Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
File:                     BgyexdQFhu0yVfD8T8sxV3FN2hU.mft (raw, json)
Hash identifier:          kp8ee/+5XM6CRyFGUCkziuxBkE1a1dgX1ICeHRAxDYs=
Subject key identifier:   38:27:60:98:45:23:DA:60:92:91:23:B5:DE:B7:85:23:06:6A:FE:6F
Authority key identifier: 06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15
Certificate issuer:       /CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
Certificate serial:       01962FAB1AF8D4B3288AE3BB9704453B8EFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft
Manifest number:          1062
Signing time:             Sun 13 Apr 2025 15:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:04 +0000
Files and hashes:         1: BgyexdQFhu0yVfD8T8sxV3FN2hU.crl (hash: SEy9dL9ZXNbWVqFoCEPSKKPajUbC4qRM3XtTOw3zlVI=)
                          2: SvCn28QlY3H7uObVMGkQTVr8wro.roa (hash: lT4aO9UNqW5C6eAiY2SG9UDFdzGqTUCShh77rO3OfDs=)
                          3: zXLcc16Hl_V98UU7l_AMl_ZR3t0.roa (hash: zI4peklfsSU0BwGnCgTYFkA1twl5bd7IR0aRBdIFj54=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:1a:f8:d4:b3:28:8a:e3:bb:97:04:45:3b:8e:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=060c9ec5d40586ed3255f0fc4fcb3157714dda15
        Validity
            Not Before: Apr 13 15:01:04 2025 GMT
            Not After : Apr 14 15:01:04 2025 GMT
        Subject: CN=382760984523da60929123b5deb78523066afe6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:99:7f:84:e0:5b:37:09:80:94:8d:d4:72:6a:
                    61:e7:6f:a7:c7:b5:45:a2:0c:08:d9:db:07:74:6c:
                    00:e5:2e:d5:9b:e9:41:2f:13:49:d6:74:6a:1f:75:
                    ac:52:d5:5c:07:44:2d:7a:1f:aa:dd:99:36:1a:20:
                    80:24:7b:57:59:55:65:18:5c:2a:c6:98:d6:fd:5e:
                    d6:bd:16:cf:8d:d8:37:f9:aa:01:f5:a5:a7:12:3d:
                    80:bb:b6:77:8e:cd:da:8f:0e:fa:1e:55:80:e4:ba:
                    e5:ea:2d:cd:b4:77:ef:46:30:04:52:e1:3e:79:32:
                    8b:f4:70:8e:d0:4f:16:48:6d:2d:38:25:e6:e6:2c:
                    68:d4:c4:73:da:33:6e:68:e9:66:03:48:fe:0d:e6:
                    b6:ee:cf:21:4e:58:eb:d3:b3:ab:09:86:a6:00:4c:
                    cc:89:ba:3d:90:94:7a:2e:7c:1f:34:58:77:7e:34:
                    be:7c:9a:65:9a:c6:36:a3:d4:a9:8c:3f:5b:e6:3d:
                    0e:89:da:86:b0:d9:4d:9d:cc:bf:9d:5e:c4:00:c0:
                    fa:d2:98:e5:97:6b:e0:da:dd:9c:1c:11:ba:c5:86:
                    e5:f2:aa:71:82:7b:78:77:2a:f7:37:d4:aa:5c:18:
                    8a:61:0b:af:f2:d3:3f:6b:97:49:fa:d6:28:db:44:
                    66:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:27:60:98:45:23:DA:60:92:91:23:B5:DE:B7:85:23:06:6A:FE:6F
            X509v3 Authority Key Identifier:
                keyid:06:0C:9E:C5:D4:05:86:ED:32:55:F0:FC:4F:CB:31:57:71:4D:DA:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgyexdQFhu0yVfD8T8sxV3FN2hU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ae3a3e-2c0c-405e-bcd7-9e0a513deef2/1/BgyexdQFhu0yVfD8T8sxV3FN2hU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:2d:11:96:df:a5:dd:d6:66:b8:66:7f:4b:63:51:43:e1:73:
         4f:38:b6:39:49:5d:30:4b:48:9c:53:39:fb:a8:5a:a5:67:3d:
         77:54:a3:a3:0a:21:9f:f4:5d:58:77:3b:db:0a:08:4f:c8:68:
         21:c6:41:c5:08:8d:07:9b:34:14:7e:db:0e:c4:c0:1d:57:f1:
         c4:81:9d:2d:c2:42:10:44:6d:e3:7b:2a:a1:2a:22:1f:cb:41:
         a5:c2:62:a7:fa:36:62:58:c9:c0:88:d2:f6:91:7f:0d:61:42:
         8c:02:bf:3a:e6:bf:57:36:55:72:38:70:e5:29:5c:0e:84:7b:
         b1:9c:ee:ed:b1:1d:d1:ae:9e:c2:9b:5f:c8:02:4b:27:dc:fa:
         8e:7c:e7:2d:54:57:71:17:d0:90:6f:77:f4:96:d5:e9:c0:a1:
         f3:29:ac:5c:d5:78:4f:85:4f:81:f3:a3:50:dd:9b:40:21:9f:
         17:85:84:56:8e:17:db:81:94:51:7d:e5:36:e7:f9:32:92:0a:
         98:4a:04:c1:75:20:1f:db:10:1c:02:04:09:63:cb:88:3e:5a:
         9a:f0:ca:54:fd:ef:10:d9:8b:0f:07:ee:ac:d5:f5:96:d5:8b:
         e0:f4:31:97:0b:3a:f0:d5:6b:ea:fc:d0:12:00:8f:5c:08:e7:
         e9:a9:b6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----