Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
File:                     BhuwkWyFOAHyLOcjvCzEGIadt9A.mft (raw, json)
Hash identifier:          jDZ9ywXRzNsjms64r1pP/Ch4gADP9V0AyYpytMqPF2U=
Subject key identifier:   4B:8D:94:7C:39:39:5C:6F:ED:87:F8:EE:F5:20:99:6C:5C:83:38:3B
Authority key identifier: 06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0
Certificate issuer:       /CN=061bb0916c853801f22ce723bc2cc418869db7d0
Certificate serial:       01962E98BA96921028C265284180E401E61E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 10:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:23 +0000
Files and hashes:         1: BhuwkWyFOAHyLOcjvCzEGIadt9A.crl (hash: RO5eaz1YCv+5WcUj0fJJ7PsMuubKBFKEWJA+lqcAAtE=)
                          2: Kli1CIfvUzezQEeZgfmrCqdQM_I.roa (hash: 78hmVW1qiWAvpebiM5hdAQNsJHKvS7UWJOLOAC6eO10=)
                          3: yilBdRRmJ9mIX_a1TabLEV03EEk.roa (hash: 4eslmC4MgTLkKxmkhr2W/5XHOeBZOMOpeHMJJDH3k34=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ba:96:92:10:28:c2:65:28:41:80:e4:01:e6:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061bb0916c853801f22ce723bc2cc418869db7d0
        Validity
            Not Before: Apr 13 10:01:23 2025 GMT
            Not After : Apr 14 10:01:23 2025 GMT
        Subject: CN=4b8d947c39395c6fed87f8eef520996c5c83383b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:df:5f:f1:a9:c8:4a:83:54:0d:29:84:c7:c1:
                    6f:ac:9c:b0:be:85:94:38:08:c6:be:95:ab:6c:14:
                    a5:52:45:bb:50:b8:ef:d5:db:39:15:b6:4f:85:b4:
                    76:79:55:f3:63:fb:75:c0:9a:de:ee:ce:a0:13:3d:
                    21:2d:00:0f:be:13:1b:fa:8e:13:25:ea:37:2f:71:
                    60:83:53:47:14:a2:fe:4d:95:89:2f:53:3d:9d:79:
                    55:95:19:1a:91:a1:ec:98:72:b6:ce:61:da:c5:87:
                    c7:62:97:38:5a:1d:5c:af:84:98:17:44:24:46:67:
                    7d:31:3c:67:44:19:a4:76:4e:6d:7e:26:f7:3a:13:
                    ed:9d:2b:34:b5:97:02:4a:3c:1a:36:0a:45:27:14:
                    db:47:10:26:e0:1e:88:8e:aa:d0:d2:06:ab:db:2a:
                    8b:a3:8d:3c:14:03:da:3f:5e:91:48:ab:cf:89:b1:
                    1f:56:af:f3:c6:b0:08:1d:f5:c9:40:fc:f0:ba:da:
                    12:4d:a6:ba:cb:a4:f1:3a:34:41:18:cd:a2:ce:86:
                    39:bf:5c:04:50:6a:76:a4:62:27:25:27:6d:52:31:
                    ce:d6:28:09:d2:c5:f6:3e:8f:65:b2:c3:96:d1:dd:
                    75:52:b5:6f:56:23:78:b2:4a:3e:8b:cd:1e:d2:b9:
                    7b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:8D:94:7C:39:39:5C:6F:ED:87:F8:EE:F5:20:99:6C:5C:83:38:3B
            X509v3 Authority Key Identifier:
                keyid:06:1B:B0:91:6C:85:38:01:F2:2C:E7:23:BC:2C:C4:18:86:9D:B7:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhuwkWyFOAHyLOcjvCzEGIadt9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bbb1c6-9f91-4346-b616-c2dc7a058e30/1/BhuwkWyFOAHyLOcjvCzEGIadt9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:bc:bb:9f:06:15:93:83:06:7f:46:9b:d6:57:bb:f1:01:57:
         13:cd:25:0b:27:59:9d:5a:09:81:fd:fc:11:10:70:e1:df:58:
         ed:c7:f5:31:12:e0:14:ee:13:37:94:f6:c9:6a:be:a4:f6:ef:
         86:ea:35:16:f2:0e:26:80:35:8d:68:b6:67:01:5f:f9:85:14:
         e0:c6:6e:b7:e5:00:d1:e3:f8:ae:fe:94:6e:09:9b:9a:3b:ed:
         7a:a7:ec:19:e6:d1:a9:63:4a:55:50:50:ae:22:2f:75:d4:b9:
         36:74:40:b6:91:32:a2:c4:5a:cb:ea:ce:fa:c6:f2:49:10:23:
         50:35:cf:3e:18:12:e6:5d:e0:cd:d8:bd:bf:c4:82:b3:67:d6:
         13:14:e9:2e:c5:aa:1c:33:5c:78:28:c8:fa:f6:52:df:32:38:
         69:74:90:e1:85:3c:a3:19:39:c9:6c:7f:ef:e7:6e:23:03:70:
         04:46:d3:9e:00:a2:06:ab:24:3f:4c:6d:b4:14:0d:39:4d:23:
         97:98:50:cb:e1:e3:f8:5e:14:51:ae:03:31:c8:be:ed:9d:38:
         5a:6e:62:ec:6f:15:56:64:1d:ad:bc:89:5c:87:ad:a4:45:27:
         ed:d1:ba:c9:3f:56:78:3c:1c:41:1e:ec:d4:59:90:fe:95:d6:
         45:72:c2:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumLqWkhAowmUoQYDkAeYeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MWJiMDkxNmM4NTM4MDFmMjJjZTcyM2JjMmNjNDE4ODY5
ZGI3ZDAwHhcNMjUwNDEzMTAwMTIzWhcNMjUwNDE0MTAwMTIzWjAzMTEwLwYDVQQD
Eyg0YjhkOTQ3YzM5Mzk1YzZmZWQ4N2Y4ZWVmNTIwOTk2YzVjODMzODNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr99f8anISoNUDSmEx8FvrJywvoWU
OAjGvpWrbBSlUkW7ULjv1ds5FbZPhbR2eVXzY/t1wJre7s6gEz0hLQAPvhMb+o4T
Jeo3L3Fgg1NHFKL+TZWJL1M9nXlVlRkakaHsmHK2zmHaxYfHYpc4Wh1cr4SYF0Qk
Rmd9MTxnRBmkdk5tfib3OhPtnSs0tZcCSjwaNgpFJxTbRxAm4B6IjqrQ0gar2yqL
o408FAPaP16RSKvPibEfVq/zxrAIHfXJQPzwutoSTaa6y6TxOjRBGM2izoY5v1wE
UGp2pGInJSdtUjHO1igJ0sX2Po9lssOW0d11UrVvViN4sko+i80e0rl7awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuNlHw5OVxv7Yf47vUgmWxcgzg7MB8GA1UdIwQY
MBaAFAYbsJFshTgB8iznI7wsxBiGnbfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmh1d2tXeUZPQUh5TE9janZDekVHSWFkdDlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iYmIxYzYtOWY5MS00MzQ2LWI2MTYt
YzJkYzdhMDU4ZTMwLzEvQmh1d2tXeUZPQUh5TE9janZDekVHSWFkdDlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9iYmIxYzYtOWY5MS00MzQ2LWI2MTYtYzJkYzdhMDU4ZTMw
LzEvQmh1d2tXeUZPQUh5TE9janZDekVHSWFkdDlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApLy7nwYV
k4MGf0ab1le78QFXE80lCydZnVoJgf38ERBw4d9Y7cf1MRLgFO4TN5T2yWq+pPbv
huo1FvIOJoA1jWi2ZwFf+YUU4MZut+UA0eP4rv6UbgmbmjvteqfsGebRqWNKVVBQ
riIvddS5NnRAtpEyosRay+rO+sbySRAjUDXPPhgS5l3gzdi9v8SCs2fWExTpLsWq
HDNceCjI+vZS3zI4aXSQ4YU8oxk5yWx/7+duIwNwBEbTngCiBqskP0xttBQNOU0j
l5hQy+Hj+F4UUa4DMci+7Z04Wm5i7G8VVmQdrbyJXIetpEUn7dG6yT9WeDwcQR7s
1FmQ/pXWRXLCIg==
-----END CERTIFICATE-----