Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.mft
File:                     beisSVlyXk_tHDMNIrXNBgJBpRQ.mft (raw, json)
Hash identifier:          QmOYE788MOPF6kpAGO58jHv4zK2tJ5zB+dlBcN+07X4=
Subject key identifier:   7D:42:08:C2:A7:9D:99:B0:B5:2D:71:69:7E:30:44:07:88:7C:15:FD
Authority key identifier: 6D:E8:AC:49:59:72:5E:4F:ED:1C:33:0D:22:B5:CD:06:02:41:A5:14
Certificate issuer:       /CN=6de8ac4959725e4fed1c330d22b5cd060241a514
Certificate serial:       01962FAB329FBB8AD2BC7AFAD96EB126B15B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/beisSVlyXk_tHDMNIrXNBgJBpRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.mft
Manifest number:          0411
Signing time:             Sun 13 Apr 2025 15:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:10 +0000
Files and hashes:         1: 0YIOVBW-uwL5vGELnsoWXjbdbbc.roa (hash: YnwOh3rBgK7q6cV+gaFLtLus1V2Wyasj+jLsXsDsPIs=)
                          2: beisSVlyXk_tHDMNIrXNBgJBpRQ.crl (hash: Zm02A3tDch28ESVV9yg3Y/W/vAeOXMHR+svvMLXUHTc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:32:9f:bb:8a:d2:bc:7a:fa:d9:6e:b1:26:b1:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6de8ac4959725e4fed1c330d22b5cd060241a514
        Validity
            Not Before: Apr 13 15:01:10 2025 GMT
            Not After : Apr 14 15:01:10 2025 GMT
        Subject: CN=7d4208c2a79d99b0b52d71697e304407887c15fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:10:75:7b:b1:7d:43:df:2d:10:e2:7b:ea:4e:
                    6f:bf:0c:57:ff:c0:7f:4e:2b:2f:c5:77:99:35:b5:
                    37:bf:61:a5:30:b8:6c:4f:ee:ae:5a:7e:23:ea:ce:
                    a6:31:14:f9:dd:7f:9a:6c:64:12:4c:b7:76:18:53:
                    dd:f8:6b:be:dc:68:4e:8d:b8:8c:f5:30:f0:96:f1:
                    fb:47:45:4b:09:1c:21:6c:47:3f:89:fa:83:79:dc:
                    cf:7b:f0:43:b9:7e:2f:36:69:aa:95:6c:3b:39:c4:
                    ce:f2:0e:4d:06:0d:89:c1:19:64:fe:d7:63:14:37:
                    3e:ce:bb:79:c4:e5:c4:7e:00:ed:40:c4:1c:f4:da:
                    42:7e:8b:17:85:a9:a8:ab:c7:7b:94:95:93:ef:72:
                    bd:24:d1:2b:43:22:1f:77:cf:6d:2f:fc:d4:4e:99:
                    d4:8e:b3:6d:f4:e3:73:ec:22:34:cb:3d:70:7c:3b:
                    c9:72:72:eb:3b:e8:4f:ef:46:f0:4c:9e:65:13:b7:
                    95:0e:76:d4:79:85:ac:9a:74:37:1a:6f:bd:03:82:
                    80:6b:28:08:e6:62:2f:e8:79:6f:dc:fb:4d:dc:f5:
                    a3:22:cf:cc:a2:5e:de:13:6d:fa:55:29:0b:71:53:
                    32:97:f2:34:b0:59:de:ae:cf:65:6d:2b:2a:c4:4a:
                    84:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:42:08:C2:A7:9D:99:B0:B5:2D:71:69:7E:30:44:07:88:7C:15:FD
            X509v3 Authority Key Identifier:
                keyid:6D:E8:AC:49:59:72:5E:4F:ED:1C:33:0D:22:B5:CD:06:02:41:A5:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beisSVlyXk_tHDMNIrXNBgJBpRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/94d02e-6947-4286-a608-a27f55018a5c/1/beisSVlyXk_tHDMNIrXNBgJBpRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:08:a7:be:38:9f:1d:5a:8f:8d:ab:a2:d4:b7:0c:52:91:b0:
         c2:94:eb:85:ad:ea:a2:39:eb:d7:6e:eb:80:47:41:f1:26:12:
         45:2e:46:ec:1f:5d:ba:97:73:c8:a7:51:44:84:1f:2a:f1:95:
         4a:a9:84:a2:d7:b8:37:5d:b9:22:dc:a9:63:df:30:6b:1a:c2:
         93:7f:38:e1:91:38:ed:f9:1d:0b:15:b8:be:0d:b7:67:39:95:
         86:e4:7b:79:87:6f:0d:bc:85:98:1a:5d:37:d8:44:c2:dd:7a:
         58:28:2a:72:f4:88:b5:d2:41:de:6e:8b:e5:00:68:dc:0d:76:
         8c:99:d0:49:78:1c:72:25:95:33:f8:e1:59:de:3a:a7:78:e4:
         0d:d6:6d:b4:5d:b7:4f:af:87:75:61:79:3b:17:6e:f1:5a:fb:
         e2:24:56:4d:7c:e7:60:6d:95:a1:2b:96:da:4e:a6:de:ae:02:
         20:d5:91:8b:a7:5f:88:a1:71:14:ea:aa:be:d0:8d:47:a8:5f:
         04:b0:f5:10:2b:80:98:dd:77:32:5d:a5:96:7d:ca:f3:fc:5e:
         fa:32:47:1e:e3:1f:04:75:be:d8:5d:b1:5d:4c:ad:48:b8:a7:
         7e:a5:5a:ff:c7:65:b5:91:00:c3:e5:de:ed:94:3f:da:d7:69:
         7d:c2:37:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvqzKfu4rSvHr62W6xJrFbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZThhYzQ5NTk3MjVlNGZlZDFjMzMwZDIyYjVjZDA2MDI0
MWE1MTQwHhcNMjUwNDEzMTUwMTEwWhcNMjUwNDE0MTUwMTEwWjAzMTEwLwYDVQQD
Eyg3ZDQyMDhjMmE3OWQ5OWIwYjUyZDcxNjk3ZTMwNDQwNzg4N2MxNWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RB1e7F9Q98tEOJ76k5vvwxX/8B/
TisvxXeZNbU3v2GlMLhsT+6uWn4j6s6mMRT53X+abGQSTLd2GFPd+Gu+3GhOjbiM
9TDwlvH7R0VLCRwhbEc/ifqDedzPe/BDuX4vNmmqlWw7OcTO8g5NBg2JwRlk/tdj
FDc+zrt5xOXEfgDtQMQc9NpCfosXhamoq8d7lJWT73K9JNErQyIfd89tL/zUTpnU
jrNt9ONz7CI0yz1wfDvJcnLrO+hP70bwTJ5lE7eVDnbUeYWsmnQ3Gm+9A4KAaygI
5mIv6Hlv3PtN3PWjIs/Mol7eE236VSkLcVMyl/I0sFners9lbSsqxEqEawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1CCMKnnZmwtS1xaX4wRAeIfBX9MB8GA1UdIwQY
MBaAFG3orElZcl5P7RwzDSK1zQYCQaUUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmVpc1NWbHlYa190SERNTklyWE5CZ0pCcFJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85NGQwMmUtNjk0Ny00Mjg2LWE2MDgt
YTI3ZjU1MDE4YTVjLzEvYmVpc1NWbHlYa190SERNTklyWE5CZ0pCcFJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85NGQwMmUtNjk0Ny00Mjg2LWE2MDgtYTI3ZjU1MDE4YTVj
LzEvYmVpc1NWbHlYa190SERNTklyWE5CZ0pCcFJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZAinvjif
HVqPjaui1LcMUpGwwpTrha3qojnr127rgEdB8SYSRS5G7B9dupdzyKdRRIQfKvGV
SqmEote4N125ItypY98waxrCk3844ZE47fkdCxW4vg23ZzmVhuR7eYdvDbyFmBpd
N9hEwt16WCgqcvSItdJB3m6L5QBo3A12jJnQSXgcciWVM/jhWd46p3jkDdZttF23
T6+HdWF5Oxdu8Vr74iRWTXznYG2VoSuW2k6m3q4CINWRi6dfiKFxFOqqvtCNR6hf
BLD1ECuAmN13Ml2lln3K8/xe+jJHHuMfBHW+2F2xXUytSLinfqVa/8dltZEAw+Xe
7ZQ/2tdpfcI3bw==
-----END CERTIFICATE-----