Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
File:                     BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft (raw, json)
Hash identifier:          UTelpB42j1fT9457y7cHGLqVCdBDaD6cO3ScFeBX7yM=
Subject key identifier:   42:36:03:96:81:C6:57:56:6B:3F:81:BD:95:6B:88:F3:21:86:A2:E6
Authority key identifier: 05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
Certificate issuer:       /CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Certificate serial:       0195E0EB8BC177BC9B3CBE5B58440ED4266B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
Manifest number:          11C4
Signing time:             Sat 29 Mar 2025 08:01:27 +0000
Manifest this update:     Sat 29 Mar 2025 08:01:27 +0000
Manifest next update:     Sun 30 Mar 2025 08:01:27 +0000
Files and hashes:         1: BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl (hash: e2y4H8MYV57C9lsDnNgpUtN3Kwi5/H0lF2WDYEzNWHs=)
                          2: Sj4J_mFP2lQkR8Pqu4-vUWhntlo.roa (hash: OyHUO8zUzkjWGYsEn0Hm1G4SAQZ+8DrBTjWOD/M90zc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:eb:8b:c1:77:bc:9b:3c:be:5b:58:44:0e:d4:26:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05712e88949d5a435a33e7040c9fb7e7a8244395
        Validity
            Not Before: Mar 29 08:01:27 2025 GMT
            Not After : Mar 30 08:01:27 2025 GMT
        Subject: CN=4236039681c657566b3f81bd956b88f32186a2e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bd:19:35:d6:84:ef:29:9c:41:4e:7e:56:f3:
                    93:62:43:ff:10:a7:cc:11:b2:7f:bc:4c:0d:a6:6a:
                    6c:9e:ef:cc:1f:49:20:14:89:b1:13:1d:51:4f:c5:
                    69:c0:f5:ea:bc:7a:9b:4b:ef:e6:0f:5c:70:24:ad:
                    ab:e2:66:86:21:9c:9e:17:a2:0d:35:c2:08:02:81:
                    b4:be:84:e7:8b:2a:7f:62:94:af:3b:58:b4:f5:37:
                    18:71:fa:ac:d1:de:d0:15:b0:fe:ca:08:54:f8:57:
                    68:19:86:7a:5f:43:89:e3:d5:b1:90:12:4f:3e:d7:
                    b2:d0:54:31:a3:fd:92:9b:a8:e3:88:dc:16:5c:c6:
                    d9:ae:49:99:4d:df:80:cd:81:dd:08:d6:a8:0f:c2:
                    ab:6b:99:0a:6b:f3:2f:03:e8:56:05:69:9f:33:82:
                    6f:5a:ed:b9:d4:67:d7:d4:cd:d0:cd:f0:79:ee:ad:
                    d7:28:c9:b4:e8:9c:8a:04:9a:b5:d7:07:07:ab:48:
                    0f:77:24:4c:0b:16:ba:54:b8:81:4b:5f:99:eb:43:
                    eb:c0:cb:fc:4e:4e:61:9b:5a:76:04:12:55:f2:1e:
                    b3:16:ca:0c:38:bf:2b:41:68:04:fa:fb:4a:eb:10:
                    d8:ad:5b:d0:80:79:70:aa:6f:f4:9d:a4:a2:28:91:
                    77:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:36:03:96:81:C6:57:56:6B:3F:81:BD:95:6B:88:F3:21:86:A2:E6
            X509v3 Authority Key Identifier:
                keyid:05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:00:14:1c:6a:9d:d1:fe:93:74:e3:8b:b8:d5:02:a2:1d:61:
         75:5c:d6:36:19:01:c4:db:4c:ca:81:e1:12:95:8d:01:c4:0c:
         ee:12:ef:1c:51:aa:28:56:55:f6:4b:75:58:50:e6:cf:73:f8:
         49:83:d7:f3:82:73:14:75:67:3f:ab:1b:ef:c2:48:2d:9b:b3:
         62:6e:6b:42:f3:fe:de:6c:0e:41:f5:5b:b5:74:a0:8b:31:33:
         a2:26:0c:65:0f:78:e4:fd:60:66:68:96:50:41:e4:b0:92:3c:
         de:11:67:14:68:67:87:5b:77:76:e4:53:26:9a:a0:23:74:db:
         17:f2:dd:7b:5f:fa:17:11:6a:35:8b:4e:1f:6f:7d:f4:ff:09:
         11:a4:2d:b8:92:e3:98:c5:e2:a7:0a:21:9f:54:3f:9e:94:e8:
         f2:57:e2:8d:b3:cf:8b:67:98:18:31:14:6e:29:9f:68:03:37:
         ff:73:7d:17:2a:c1:6b:aa:9e:f7:73:ac:e7:00:86:dc:26:46:
         18:50:ff:cf:9e:bc:37:76:56:6e:a5:ec:4b:1d:e4:dc:89:1e:
         60:d0:14:98:b3:85:4a:a0:f9:e7:42:6d:51:5e:94:35:1f:22:
         e8:e3:7d:62:c1:d8:59:0a:0d:58:13:8b:b8:37:61:af:07:40:
         a5:f4:28:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXg64vBd7ybPL5bWEQO1CZrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NzEyZTg4OTQ5ZDVhNDM1YTMzZTcwNDBjOWZiN2U3YTgy
NDQzOTUwHhcNMjUwMzI5MDgwMTI3WhcNMjUwMzMwMDgwMTI3WjAzMTEwLwYDVQQD
Eyg0MjM2MDM5NjgxYzY1NzU2NmIzZjgxYmQ5NTZiODhmMzIxODZhMmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyr0ZNdaE7ymcQU5+VvOTYkP/EKfM
EbJ/vEwNpmpsnu/MH0kgFImxEx1RT8VpwPXqvHqbS+/mD1xwJK2r4maGIZyeF6IN
NcIIAoG0voTniyp/YpSvO1i09TcYcfqs0d7QFbD+yghU+FdoGYZ6X0OJ49WxkBJP
Ptey0FQxo/2Sm6jjiNwWXMbZrkmZTd+AzYHdCNaoD8Kra5kKa/MvA+hWBWmfM4Jv
Wu251GfX1M3QzfB57q3XKMm06JyKBJq11wcHq0gPdyRMCxa6VLiBS1+Z60PrwMv8
Tk5hm1p2BBJV8h6zFsoMOL8rQWgE+vtK6xDYrVvQgHlwqm/0naSiKJF3PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEI2A5aBxldWaz+BvZVriPMhhqLmMB8GA1UdIwQY
MBaAFAVxLoiUnVpDWjPnBAyft+eoJEOVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlhFdWlKU2RXa05hTS1jRURKLTM1NmdrUTVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yYzk1MGUtN2QzYS00Y2FkLTg0MWYt
MmMwMTRiNzQwYzNiLzEvQlhFdWlKU2RXa05hTS1jRURKLTM1NmdrUTVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8yYzk1MGUtN2QzYS00Y2FkLTg0MWYtMmMwMTRiNzQwYzNi
LzEvQlhFdWlKU2RXa05hTS1jRURKLTM1NmdrUTVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQAUHGqd
0f6TdOOLuNUCoh1hdVzWNhkBxNtMyoHhEpWNAcQM7hLvHFGqKFZV9kt1WFDmz3P4
SYPX84JzFHVnP6sb78JILZuzYm5rQvP+3mwOQfVbtXSgizEzoiYMZQ945P1gZmiW
UEHksJI83hFnFGhnh1t3duRTJpqgI3TbF/Lde1/6FxFqNYtOH2999P8JEaQtuJLj
mMXipwohn1Q/npTo8lfijbPPi2eYGDEUbimfaAM3/3N9FyrBa6qe93Os5wCG3CZG
GFD/z568N3ZWbqXsSx3k3IkeYNAUmLOFSqD550JtUV6UNR8i6ON9YsHYWQoNWBOL
uDdhrwdApfQo4A==
-----END CERTIFICATE-----