Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
File:                     BmHyD7in5jXXvMlMAL7XF5t2CPY.mft (raw, json)
Hash identifier:          glxkLk4UHZR57071G+17BiBYB2MGOz8r5vz7eEvqKlQ=
Subject key identifier:   45:86:18:40:02:F2:A3:9D:FD:4D:51:A5:8A:60:E1:A3:87:21:84:D7
Authority key identifier: 06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
Certificate issuer:       /CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Certificate serial:       01962ECF5234DD1A07A044BE56D0979199EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft
Manifest number:          07A7
Signing time:             Sun 13 Apr 2025 11:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:00 +0000
Files and hashes:         1: 3kGa7kLBm042LbbqykHtZB7ufPc.roa (hash: w1pGOLasw4Pb62ELUrEIQqwR4u8hfryDi61TGvccVyw=)
                          2: BmHyD7in5jXXvMlMAL7XF5t2CPY.crl (hash: JcqIfEDl0BGAAn5EyOHhJkfDqT7QkGZZVYp/uZmUkNk=)
                          3: F6fQGiNxub0Asxw2Ftlalm35-sI.roa (hash: wYkSnnpKM5pfTpyfgZw3XQ3Jd7ZS+gOnc16p21qV1JY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:52:34:dd:1a:07:a0:44:be:56:d0:97:91:99:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
        Validity
            Not Before: Apr 13 11:01:00 2025 GMT
            Not After : Apr 14 11:01:00 2025 GMT
        Subject: CN=4586184002f2a39dfd4d51a58a60e1a3872184d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:7c:1d:4a:cb:cb:e0:71:75:cf:d3:35:02:02:
                    77:de:7d:1e:59:09:fa:73:8e:5d:ab:3e:52:cb:f3:
                    1d:7a:41:4b:02:2b:96:c3:3b:8a:5c:45:fe:4f:8b:
                    5f:fe:dd:28:ff:43:f5:9b:46:70:51:c2:26:6c:ac:
                    19:ae:2f:9a:d0:14:70:e4:37:97:53:54:f2:85:db:
                    3f:b9:72:66:a0:ae:5c:32:3c:98:6b:91:32:42:25:
                    52:a0:94:6e:86:a5:41:57:d2:18:9f:1a:71:e1:2b:
                    bd:df:52:7e:8b:ab:d0:00:32:7d:6d:64:a4:b0:e9:
                    75:59:58:d9:5a:9c:d6:2b:c4:0e:69:f1:25:d7:8d:
                    56:77:5e:59:b0:dd:d3:2e:14:6a:3a:11:b0:8e:15:
                    3c:ad:0e:89:4a:93:11:0b:4a:9b:ef:fd:85:fb:91:
                    11:d3:25:a5:eb:50:91:84:2b:ae:dc:2f:b2:aa:bd:
                    99:91:0e:fa:d8:b7:b8:37:31:f7:23:02:28:ba:11:
                    ea:33:42:c8:bb:b1:7e:b3:85:1d:2c:74:bc:32:10:
                    2b:c5:70:c5:8c:b3:02:a5:b0:19:85:7a:2a:c4:9d:
                    75:b0:66:a9:fa:75:07:b5:1e:a3:b5:9f:12:62:27:
                    07:eb:f9:84:ab:ee:5b:36:77:78:bd:19:6a:37:f8:
                    bf:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:86:18:40:02:F2:A3:9D:FD:4D:51:A5:8A:60:E1:A3:87:21:84:D7
            X509v3 Authority Key Identifier:
                keyid:06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a3:85:79:bf:4e:da:9c:a3:2c:66:e5:48:f3:8f:49:42:e2:
         d4:ba:9d:b3:8d:b0:5e:93:55:0a:06:b4:10:d9:87:15:66:1f:
         6c:d6:f8:52:d8:a0:b2:a6:c9:22:e2:90:f1:7f:4f:55:6a:b0:
         8e:43:e6:bd:55:4e:17:e5:82:f9:47:f2:d6:d0:80:fd:02:f9:
         5b:13:01:7d:dc:50:f4:d4:fa:55:e6:d8:20:65:09:9e:ce:ed:
         17:b9:d2:00:12:f3:26:1d:f0:f7:5e:e2:c2:2c:70:ad:c6:3f:
         a3:5d:ae:d9:f7:0f:bc:03:ed:d5:e6:16:6c:7e:2c:00:71:ea:
         bd:bd:88:b7:33:4e:2e:1e:5c:f9:76:45:e0:c9:8c:d3:9e:5a:
         53:2a:50:43:6c:4d:80:10:e5:94:4f:09:8f:7e:a0:92:5a:66:
         f1:42:73:20:5b:cb:5c:6d:2b:86:51:6a:16:36:50:9f:5f:3f:
         18:0a:33:1d:69:4d:b5:d2:97:a1:6f:22:8c:6d:35:cf:2e:2b:
         d0:62:dc:01:4a:0f:e5:8e:6c:6c:5e:f0:4e:93:fd:69:36:ec:
         08:4c:a9:ec:c7:72:49:bb:37:c7:d1:e7:61:b9:67:ff:55:f7:
         a9:61:d6:1c:f5:0c:9f:d9:06:21:ee:4d:4c:87:de:6e:cb:01:
         47:89:e4:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz1I03RoHoES+VtCXkZnqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NjFmMjBmYjhhN2U2MzVkN2JjYzk0YzAwYmVkNzE3OWI3
NjA4ZjYwHhcNMjUwNDEzMTEwMTAwWhcNMjUwNDE0MTEwMTAwWjAzMTEwLwYDVQQD
Eyg0NTg2MTg0MDAyZjJhMzlkZmQ0ZDUxYTU4YTYwZTFhMzg3MjE4NGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9HwdSsvL4HF1z9M1AgJ33n0eWQn6
c45dqz5Sy/MdekFLAiuWwzuKXEX+T4tf/t0o/0P1m0ZwUcImbKwZri+a0BRw5DeX
U1Tyhds/uXJmoK5cMjyYa5EyQiVSoJRuhqVBV9IYnxpx4Su931J+i6vQADJ9bWSk
sOl1WVjZWpzWK8QOafEl141Wd15ZsN3TLhRqOhGwjhU8rQ6JSpMRC0qb7/2F+5ER
0yWl61CRhCuu3C+yqr2ZkQ762Le4NzH3IwIouhHqM0LIu7F+s4UdLHS8MhArxXDF
jLMCpbAZhXoqxJ11sGap+nUHtR6jtZ8SYicH6/mEq+5bNnd4vRlqN/i/AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEWGGEAC8qOd/U1RpYpg4aOHIYTXMB8GA1UdIwQY
MBaAFAZh8g+4p+Y117zJTAC+1xebdgj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm1IeUQ3aW41alhYdk1sTUFMN1hGNXQyQ1BZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kNmQ0OWItYmM2Zi00Y2U0LTkzMzMt
YWQ4ZWRmZTVmMGY3LzEvQm1IeUQ3aW41alhYdk1sTUFMN1hGNXQyQ1BZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9kNmQ0OWItYmM2Zi00Y2U0LTkzMzMtYWQ4ZWRmZTVmMGY3
LzEvQm1IeUQ3aW41alhYdk1sTUFMN1hGNXQyQ1BZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKOFeb9O
2pyjLGblSPOPSULi1Lqds42wXpNVCga0ENmHFWYfbNb4UtigsqbJIuKQ8X9PVWqw
jkPmvVVOF+WC+Ufy1tCA/QL5WxMBfdxQ9NT6VebYIGUJns7tF7nSABLzJh3w917i
wixwrcY/o12u2fcPvAPt1eYWbH4sAHHqvb2ItzNOLh5c+XZF4MmM055aUypQQ2xN
gBDllE8Jj36gklpm8UJzIFvLXG0rhlFqFjZQn18/GAozHWlNtdKXoW8ijG01zy4r
0GLcAUoP5Y5sbF7wTpP9aTbsCEyp7MdySbs3x9HnYbln/1X3qWHWHPUMn9kGIe5N
TIfebssBR4nkuQ==
-----END CERTIFICATE-----