Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
File:                     BaCPua9NbK_M-uOyjsbtScQj78Y.mft (raw, json)
Hash identifier:          SRfTU3VKRzTobmND3LvmrzSENXDQmo8qb1CO989NVyM=
Subject key identifier:   01:C6:49:CB:C8:B0:F2:62:A8:D7:8E:02:36:F7:A2:39:EE:8B:B1:6C
Authority key identifier: 05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6
Certificate issuer:       /CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6
Certificate serial:       01962E2AF890DBE16F729B2E018062726BA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft
Manifest number:          109B
Signing time:             Sun 13 Apr 2025 08:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:30 +0000
Files and hashes:         1: BaCPua9NbK_M-uOyjsbtScQj78Y.crl (hash: y6Zq3fzTNmxN3prG/3IMfl3/L3Cnlxdms5zIIOa4j00=)
                          2: SGQBvdPhJeyzXH46rCn1HprgoUQ.roa (hash: JigxCYquveWyuHmkXH4kT+LxBtbk4j6Ry0hBrLIoDFY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f8:90:db:e1:6f:72:9b:2e:01:80:62:72:6b:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6
        Validity
            Not Before: Apr 13 08:01:30 2025 GMT
            Not After : Apr 14 08:01:30 2025 GMT
        Subject: CN=01c649cbc8b0f262a8d78e0236f7a239ee8bb16c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f1:84:ea:00:6e:f8:ad:0e:ed:b7:5d:4a:56:
                    c6:d8:d3:a6:eb:2f:fb:bc:b5:31:18:21:90:f0:e8:
                    ba:21:86:74:54:50:35:a4:ed:85:e9:e4:8a:8f:58:
                    b0:58:cc:c8:d4:e3:bb:68:42:60:3d:20:0f:e4:09:
                    16:96:bf:b8:88:dd:1c:21:ca:9b:e9:b5:d1:78:81:
                    5c:41:20:ec:da:69:7b:f7:03:3f:97:1d:dd:fa:53:
                    57:c8:75:2c:62:82:b5:e9:5d:3e:0a:79:ee:fe:43:
                    d5:32:95:15:a5:0c:ba:72:51:83:c5:08:98:eb:83:
                    97:d6:68:8c:2f:6b:f2:4a:f3:a1:01:5d:62:93:d2:
                    3f:36:74:9b:aa:6e:7d:00:01:ab:9c:9c:f2:fe:56:
                    0c:81:a2:ca:b3:b0:43:b3:6e:23:e2:77:44:c5:d3:
                    69:75:4d:aa:ae:e9:4a:98:9e:ae:89:8d:86:2b:dd:
                    4c:ca:c0:d7:c3:25:65:52:a5:10:55:d2:9d:b8:35:
                    cc:d0:91:90:71:ae:cb:8d:eb:47:65:60:31:50:ea:
                    f1:aa:da:58:8f:6f:fa:2f:c2:47:d8:1c:a6:88:cc:
                    66:02:30:17:e4:19:02:a7:68:a4:9b:68:05:2f:f0:
                    a4:bd:d6:74:bb:4c:e5:f2:b5:58:30:01:4e:08:5b:
                    c1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C6:49:CB:C8:B0:F2:62:A8:D7:8E:02:36:F7:A2:39:EE:8B:B1:6C
            X509v3 Authority Key Identifier:
                keyid:05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:05:2e:40:99:33:17:d3:85:8a:97:2b:62:77:e7:9c:52:49:
         ae:f6:14:fc:69:68:42:44:74:69:4a:d3:b6:9b:c2:48:0f:da:
         d1:e4:f0:e9:fd:73:be:e2:6d:ad:84:3f:e1:07:70:3c:a1:c5:
         03:64:ba:73:8d:5a:dd:d1:5c:76:88:cf:cf:6f:8d:44:cf:fc:
         41:e5:60:c3:21:09:b5:aa:8b:78:99:ce:1c:d5:52:6d:89:76:
         80:51:e2:4c:f5:e8:f5:dd:2b:74:f2:5c:eb:95:c0:5d:36:23:
         c9:2a:e6:a0:e9:b3:27:6b:42:78:cc:1f:2f:0c:c4:65:f5:cb:
         81:9a:1b:65:6b:22:22:d2:fd:60:06:16:0f:55:98:b6:65:f4:
         a2:10:dc:68:cf:2c:aa:60:6a:da:61:7c:8f:b1:0b:72:f0:c8:
         62:39:51:b3:cc:d7:ed:2f:98:ba:95:d0:3b:b3:6a:b2:b0:db:
         c6:6b:b6:8c:b9:5b:fc:47:8e:05:2f:4d:e1:a2:5b:68:2f:60:
         07:ef:a7:86:ac:5d:2e:b1:4d:dc:0e:43:f1:32:24:86:02:ca:
         73:5e:db:b8:27:4b:14:5d:64:ae:f4:53:9e:1d:96:f0:b2:84:
         b3:a7:bd:77:ac:c3:bb:0b:fe:d4:3e:ad:e6:64:18:98:12:d6:
         d0:60:a9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----