Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
File:                     bJHX1fXOV5JskDlz7L8RK_rhUw0.mft (raw, json)
Hash identifier:          5SWTZCJ08k8EFxJ/L4+WqGukiUd+pgwP0iPXzv6zN+k=
Subject key identifier:   C5:31:00:86:01:CC:16:7A:09:CA:10:81:0A:20:E7:AD:89:4A:32:10
Authority key identifier: 6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
Certificate issuer:       /CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Certificate serial:       01962E2B403403850963C9A526CB36045B3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:48 +0000
Files and hashes:         1: bJHX1fXOV5JskDlz7L8RK_rhUw0.crl (hash: t+gnmTfr7ay8uB757tKtX5UFoId49xTNZpKS50krc04=)
                          2: eEvrSYjLUGg5GhW7JvZI3HWYfcI.roa (hash: GMSu0KMyD4SKyVpe+o1Z3AHIVpLBmKGk+5TuUmweIis=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:40:34:03:85:09:63:c9:a5:26:cb:36:04:5b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
        Validity
            Not Before: Apr 13 08:01:48 2025 GMT
            Not After : Apr 14 08:01:48 2025 GMT
        Subject: CN=c531008601cc167a09ca10810a20e7ad894a3210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0d:0d:ea:aa:a9:d9:04:eb:2c:2c:b9:43:c4:
                    f4:07:82:8d:be:b8:54:ab:dc:f1:d2:0a:67:e2:8d:
                    8a:68:f7:0b:66:40:22:ec:66:f1:33:a3:e0:53:59:
                    03:c8:37:c4:e3:4b:cd:1b:13:58:e4:9e:ef:f6:8b:
                    3e:7f:d6:45:bd:68:e1:2d:65:9d:97:16:11:51:6c:
                    54:f8:69:8a:80:b6:ec:67:be:f6:a0:54:24:25:c6:
                    3a:9f:aa:69:58:48:c1:67:7d:e3:59:e2:d1:f0:97:
                    dc:bc:db:40:c8:03:79:5a:40:ab:78:57:b1:1f:d5:
                    e2:8e:d7:a7:c9:60:46:c8:b5:a2:f5:92:dd:cc:54:
                    bd:a1:b9:13:e7:38:e2:23:cf:dc:06:53:2c:32:93:
                    99:b9:59:23:97:c9:1b:56:19:f8:34:cb:c5:a5:d3:
                    df:18:af:53:ec:18:a3:18:b0:aa:f7:4f:17:87:87:
                    e8:67:89:88:b5:50:2b:a9:f2:84:8d:2f:60:a0:99:
                    08:33:dd:31:7f:7c:ce:0d:fd:0c:28:1e:a4:b2:ba:
                    58:36:ba:ce:b4:e8:4c:5b:3f:b2:c9:a2:c7:bb:e4:
                    7b:42:18:ba:0c:2a:41:0c:c1:cb:53:b0:5e:db:b9:
                    6d:aa:6c:d3:39:a3:12:cc:f3:f0:e5:5b:ed:20:2e:
                    3a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:31:00:86:01:CC:16:7A:09:CA:10:81:0A:20:E7:AD:89:4A:32:10
            X509v3 Authority Key Identifier:
                keyid:6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:e1:80:fc:88:d0:03:6f:13:9a:1e:55:d0:30:5d:0d:dc:8b:
         37:8f:16:9a:ff:89:60:21:6e:d2:df:49:80:4b:d3:41:b2:d9:
         36:e5:6d:05:60:ff:49:7a:02:17:1b:4e:a9:97:64:e1:13:e1:
         11:05:17:1c:0d:08:a7:4c:95:f9:9d:49:d9:8d:43:60:ce:7e:
         75:a3:5d:2d:a6:77:12:73:8b:cf:e3:a1:db:c3:e6:f9:54:72:
         bd:bb:e1:19:d3:1e:4b:c0:6c:d2:d4:cd:ee:18:8d:b7:f6:ce:
         52:9d:09:d8:d7:8f:cc:33:b5:2a:10:30:9a:0d:2d:33:c6:80:
         92:9e:03:d0:9f:a6:7a:e1:18:51:af:4b:4a:0d:d1:43:1b:fe:
         5f:ce:a7:cf:99:df:51:a3:7e:db:cc:25:5d:81:28:e0:a3:fb:
         2b:9e:2c:e2:15:fd:6a:4d:52:90:8a:cf:08:46:51:c0:5d:7b:
         0a:cd:63:07:65:fa:6a:d1:2e:6c:a1:b1:ad:55:1a:67:34:eb:
         ad:24:91:49:16:4e:9f:59:df:80:79:7f:49:66:82:34:66:be:
         23:0b:5e:1b:83:7e:c9:2f:0a:6d:14:b1:56:12:a4:87:bd:cc:
         0f:f9:b0:bf:d5:dc:a3:eb:96:97:19:b8:16:3a:5a:95:17:c2:
         77:59:94:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuK0A0A4UJY8mlJss2BFs7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOTFkN2Q1ZjVjZTU3OTI2YzkwMzk3M2VjYmYxMTJiZmFl
MTUzMGQwHhcNMjUwNDEzMDgwMTQ4WhcNMjUwNDE0MDgwMTQ4WjAzMTEwLwYDVQQD
EyhjNTMxMDA4NjAxY2MxNjdhMDljYTEwODEwYTIwZTdhZDg5NGEzMjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0w0N6qqp2QTrLCy5Q8T0B4KNvrhU
q9zx0gpn4o2KaPcLZkAi7GbxM6PgU1kDyDfE40vNGxNY5J7v9os+f9ZFvWjhLWWd
lxYRUWxU+GmKgLbsZ772oFQkJcY6n6ppWEjBZ33jWeLR8JfcvNtAyAN5WkCreFex
H9XijtenyWBGyLWi9ZLdzFS9obkT5zjiI8/cBlMsMpOZuVkjl8kbVhn4NMvFpdPf
GK9T7BijGLCq908Xh4foZ4mItVArqfKEjS9goJkIM90xf3zODf0MKB6ksrpYNrrO
tOhMWz+yyaLHu+R7Qhi6DCpBDMHLU7Be27ltqmzTOaMSzPPw5VvtIC46ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMUxAIYBzBZ6CcoQgQog562JSjIQMB8GA1UdIwQY
MBaAFGyR19X1zleSbJA5c+y/ESv64VMNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkpIWDFmWE9WNUpza0RsejdMOFJLX3JoVXcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9kZDNmYzgtNDdkYy00YTM2LTg3MzQt
NDVkODRkYTM5ODc0LzEvYkpIWDFmWE9WNUpza0RsejdMOFJLX3JoVXcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9kZDNmYzgtNDdkYy00YTM2LTg3MzQtNDVkODRkYTM5ODc0
LzEvYkpIWDFmWE9WNUpza0RsejdMOFJLX3JoVXcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+GA/IjQ
A28Tmh5V0DBdDdyLN48Wmv+JYCFu0t9JgEvTQbLZNuVtBWD/SXoCFxtOqZdk4RPh
EQUXHA0Ip0yV+Z1J2Y1DYM5+daNdLaZ3EnOLz+Oh28Pm+VRyvbvhGdMeS8Bs0tTN
7hiNt/bOUp0J2NePzDO1KhAwmg0tM8aAkp4D0J+meuEYUa9LSg3RQxv+X86nz5nf
UaN+28wlXYEo4KP7K54s4hX9ak1SkIrPCEZRwF17Cs1jB2X6atEubKGxrVUaZzTr
rSSRSRZOn1nfgHl/SWaCNGa+IwteG4N+yS8KbRSxVhKkh73MD/mwv9Xco+uWlxm4
FjpalRfCd1mUZg==
-----END CERTIFICATE-----