Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
File:                     BsdGzX1N-VptA8qVVKdUdg1eTgY.mft (raw, json)
Hash identifier:          Xf9s5qIUQtjHfDo2AmCyDUySeDN82pWWYYr5T2XMgKQ=
Subject key identifier:   51:17:88:BA:06:9C:15:BC:6A:B2:21:00:20:8C:D3:74:B3:5A:62:73
Authority key identifier: 06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06
Certificate issuer:       /CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
Certificate serial:       01962F742F8DCF5E58F74D5E20AEC92CF0C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft
Manifest number:          0561
Signing time:             Sun 13 Apr 2025 14:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:05 +0000
Files and hashes:         1: BsdGzX1N-VptA8qVVKdUdg1eTgY.crl (hash: VIRnB+6GTpOKnkLhdpOLtUou7GWT706W/UmGX7sdAQM=)
                          2: X40tLgIMCQZAYRAwmZdn2JjY2Sg.roa (hash: eDaX3dI5fxxRGSOkAJcdOwrelUSaDgM3W7s+OAzNuqk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:2f:8d:cf:5e:58:f7:4d:5e:20:ae:c9:2c:f0:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06
        Validity
            Not Before: Apr 13 14:01:05 2025 GMT
            Not After : Apr 14 14:01:05 2025 GMT
        Subject: CN=511788ba069c15bc6ab22100208cd374b35a6273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1d:5a:3d:6e:86:c3:e3:45:90:e2:97:0c:cc:
                    b0:39:b5:09:90:e3:6b:ac:fe:78:44:85:23:a0:81:
                    82:2e:5a:1f:b1:a6:a9:cb:31:89:71:4a:87:dd:a4:
                    f5:d5:bd:c8:81:dd:dd:a1:e5:fb:01:5b:b2:e3:03:
                    60:aa:78:18:f9:ae:d4:17:5c:bf:c7:13:11:3c:83:
                    85:a8:85:bf:c5:9f:22:e5:f6:0d:af:b1:71:22:60:
                    1e:3d:cd:da:94:c2:93:da:6d:ad:1b:df:44:32:c4:
                    93:a6:20:73:20:0b:39:4f:c4:9b:a0:10:fe:6f:71:
                    5d:47:1a:d4:2a:df:70:91:f0:ac:fc:23:5d:d8:64:
                    9b:cc:bd:12:fc:78:f1:36:28:12:3a:d5:5b:83:bf:
                    98:32:82:03:79:1f:ef:49:33:70:79:e5:4b:92:26:
                    0a:13:a1:86:df:49:bf:ba:c1:10:1e:2f:d4:09:3f:
                    63:c5:5d:19:4b:ae:e5:ef:5b:d6:62:de:b4:62:5d:
                    80:f8:e2:72:bd:29:63:39:59:8a:9c:2a:ad:54:3a:
                    49:54:88:0d:4d:1b:1e:9f:82:37:4f:29:44:59:9f:
                    0f:3e:b7:d0:86:77:be:ae:9c:ea:dd:15:21:ef:76:
                    87:0f:a5:d0:e4:68:bb:5d:55:3c:79:c1:d7:58:aa:
                    d2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:17:88:BA:06:9C:15:BC:6A:B2:21:00:20:8C:D3:74:B3:5A:62:73
            X509v3 Authority Key Identifier:
                keyid:06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:07:bb:c9:d7:43:22:4a:9d:d4:30:83:bb:ac:c8:bf:2a:dd:
         e3:e0:cd:08:8b:db:85:7b:cf:89:3e:4a:c0:53:76:9f:91:5e:
         ee:2c:67:26:a9:7a:62:7c:d0:75:30:44:1d:a6:08:79:0c:9c:
         d7:1b:7e:1e:cc:ea:7e:87:95:ed:28:c2:a9:a1:9a:7d:70:8a:
         92:9b:37:cc:8c:97:4d:7c:b9:b3:dc:31:8b:99:66:c2:f1:89:
         8f:69:fc:1e:77:a8:d8:1d:07:09:18:c2:fc:5a:09:63:be:72:
         c1:26:50:69:b9:67:e0:1a:2d:6b:bb:70:2f:9b:94:8f:3c:20:
         f9:6a:41:2f:81:04:75:61:bc:a5:fe:38:6f:2f:9e:dd:48:08:
         e9:ec:fd:18:a7:19:84:38:34:c3:63:50:02:4e:38:47:49:85:
         c0:40:ee:a6:b5:dd:8b:10:b4:4b:1d:83:af:cd:6f:22:9e:8b:
         6f:ec:e6:79:b7:33:f1:a4:24:33:ce:a7:c6:bb:d1:fb:10:cb:
         6f:3d:ec:1d:c5:1a:93:49:6f:68:44:d5:7d:bd:b9:fc:4d:4c:
         1b:f3:1d:56:29:c7:6b:4e:28:17:29:0f:25:cc:99:c9:28:db:
         01:59:92:a4:3a:78:15:7c:97:ae:ca:01:7b:67:ed:8c:68:37:
         66:f8:b9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----