Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft
File:                     Ben8oKhYT-scEjGQcUIwYbCP5FY.mft (raw, json)
Hash identifier:          uGtU8kXgm0Lac5ngCWkFd1cyURJH3EI7WDv/K5wCiwE=
Subject key identifier:   15:A5:05:5B:91:89:7C:80:BD:98:9C:E8:DC:04:57:9D:02:82:2B:A9
Authority key identifier: 05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56
Certificate issuer:       /CN=05e9fca0a8584feb1c12319071423061b08fe456
Certificate serial:       01962DF3AB48D21B8FABAB331551DEEE874A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft
Manifest number:          0CF8
Signing time:             Sun 13 Apr 2025 07:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:05 +0000
Files and hashes:         1: 4JQtl6CjZI4Ed81VYmD8y3s93nc.roa (hash: DNWzfbgNl38BTmSJIdFxCJ7U9WCYuq21jLucbQaekUg=)
                          2: BL3LZfi-f3ywcf3FmAmJwnbzASI.roa (hash: DVAE75CLKTBw2pzOs2zlkLoQMMQUvF717xgboLC73+I=)
                          3: Ben8oKhYT-scEjGQcUIwYbCP5FY.crl (hash: QwPSJvmdDoeYdwPVdoXY+MJAZPzbLUsW5Bmh/lnAXjA=)
                          4: DeACqwGcvIcEJ9pagEhHd4n2i_M.roa (hash: WPp0dLB9p4cnbOnLtVE+B38AXmBSQMpiDZZIvPoqViw=)
                          5: FMfF0PRqbPl1Xgf7uetPmo11RwY.roa (hash: Nmk2r9tNYQqNw9x7igBvoQ88flRwtwnRPqDYVBzi6Zk=)
                          6: Q146qaaxZ1xmkBzI32xjl700K7Q.roa (hash: Dmot/z3pbyFtlPpe5Va8TlDgzImhsPNQJ1rELTx4Aro=)
                          7: XNBwXrAiwZu96uMUjODQvvz_Bzw.roa (hash: mCW8/M59wIOxOS0wM2q/LR+3KGIdWjCxHtDVDd4aiCU=)
                          8: Z4WfPAHr0U4HuMsBXDWE11AR6SY.roa (hash: nIFqFX+PoOUUY+ho0HNN5VDHjMoLJi/JVpJHhVS9zMY=)
                          9: fETfH_XiNbseiVsjZA2HM6Af2jI.roa (hash: uyRqpIalZYJdXa3YW/3/Z8wVH+1oAHTZduFpskFWKhg=)
                          10: foM10PwLyaHwLhfbaJzkwnbAE_w.roa (hash: DIaKJkxL7f9BTL5/9GbSSi0rXtJN9gz1NV5M8HRodzE=)
                          11: phO7epvCoYFhkG0dTV5RtGTfFoE.roa (hash: jkhzkXF+DB42uMow0dB8LWjmxEVbOyoIZtbBsaP8XFo=)
                          12: rS554DqYgNK00lANZV007fZTVkM.roa (hash: 3SSYULxYvCw8XOXXkyZRjzf+FifSR5lE3jD5NyjPQ0I=)
                          13: uZ82HsSJfJMX-injZJkIBGdxGBY.roa (hash: mT1BefewYqT0QULFBWTWCpATALXi+6J6LGgvQIVpGhI=)
                          14: wacKSVeFcrTyL4jcOjnOwrcddYQ.roa (hash: n1rU/BStziAQk9f5pDE6L63EitmHb6FHEduDthm4TxU=)
                          15: ytwdpN2_MmIz-ujAGkeOSyxFnQQ.roa (hash: Q1K4a50MOqKpSRbaxfZO8lYsK/lxhMtlTC8aBU8fdHU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ab:48:d2:1b:8f:ab:ab:33:15:51:de:ee:87:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05e9fca0a8584feb1c12319071423061b08fe456
        Validity
            Not Before: Apr 13 07:01:05 2025 GMT
            Not After : Apr 14 07:01:05 2025 GMT
        Subject: CN=15a5055b91897c80bd989ce8dc04579d02822ba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:39:f0:9d:90:08:7e:1e:dc:ae:e2:9d:8d:7a:
                    1c:78:e6:6f:e5:92:6f:18:e9:10:f0:1e:02:ea:c1:
                    e6:50:a5:03:5e:66:b3:fa:84:c8:66:2a:f7:3d:33:
                    8f:36:b8:b9:ac:61:44:0c:fd:09:53:a9:7e:2c:ad:
                    84:bc:6f:e0:71:9e:4f:0b:16:95:dd:40:3c:e2:86:
                    89:c9:f1:89:44:b3:df:4d:d6:3d:fd:06:8e:0b:fa:
                    e7:d0:cb:d4:d2:80:34:ec:c9:a0:4f:a0:3f:42:8e:
                    74:d2:ce:0e:65:bb:02:fe:ae:94:e2:77:0d:19:06:
                    0a:b0:54:9a:91:c0:3b:ea:fc:4f:65:2e:9b:44:22:
                    3b:b4:5b:0f:ce:44:b5:68:d6:c8:fb:52:95:b0:22:
                    ef:9d:46:33:b1:00:dd:89:b4:49:c5:4a:95:68:69:
                    01:8b:5e:55:40:75:2c:48:7c:d7:3c:99:c5:0a:c9:
                    23:ac:27:ab:21:c0:8c:ac:a3:40:b5:18:cc:7a:fe:
                    48:36:36:c6:c5:f8:e7:a2:93:08:d4:b0:a5:47:89:
                    7e:21:c3:20:d2:e3:a4:b4:81:b0:27:cf:c6:33:ca:
                    17:63:19:96:c4:90:0e:38:1d:67:63:bd:f0:cb:1c:
                    f6:2d:42:57:33:f0:99:da:84:81:b6:ec:dc:6b:14:
                    42:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A5:05:5B:91:89:7C:80:BD:98:9C:E8:DC:04:57:9D:02:82:2B:A9
            X509v3 Authority Key Identifier:
                keyid:05:E9:FC:A0:A8:58:4F:EB:1C:12:31:90:71:42:30:61:B0:8F:E4:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ben8oKhYT-scEjGQcUIwYbCP5FY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/c7ee9e-b5bf-4c2d-a983-dee3ed497aee/1/Ben8oKhYT-scEjGQcUIwYbCP5FY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:6d:f9:4e:b1:dd:06:b2:e7:41:16:e6:8c:1f:8d:88:74:d1:
         e0:27:1e:41:5d:ee:9e:d0:b5:71:20:c4:68:25:4e:6a:54:45:
         31:1f:c7:9f:0b:8e:5c:b5:10:1b:8c:e6:6c:b5:c1:59:15:69:
         6e:b2:01:b2:b5:25:aa:05:dc:42:b8:f8:b9:a7:c6:ef:89:7e:
         ca:4e:0b:9f:f7:0b:d4:58:8e:37:8c:70:2b:bb:fe:09:2f:ef:
         ec:03:ad:f3:f0:64:df:8a:a1:ae:78:1f:cf:be:91:73:dd:56:
         ba:80:df:84:f0:26:fe:75:05:b9:9a:b3:16:d2:74:09:92:5b:
         d8:e7:70:e1:c6:51:c6:94:6d:00:99:17:79:93:f9:78:58:bf:
         0a:87:a1:08:05:03:db:2c:ad:c7:d8:fe:51:7d:9b:84:8a:25:
         c8:c3:7f:f8:05:c9:21:71:6f:37:ae:9d:26:a2:55:c6:85:ec:
         22:92:ef:7b:e5:7b:18:aa:70:b0:4a:58:43:80:62:0a:db:15:
         1f:84:64:38:1c:c1:ac:28:53:b2:3e:3d:0e:d8:e8:15:e7:c6:
         58:46:80:c4:cc:89:92:41:f3:07:aa:a3:89:75:86:ed:a9:52:
         7f:64:63:ef:67:df:e6:ef:7e:6d:11:6f:a9:12:47:6c:db:ca:
         ac:a5:8f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----