Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
File:                     BCrDgmiWh7YPzlzp24h7IdaKarw.mft (raw, json)
Hash identifier:          7X5ivWO4p6KKYVdGXsOm+Z6ilkNRl287T/d3hzGnrZA=
Subject key identifier:   8E:ED:AB:3E:DE:97:10:76:D7:B1:1C:61:BC:1E:7B:91:AA:32:4F:0D
Authority key identifier: 04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC
Certificate issuer:       /CN=042ac382689687b60fce5ce9db887b21d68a6abc
Certificate serial:       01962FAB36538E7AB0E6B5A6FF19D5A7EA2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 15:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:11 +0000
Files and hashes:         1: BCrDgmiWh7YPzlzp24h7IdaKarw.crl (hash: k33SxnQawuG3UROtXsVHKNEoTbOb0/6EL9PatyA4Fks=)
                          2: Lh8yvuYECQW6dDow2L76nBGsr6E.roa (hash: 0hiYjVR3RerVN9RXXudfA5pr9cnXHHQqw5O/Jaf9Snc=)
                          3: vtX7rusa6fZMmF3lc_ZvTTSyZII.roa (hash: /Q3goqDnJ6EwR3K+qh2LYwfBLshEeT0YC75y12sQLG8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:36:53:8e:7a:b0:e6:b5:a6:ff:19:d5:a7:ea:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=042ac382689687b60fce5ce9db887b21d68a6abc
        Validity
            Not Before: Apr 13 15:01:11 2025 GMT
            Not After : Apr 14 15:01:11 2025 GMT
        Subject: CN=8eedab3ede971076d7b11c61bc1e7b91aa324f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:83:56:7d:b2:35:bb:c6:67:07:2c:2f:77:13:
                    68:e3:b1:94:23:3b:b7:8b:42:d1:20:b8:a9:64:b5:
                    0a:6f:f2:08:d4:c5:72:c0:1a:10:7c:ac:88:30:c9:
                    8f:ac:e9:63:ba:3d:3a:0c:ff:13:98:78:93:b6:5b:
                    60:b0:f9:45:96:53:12:0b:fd:ae:5a:2c:45:4f:bf:
                    89:a0:63:0c:84:7b:4e:74:ad:4a:f1:8f:1b:7d:76:
                    86:1b:ef:19:1d:27:89:06:5b:c3:5f:65:bc:1a:01:
                    9b:14:d0:bc:1d:c8:70:99:74:8c:eb:39:c6:d9:de:
                    35:54:06:c8:1c:6c:c1:ad:23:40:f1:69:e4:0b:4e:
                    f8:f1:22:be:f1:4e:e0:93:3c:51:e1:6e:c5:f1:3e:
                    81:e7:9d:2d:35:0d:1f:09:bc:3d:b3:00:cc:96:ec:
                    51:9c:6c:69:44:d7:67:37:e4:d6:1d:21:ad:e0:1d:
                    b4:77:f9:a5:ca:ed:4b:2c:c2:0c:5b:55:a1:a8:f8:
                    52:a0:9b:f0:72:9b:d4:34:7a:1a:47:db:05:e1:a0:
                    d0:13:c5:0e:be:d7:7c:95:43:d7:35:84:ce:7b:dc:
                    9c:aa:14:47:38:9c:bc:f5:ea:a1:53:5c:bb:98:71:
                    8d:4d:9a:74:36:c7:41:8e:94:01:bd:e6:6b:16:71:
                    fe:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:ED:AB:3E:DE:97:10:76:D7:B1:1C:61:BC:1E:7B:91:AA:32:4F:0D
            X509v3 Authority Key Identifier:
                keyid:04:2A:C3:82:68:96:87:B6:0F:CE:5C:E9:DB:88:7B:21:D6:8A:6A:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCrDgmiWh7YPzlzp24h7IdaKarw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/4663bb-c509-4a9a-bcae-70bc66893e5c/1/BCrDgmiWh7YPzlzp24h7IdaKarw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:c0:b4:42:1c:54:d0:53:00:c0:c2:9f:99:ca:28:ee:62:60:
         d3:2b:2e:91:5b:48:72:29:4d:e7:99:fe:db:8b:4d:88:fb:1f:
         5f:cd:f0:92:ad:1f:00:1d:b1:ad:d2:c0:64:be:7e:a8:1d:06:
         c6:b1:9b:d9:e7:9d:82:8d:1a:27:f5:0c:ea:25:cb:dc:e1:b7:
         0e:0f:3c:f4:e9:34:3d:18:36:97:17:42:fa:e4:ec:4c:f5:d5:
         2b:92:63:01:a7:ee:4d:a1:df:bd:34:48:3e:12:a8:0a:a7:cd:
         54:3c:34:11:9e:a5:1f:e9:8a:c8:f1:e3:7a:01:f1:2a:fe:7b:
         f6:c2:2d:01:16:19:35:9d:4a:40:54:01:0a:31:43:34:b7:06:
         31:fb:2b:93:5f:d3:04:e5:3f:98:54:9e:50:0f:0e:dd:cd:87:
         03:5c:50:79:96:3c:5e:fa:ec:c3:01:af:71:1b:7a:45:47:5d:
         07:c4:74:1b:1c:7a:5e:be:13:4e:93:c9:5d:72:52:ec:5d:06:
         19:b0:25:a1:e9:36:4a:f3:9d:4c:47:83:5d:04:ed:e9:77:7f:
         68:4e:79:33:d6:4c:d5:3d:e7:25:c2:14:cb:34:14:39:eb:a2:
         5b:a8:6b:51:a1:f8:03:e8:77:b3:7a:6a:6c:77:de:a3:af:97:
         ed:1e:6e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----