Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
File:                     BHMrmF-PY_-K6OrHxwgyswzugK0.mft (raw, json)
Hash identifier:          IDeRef+rn6m8NNP/CBUWAlDCchL2A9K72YWwa2co14A=
Subject key identifier:   C6:8A:3F:CA:51:4D:1D:89:FF:54:33:B5:4B:4B:69:31:B7:50:FF:46
Authority key identifier: 04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD
Certificate issuer:       /CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
Certificate serial:       01962F3DB3FD759156F7B58D8D7667AC4F06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 13:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:35 +0000
Files and hashes:         1: 2GrFuxyxyHkqumdayYRyftHOCCA.roa (hash: 58WfiupeF7jv1/JuV3+ZtSw5ZmglbAvhKCWRK1cfUPw=)
                          2: BHMrmF-PY_-K6OrHxwgyswzugK0.crl (hash: Y4W6d0S8WxN1tjCLxq8ZQ9YThsS6AXVuwMbi+mxyhcs=)
                          3: EFrmvdYAVAISDnJyY9LHHEwKIkE.roa (hash: VVoG4KmLy8MCQlXZBg6STGy/fzjISq/IYVzwvcg57xg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b3:fd:75:91:56:f7:b5:8d:8d:76:67:ac:4f:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad
        Validity
            Not Before: Apr 13 13:01:35 2025 GMT
            Not After : Apr 14 13:01:35 2025 GMT
        Subject: CN=c68a3fca514d1d89ff5433b54b4b6931b750ff46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:22:52:eb:8b:0d:97:7d:93:ab:08:6c:13:02:
                    b7:43:4d:c9:8c:44:05:bb:df:e4:90:05:8e:64:8d:
                    65:24:c8:41:73:af:ce:82:6f:0b:56:d7:8f:2e:bf:
                    4f:7c:2f:b2:7d:6a:26:e1:15:8d:2a:61:1c:1d:67:
                    df:8a:7a:2b:f4:88:88:20:2e:06:22:7d:f3:f5:3c:
                    74:69:51:91:16:71:22:92:f2:00:7b:95:9a:33:b1:
                    04:20:03:36:4c:58:a7:19:8d:7e:07:45:aa:61:fe:
                    13:e9:3d:89:94:0e:54:d4:91:ff:56:55:a5:40:d9:
                    6e:c6:6a:39:9c:e8:b6:68:a3:4c:13:bf:aa:22:be:
                    f3:9e:9c:23:cb:3a:10:57:30:68:33:8c:13:e4:28:
                    62:2f:ee:24:71:86:f1:29:7c:81:38:79:8f:d4:2c:
                    1b:a0:bd:1f:4c:03:cb:41:60:24:81:1d:e8:d7:c6:
                    54:94:42:a7:36:60:b1:51:41:33:4d:0a:fe:71:3c:
                    3f:b9:9a:e8:31:db:01:fd:39:86:73:fa:1d:4d:02:
                    db:95:31:f1:33:71:9e:17:74:fe:61:fc:4a:35:fd:
                    89:ca:93:62:df:41:6a:c7:6c:83:47:af:29:f8:2a:
                    e7:1e:f2:d9:8c:fc:27:f9:5e:46:a6:ee:f3:dc:45:
                    2d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8A:3F:CA:51:4D:1D:89:FF:54:33:B5:4B:4B:69:31:B7:50:FF:46
            X509v3 Authority Key Identifier:
                keyid:04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:f1:e6:6e:07:ac:5f:d0:a8:7b:bb:c4:c3:42:37:72:aa:6a:
         c1:fc:5a:0f:4a:a7:bc:81:58:c4:db:69:0e:f9:67:aa:84:5b:
         46:79:25:32:e4:1e:7d:54:f0:52:fa:f2:e8:dd:e9:d5:a5:2b:
         2e:db:ab:98:b1:72:3d:1b:e1:6b:ab:9a:eb:74:6d:35:d5:fa:
         51:39:46:19:38:0b:4e:a3:2c:4e:b9:b7:73:b9:3a:f2:88:7f:
         3b:05:49:6e:16:18:49:1f:37:14:3b:5e:c6:c6:68:c1:ea:de:
         82:88:e9:0e:a5:4f:02:d8:f9:0c:f6:96:82:fa:1d:23:98:e3:
         9c:cc:e9:e3:4b:c5:e8:8a:26:a5:87:84:c3:60:d4:4b:7b:e0:
         67:a3:5c:a4:be:a7:57:bf:a9:04:16:bd:ac:35:dd:c5:c3:09:
         a2:49:e5:cd:8c:c1:d9:cd:4e:53:5e:65:30:7e:3f:b1:74:86:
         77:f4:de:50:44:ea:9e:74:3d:3f:09:1c:27:c7:c1:2b:e5:6b:
         14:8f:0d:38:a6:f0:84:81:64:55:a6:03:ef:90:48:30:e9:95:
         40:2b:f1:0b:3e:7a:00:ff:ed:c5:e5:20:82:ee:57:3a:e0:fc:
         6d:da:11:f4:23:cd:26:1c:0d:42:e7:ca:d9:17:f3:a3:14:5d:
         9e:d4:67:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPbP9dZFW97WNjXZnrE8GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NzMyYjk4NWY4ZjYzZmY4YWU4ZWFjN2M3MDgzMmIzMGNl
ZTgwYWQwHhcNMjUwNDEzMTMwMTM1WhcNMjUwNDE0MTMwMTM1WjAzMTEwLwYDVQQD
EyhjNjhhM2ZjYTUxNGQxZDg5ZmY1NDMzYjU0YjRiNjkzMWI3NTBmZjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiJS64sNl32TqwhsEwK3Q03JjEQF
u9/kkAWOZI1lJMhBc6/Ogm8LVtePLr9PfC+yfWom4RWNKmEcHWffinor9IiIIC4G
In3z9Tx0aVGRFnEikvIAe5WaM7EEIAM2TFinGY1+B0WqYf4T6T2JlA5U1JH/VlWl
QNluxmo5nOi2aKNME7+qIr7znpwjyzoQVzBoM4wT5ChiL+4kcYbxKXyBOHmP1Cwb
oL0fTAPLQWAkgR3o18ZUlEKnNmCxUUEzTQr+cTw/uZroMdsB/TmGc/odTQLblTHx
M3GeF3T+YfxKNf2JypNi30Fqx2yDR68p+CrnHvLZjPwn+V5Gpu7z3EUtCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMaKP8pRTR2J/1QztUtLaTG3UP9GMB8GA1UdIwQY
MBaAFARzK5hfj2P/iujqx8cIMrMM7oCtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82ZGEwYWEtMTMyNy00ZmE2LWE5NDct
YWRhMjcwODI1MjE4LzEvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82ZGEwYWEtMTMyNy00ZmE2LWE5NDctYWRhMjcwODI1MjE4
LzEvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASfHmbges
X9Coe7vEw0I3cqpqwfxaD0qnvIFYxNtpDvlnqoRbRnklMuQefVTwUvry6N3p1aUr
LturmLFyPRvha6ua63RtNdX6UTlGGTgLTqMsTrm3c7k68oh/OwVJbhYYSR83FDte
xsZoweregojpDqVPAtj5DPaWgvodI5jjnMzp40vF6IompYeEw2DUS3vgZ6NcpL6n
V7+pBBa9rDXdxcMJoknlzYzB2c1OU15lMH4/sXSGd/TeUETqnnQ9PwkcJ8fBK+Vr
FI8NOKbwhIFkVaYD75BIMOmVQCvxCz56AP/txeUggu5XOuD8bdoR9CPNJhwNQufK
2RfzoxRdntRnGw==
-----END CERTIFICATE-----