Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
File:                     BKMSumXpC_is9PVzJKMMC2y9HC8.mft (raw, json)
Hash identifier:          DUIZf4Hf7rdirTf1QREbPcb4Uj+PR0kLKhyvuSEiF3E=
Subject key identifier:   4E:6D:38:DC:98:ED:17:64:A0:C5:F1:F5:A1:72:77:99:A7:C9:62:DF
Authority key identifier: 04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F
Certificate issuer:       /CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
Certificate serial:       01962DF3F59951B7C9C02D6B8395680992A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 07:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:24 +0000
Files and hashes:         1: BKMSumXpC_is9PVzJKMMC2y9HC8.crl (hash: 0gazSsCZS+39l5bwj1S9fvvaO1TETEt+MvGjmjNxHuI=)
                          2: dJFiVvdyRrc-N47GUy0rDR_3aS0.roa (hash: 0F0smXVvhLYj+9BCNow/krceI5xEmMfd4H+/Waw0oTE=)
                          3: muPUtRREeaPkLT6TOq-93dIjDcU.roa (hash: w+l36y5225njDbQNUe9USPk338011nfDzmjvCmLx+iM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:f5:99:51:b7:c9:c0:2d:6b:83:95:68:09:92:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a312ba65e90bf8acf4f57324a30c0b6cbd1c2f
        Validity
            Not Before: Apr 13 07:01:24 2025 GMT
            Not After : Apr 14 07:01:24 2025 GMT
        Subject: CN=4e6d38dc98ed1764a0c5f1f5a1727799a7c962df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:37:e6:92:35:d1:b3:85:aa:34:5e:16:29:70:
                    95:16:ac:d3:61:e2:68:8e:6d:39:24:05:96:9b:d4:
                    d1:32:54:28:c7:df:d9:18:61:21:e5:0e:69:0f:7b:
                    ff:ea:c7:a2:ea:a3:a7:5f:90:c7:68:a9:6d:3a:e9:
                    9d:8b:a7:f6:22:72:39:78:af:e1:03:fd:85:66:84:
                    78:cc:fd:5b:8d:d0:c2:c8:52:60:25:4c:df:18:ec:
                    27:fd:39:b7:db:23:7a:69:d2:83:49:bf:35:e2:0a:
                    07:e1:8e:d3:e7:69:b5:ff:45:54:2f:a3:bc:60:3f:
                    f4:fe:75:ac:91:80:c1:1c:ee:0d:11:a3:ed:79:c2:
                    d8:e4:a1:a0:f4:04:b7:51:b7:08:9e:92:c0:d6:25:
                    bf:0c:f3:d7:5c:d2:53:0e:16:c8:b4:72:96:47:fb:
                    e1:92:8c:ad:47:dc:eb:40:30:c1:55:12:93:1c:36:
                    54:e7:8c:d9:b8:49:a0:6f:c5:ae:2d:de:a0:0b:2c:
                    1d:da:fb:8e:de:31:2a:c2:6d:17:9a:97:11:ca:e3:
                    a4:b4:ac:f5:ce:64:92:7d:31:e3:5b:31:f5:57:8e:
                    c7:d3:fc:cb:6f:04:4d:84:41:d1:a8:74:ff:7c:b5:
                    c3:e8:6a:91:08:81:db:0d:49:aa:a3:e7:53:c6:53:
                    9f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6D:38:DC:98:ED:17:64:A0:C5:F1:F5:A1:72:77:99:A7:C9:62:DF
            X509v3 Authority Key Identifier:
                keyid:04:A3:12:BA:65:E9:0B:F8:AC:F4:F5:73:24:A3:0C:0B:6C:BD:1C:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKMSumXpC_is9PVzJKMMC2y9HC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3cf75-40b9-4034-84b9-cccbc2ae6948/1/BKMSumXpC_is9PVzJKMMC2y9HC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:6b:95:85:46:6e:75:b2:22:9f:6b:89:da:e8:c4:dd:e7:f9:
         ed:94:81:7e:54:68:02:15:42:4d:07:6e:42:de:b6:0f:6f:84:
         73:89:97:6c:d9:b1:3c:dc:31:07:60:a8:fb:45:53:af:a5:05:
         53:a6:0b:52:ff:1a:b3:3a:98:dd:b8:41:d5:c4:7b:9a:97:cf:
         bb:3f:35:0a:48:ee:30:4c:54:eb:cc:8b:91:91:38:7e:7a:bc:
         1d:45:36:7e:ea:b7:ee:33:ba:3a:0c:65:c9:83:ee:6f:9d:3a:
         b2:26:4e:71:96:17:c4:1f:5e:d7:1b:99:1c:12:4f:8d:b3:c8:
         50:21:36:f8:04:cb:98:72:98:17:63:b1:ee:9b:76:67:fb:be:
         f2:a4:ed:49:05:3a:b1:0f:47:d1:8c:7b:04:b7:3c:4b:3e:03:
         21:9c:72:92:d3:c8:c8:0e:43:f9:57:72:51:c6:fa:66:49:d1:
         3a:04:10:66:f4:59:bf:36:b7:b0:4a:e2:af:0c:67:23:07:48:
         7d:9f:91:4d:3f:2a:fa:d0:1e:0e:04:a9:d1:99:ad:b1:29:76:
         1c:e5:83:66:94:82:84:7f:ac:21:5c:b1:f9:86:7e:37:eb:55:
         d2:0c:8d:93:be:6d:0c:e2:7a:54:59:4a:fa:f5:55:99:b7:47:
         ce:91:c0:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----