Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
File:                     BEw2vtOpgR94Jg5_X0_S_V54jgM.mft (raw, json)
Hash identifier:          Tj6xXzyGOXzq3SRkLDhaJPeKyd0YTl5CvggRXCeetA4=
Subject key identifier:   74:96:82:87:B9:C9:E0:2B:7C:C2:71:FA:AF:80:5F:52:C4:74:A3:CB
Authority key identifier: 04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03
Certificate issuer:       /CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
Certificate serial:       01962F06CEDA7048E9A4F20894D5F1C49BFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft
Manifest number:          0B82
Signing time:             Sun 13 Apr 2025 12:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:37 +0000
Files and hashes:         1: AqwTFt-qyr9ctfZVh_Lc-HmCLI4.roa (hash: 6o18WCqQ1vQmdpr+KgNhHjoy4zxFnk5Txpn2BtXndjc=)
                          2: BEw2vtOpgR94Jg5_X0_S_V54jgM.crl (hash: tS1mcS/0Odq0YzINxNkE2cURgapgVO6iy7bCtINGWWM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:ce:da:70:48:e9:a4:f2:08:94:d5:f1:c4:9b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044c36bed3a9811f78260e7f5f4fd2fd5e788e03
        Validity
            Not Before: Apr 13 12:01:37 2025 GMT
            Not After : Apr 14 12:01:37 2025 GMT
        Subject: CN=74968287b9c9e02b7cc271faaf805f52c474a3cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b5:01:cb:e9:ee:b7:be:41:b9:e0:6c:f3:e6:
                    a0:14:1e:38:3a:cb:57:ec:c9:de:8a:8c:5e:dc:32:
                    9b:15:db:4c:8a:0d:bd:98:aa:88:37:33:77:b1:13:
                    be:e6:0f:c2:08:35:a1:ce:f9:32:66:06:1d:5b:b4:
                    eb:e5:e8:d9:ad:04:bd:17:69:93:36:dd:a0:8f:92:
                    d4:28:93:43:80:f8:e9:32:70:35:bd:fb:51:cb:39:
                    d5:20:45:a1:fd:41:0b:97:fb:a1:f2:8a:83:68:7f:
                    5d:c8:16:91:6a:65:75:c0:49:4e:5c:ae:5a:f5:b2:
                    52:ed:33:4a:be:71:4b:30:e6:eb:e0:80:74:ff:92:
                    1e:77:e9:87:a8:72:96:9e:42:6c:5c:5d:7f:fb:bc:
                    d0:a8:1f:7b:2f:2c:cf:ea:56:88:c4:d3:6b:a5:2d:
                    1f:dd:0b:68:32:ad:c7:39:0e:92:37:df:3e:68:55:
                    64:56:ee:d2:6d:17:81:1a:33:0b:78:26:3d:e5:71:
                    c9:8e:20:ea:ed:a4:88:21:d4:35:fe:61:c6:b8:3d:
                    e5:08:2a:ab:80:c0:12:a6:1f:b6:34:ae:59:c4:71:
                    b7:2a:ca:3c:cf:fa:19:54:c9:b7:e5:52:f7:09:2f:
                    b9:26:88:6b:05:58:a1:84:a7:5d:38:30:be:54:1c:
                    dd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:96:82:87:B9:C9:E0:2B:7C:C2:71:FA:AF:80:5F:52:C4:74:A3:CB
            X509v3 Authority Key Identifier:
                keyid:04:4C:36:BE:D3:A9:81:1F:78:26:0E:7F:5F:4F:D2:FD:5E:78:8E:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEw2vtOpgR94Jg5_X0_S_V54jgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/ae740b-10cd-4f4d-8f6c-3414fd5029e9/1/BEw2vtOpgR94Jg5_X0_S_V54jgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:6d:be:25:21:e6:45:3b:cd:40:45:c5:45:6e:52:34:63:d0:
         ef:00:70:0b:33:7f:2c:25:cf:83:eb:7b:fd:f7:f5:eb:00:89:
         4e:4d:32:0b:7b:4e:af:85:05:05:87:63:0b:28:9f:be:3d:b6:
         7d:26:e6:27:34:3d:84:f9:1c:70:ec:52:79:5a:c7:14:f1:4f:
         0f:cc:1d:43:64:b1:67:06:bb:e9:d5:5c:86:e7:85:06:5a:2e:
         e0:fe:08:57:1c:b1:dc:38:84:a1:24:89:9f:2f:97:a4:65:a3:
         f4:ab:4c:54:3f:68:33:f2:2d:c6:9d:9b:4e:2e:28:b9:75:4f:
         93:7a:0f:e8:76:ef:31:e9:9d:6f:dc:f3:91:09:3d:6a:6b:9b:
         33:36:d2:42:46:18:f5:4e:93:30:94:ae:4b:e3:d1:91:cb:a0:
         09:df:e4:03:8f:40:55:66:ef:57:28:e1:c4:0b:7f:1c:fa:fe:
         a9:0d:ea:64:4a:bd:ec:ee:37:9b:ab:01:34:25:4f:a9:b5:d9:
         6e:dd:56:ce:6e:cb:3e:89:d8:ac:c7:a5:b4:e9:c8:7d:76:f0:
         07:7d:46:4e:f8:d8:ab:0b:d0:16:39:28:4c:0f:fa:bf:a9:a2:
         5a:43:f6:fb:4e:ad:d4:63:77:ed:bf:ba:7a:9d:73:6a:94:bb:
         26:6c:72:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvBs7acEjppPIIlNXxxJv6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NGMzNmJlZDNhOTgxMWY3ODI2MGU3ZjVmNGZkMmZkNWU3
ODhlMDMwHhcNMjUwNDEzMTIwMTM3WhcNMjUwNDE0MTIwMTM3WjAzMTEwLwYDVQQD
Eyg3NDk2ODI4N2I5YzllMDJiN2NjMjcxZmFhZjgwNWY1MmM0NzRhM2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7UBy+nut75BueBs8+agFB44OstX
7Mneioxe3DKbFdtMig29mKqINzN3sRO+5g/CCDWhzvkyZgYdW7Tr5ejZrQS9F2mT
Nt2gj5LUKJNDgPjpMnA1vftRyznVIEWh/UELl/uh8oqDaH9dyBaRamV1wElOXK5a
9bJS7TNKvnFLMObr4IB0/5Ied+mHqHKWnkJsXF1/+7zQqB97LyzP6laIxNNrpS0f
3QtoMq3HOQ6SN98+aFVkVu7SbReBGjMLeCY95XHJjiDq7aSIIdQ1/mHGuD3lCCqr
gMASph+2NK5ZxHG3Kso8z/oZVMm35VL3CS+5JohrBVihhKddODC+VBzdEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSWgoe5yeArfMJx+q+AX1LEdKPLMB8GA1UdIwQY
MBaAFARMNr7TqYEfeCYOf19P0v1eeI4DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkV3MnZ0T3BnUjk0Smc1X1gwX1NfVjU0amdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9hZTc0MGItMTBjZC00ZjRkLThmNmMt
MzQxNGZkNTAyOWU5LzEvQkV3MnZ0T3BnUjk0Smc1X1gwX1NfVjU0amdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9hZTc0MGItMTBjZC00ZjRkLThmNmMtMzQxNGZkNTAyOWU5
LzEvQkV3MnZ0T3BnUjk0Smc1X1gwX1NfVjU0amdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMW2+JSHm
RTvNQEXFRW5SNGPQ7wBwCzN/LCXPg+t7/ff16wCJTk0yC3tOr4UFBYdjCyifvj22
fSbmJzQ9hPkccOxSeVrHFPFPD8wdQ2SxZwa76dVchueFBlou4P4IVxyx3DiEoSSJ
ny+XpGWj9KtMVD9oM/Itxp2bTi4ouXVPk3oP6HbvMemdb9zzkQk9amubMzbSQkYY
9U6TMJSuS+PRkcugCd/kA49AVWbvVyjhxAt/HPr+qQ3qZEq97O43m6sBNCVPqbXZ
bt1Wzm7LPonYrMeltOnIfXbwB31GTvjYqwvQFjkoTA/6v6miWkP2+06t1GN37b+6
ep1zapS7JmxyWQ==
-----END CERTIFICATE-----