Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.mft
File:                     BSAFu2w9aGW4nBDzOwuZS3Svljs.mft (raw, json)
Hash identifier:          JZGD0GpN6JQpR1KXekO67CJKlQto5GQ1fim+1G47Tfk=
Subject key identifier:   E2:BB:05:8E:A7:F5:1F:9E:89:3E:52:62:69:34:B1:1D:96:14:3B:95
Authority key identifier: 05:20:05:BB:6C:3D:68:65:B8:9C:10:F3:3B:0B:99:4B:74:AF:96:3B
Certificate issuer:       /CN=052005bb6c3d6865b89c10f33b0b994b74af963b
Certificate serial:       01962E61774D52D231FF69295386955A063F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 09:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:01 +0000
Files and hashes:         1: BSAFu2w9aGW4nBDzOwuZS3Svljs.crl (hash: ambT51YJUCiGvjfrc/jp2CXRtqcrMKVP3pM8NGvdtJI=)
                          2: ir1RS50i8n6-S2GFn7ZgzEJxgqk.roa (hash: c+oT6rdCWtyUihO7r4CT9JSZ34sdZ4eqqblxSm+cQz4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:77:4d:52:d2:31:ff:69:29:53:86:95:5a:06:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=052005bb6c3d6865b89c10f33b0b994b74af963b
        Validity
            Not Before: Apr 13 09:01:01 2025 GMT
            Not After : Apr 14 09:01:01 2025 GMT
        Subject: CN=e2bb058ea7f51f9e893e52626934b11d96143b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:49:bc:dc:b7:bf:9d:42:d9:23:b6:09:f0:93:
                    23:f6:f3:e2:1e:9b:64:3e:1e:92:2d:f0:fd:83:30:
                    4e:e2:03:37:bb:b5:18:de:1f:ec:9b:bc:6c:f4:1c:
                    22:25:dd:7b:a0:52:c0:78:32:ba:54:31:cc:65:cc:
                    b6:89:7a:61:8b:6b:8b:19:ea:af:8a:bb:a7:d6:72:
                    d9:82:73:65:99:1a:a6:d6:b3:87:9a:49:03:46:28:
                    f9:a9:a8:ae:c1:42:30:7a:28:7f:0f:63:f9:61:fd:
                    36:0c:ac:77:a6:df:3b:69:3c:78:6a:d9:c5:de:3b:
                    c6:56:0b:de:64:5e:2d:98:48:d3:79:fa:49:87:3f:
                    d5:b7:be:35:df:a0:41:81:cd:0b:00:dd:18:61:c8:
                    89:3c:9a:0a:40:d0:b1:24:cc:0b:c7:94:f0:ef:dd:
                    4f:13:bd:e8:45:d0:39:42:7d:99:e1:9f:45:ef:60:
                    0c:45:dc:54:92:ff:d4:48:22:bd:e2:2a:65:04:3d:
                    22:1f:13:77:a3:5e:59:dd:8a:24:d6:1b:f6:38:2b:
                    f2:f7:ea:c1:91:78:11:fb:40:e3:9a:0e:e3:b3:59:
                    64:02:f4:6d:c9:2e:ff:38:fc:1c:2f:69:b4:a0:ef:
                    e0:78:eb:53:10:60:20:48:24:85:88:25:36:66:01:
                    41:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:BB:05:8E:A7:F5:1F:9E:89:3E:52:62:69:34:B1:1D:96:14:3B:95
            X509v3 Authority Key Identifier:
                keyid:05:20:05:BB:6C:3D:68:65:B8:9C:10:F3:3B:0B:99:4B:74:AF:96:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSAFu2w9aGW4nBDzOwuZS3Svljs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/83eb09-3a14-455b-8895-ba0a76f43704/1/BSAFu2w9aGW4nBDzOwuZS3Svljs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ce:c9:0d:49:62:60:6b:93:7f:ee:35:a6:35:77:31:c2:ba:
         e4:83:17:1b:30:25:1a:f0:7f:0c:cf:fb:3a:3b:da:1c:94:39:
         24:ad:b8:34:df:95:0d:a0:ae:00:fb:0d:7f:a5:30:79:80:fd:
         9f:34:77:33:44:a3:fc:6f:09:13:3a:f5:a9:2d:55:3d:9b:5e:
         c1:ff:c5:d7:36:28:50:7f:7a:5c:32:22:9e:bc:8e:11:93:f6:
         48:31:e5:fd:92:e2:80:e5:00:da:18:09:19:a4:66:d6:b3:40:
         a8:d3:dc:77:60:16:ad:23:d2:47:66:aa:d7:f3:58:cd:5b:a2:
         ab:54:45:16:62:c7:54:15:4e:bd:32:de:4f:32:6c:17:d0:64:
         08:33:35:fb:9f:7d:4f:95:70:1e:bb:a5:b1:37:e8:0d:14:48:
         ee:0c:51:ca:51:58:c4:0b:ad:14:3d:f0:7c:54:55:63:a2:18:
         dd:20:5e:8a:d5:a5:59:44:1e:ee:7c:56:33:e3:dc:68:eb:ec:
         a7:fe:4b:ae:f0:c3:a0:ff:0a:98:33:38:5f:9f:a0:a7:4f:e4:
         13:8a:ad:94:07:34:df:44:e5:fb:eb:b0:b3:7c:55:29:99:80:
         ac:22:6b:6a:a3:24:7e:65:3a:8a:bd:bc:16:a3:05:af:8f:39:
         56:c3:53:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYXdNUtIx/2kpU4aVWgY/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MjAwNWJiNmMzZDY4NjViODljMTBmMzNiMGI5OTRiNzRh
Zjk2M2IwHhcNMjUwNDEzMDkwMTAxWhcNMjUwNDE0MDkwMTAxWjAzMTEwLwYDVQQD
EyhlMmJiMDU4ZWE3ZjUxZjllODkzZTUyNjI2OTM0YjExZDk2MTQzYjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEm83Le/nULZI7YJ8JMj9vPiHptk
Ph6SLfD9gzBO4gM3u7UY3h/sm7xs9BwiJd17oFLAeDK6VDHMZcy2iXphi2uLGeqv
irun1nLZgnNlmRqm1rOHmkkDRij5qaiuwUIweih/D2P5Yf02DKx3pt87aTx4atnF
3jvGVgveZF4tmEjTefpJhz/Vt74136BBgc0LAN0YYciJPJoKQNCxJMwLx5Tw791P
E73oRdA5Qn2Z4Z9F72AMRdxUkv/USCK94iplBD0iHxN3o15Z3Yok1hv2OCvy9+rB
kXgR+0Djmg7js1lkAvRtyS7/OPwcL2m0oO/geOtTEGAgSCSFiCU2ZgFBIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOK7BY6n9R+eiT5SYmk0sR2WFDuVMB8GA1UdIwQY
MBaAFAUgBbtsPWhluJwQ8zsLmUt0r5Y7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlNBRnUydzlhR1c0bkJEek93dVpTM1N2bGpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi84M2ViMDktM2ExNC00NTViLTg4OTUt
YmEwYTc2ZjQzNzA0LzEvQlNBRnUydzlhR1c0bkJEek93dVpTM1N2bGpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi84M2ViMDktM2ExNC00NTViLTg4OTUtYmEwYTc2ZjQzNzA0
LzEvQlNBRnUydzlhR1c0bkJEek93dVpTM1N2bGpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj87JDUli
YGuTf+41pjV3McK65IMXGzAlGvB/DM/7OjvaHJQ5JK24NN+VDaCuAPsNf6UweYD9
nzR3M0Sj/G8JEzr1qS1VPZtewf/F1zYoUH96XDIinryOEZP2SDHl/ZLigOUA2hgJ
GaRm1rNAqNPcd2AWrSPSR2aq1/NYzVuiq1RFFmLHVBVOvTLeTzJsF9BkCDM1+599
T5VwHrulsTfoDRRI7gxRylFYxAutFD3wfFRVY6IY3SBeitWlWUQe7nxWM+PcaOvs
p/5LrvDDoP8KmDM4X5+gp0/kE4qtlAc030Tl++uws3xVKZmArCJraqMkfmU6ir28
FqMFr485VsNTyg==
-----END CERTIFICATE-----