:63:55:33:75:93:ca:
         5b:48:bd:9e:d0:57:0c:61:42:15:01:3f:82:4d:cb:b8:25:e1:
         76:47:4b:83:14:22:19:4a:a2:20:e3:ac:03:a8:7c:15:8b:42:
         3b:89:13:4b:74:71:9b:32:af:cd:05:12:ed:27:13:8c:bc:0f:
         65:7e:a9:5f:1d:5a:39:67:94:b8:15:29:84:c9:16:46:dd:31:
         da:80:af:af:84:6d:5b:00:e4:ce:55:94:02:e6:a8:07:57:56:
         fa:f6:7f:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPUvzWiUEXpqTWHXam0tUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MDI4NjFmOTIzYzdlYzExMzJiNTQ4ZjdhYmI4NjFiYWNh
MWY0MDYwHhcNMjUwNDEzMTMwMTA4WhcNMjUwNDE0MTMwMTA4WjAzMTEwLwYDVQQD
Eyg4ZGY2NGQxOTVhMTFmNjgxNjg2ODgwZDU0NzBjNGY2MTAzYThlNDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2P5c61MRTaXqg7DsI+8VlztVHN1b
jY8AvdseUXss9u/f0NntZdfLXs0mfQIDjg2MMkEaPzXf5UKup2PZoRxp8XMDohCh
DGHWMkj1Q7Gx/TKaVe7wbCxm1yLWjHwKc/YONHqB4Rx6yupru16sdVAfwDEGXlIM
nqYYTR3TO4u7xN41nbrY3lj0kbOYBqHnaxDEfst/1gAt8YmXNpv8d9FYh5YzphF0
e6vAXXZ3WJFQTiqPeCzW3hlu8ovqaYV09xGHCAM4GJq/74BgycXe+fxKT9oO+DNY
RuwRiRo3NQGwOFcqYHbWuNP71k9HGRyk6W++h7qDx6CEz15LPZiMEMbOlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI32TRlaEfaBaGiA1UcMT2EDqORhMB8GA1UdIwQY
MBaAFAUChh+SPH7BEytUj3q7hhusofQGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlFLR0g1SThmc0VUSzFTUGVydUdHNnloOUFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9hOTI3NmYtZThjMS00NWQ2LWE0MmQt
MGM2NGRlYmU5ZWM0LzEvQlFLR0g1SThmc0VUSzFTUGVydUdHNnloOUFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9hOTI3NmYtZThjMS00NWQ2LWE0MmQtMGM2NGRlYmU5ZWM0
LzEvQlFLR0g1SThmc0VUSzFTUGVydUdHNnloOUFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXh2NSebA
Ogie0zo4505BVdVBXLlibhCVZ2YPPRPcjbjvv4wpsPe+2u2C51KG5Xe3ZGcEazef
vfSeC+kSWZaS+Br2aTWvO3p3MoR+2aOEN/1TcROUPDh6qaQcNWkPY3eBQarMIpjY
Pibb3nkThSJm2BVSzHJSPppxV6DMV7MK39yWdEqf0ZjjdNyNeI1uJol4/u+gUb5q
R+nunRC+Y1UzdZPKW0i9ntBXDGFCFQE/gk3LuCXhdkdLgxQiGUqiIOOsA6h8FYtC
O4kTS3RxmzKvzQUS7ScTjLwPZX6pXx1aOWeUuBUphMkWRt0x2oCvr4RtWwDkzlWU
AuaoB1dW+vZ/zA==
-----END CERTIFICATE-----