Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
File:                     BQseOMcEvQjjudF_WQNnsdHwPEo.mft (raw, json)
Hash identifier:          OkyQ8dBE5AGvnTQjIHWqYurLAVLRwYg1LalPe/u4Whk=
Subject key identifier:   E1:22:63:8F:10:EE:E0:6B:26:95:E6:EA:7B:AA:0B:5F:B1:29:72:C4
Authority key identifier: 05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A
Certificate issuer:       /CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
Certificate serial:       01962E6208ED2AB99D1ED8CB582BDA686BA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft
Manifest number:          1122
Signing time:             Sun 13 Apr 2025 09:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:38 +0000
Files and hashes:         1: 5S92E_dEmNTTwfkm2rsCO6-zdvo.roa (hash: gLy7LOPageczNSXewMrkGlzpLLm8xvxYhJmy6XmoxNw=)
                          2: BQseOMcEvQjjudF_WQNnsdHwPEo.crl (hash: mES6Px14mdC16OuFx5TB6iqd9TXTH+xNjeD0+Z2g8vY=)
                          3: VPRSbhpUWHK9LNCRTJlj7w99FR8.roa (hash: iyRxgtVq0GVpiBHIkamYcHY6gGzLkU1W/+EnFJzw2iI=)
                          4: ojWxc2TzI-h3TIYvKtx_PWX6d0c.roa (hash: SsT/N9GUX/6L4Mk+Xa88PVIrMr8IoUKh8+VOw3Xptus=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:08:ed:2a:b9:9d:1e:d8:cb:58:2b:da:68:6b:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050b1e38c704bd08e3b9d17f590367b1d1f03c4a
        Validity
            Not Before: Apr 13 09:01:38 2025 GMT
            Not After : Apr 14 09:01:38 2025 GMT
        Subject: CN=e122638f10eee06b2695e6ea7baa0b5fb12972c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1e:2f:c5:7b:03:ec:f0:50:ab:9f:d0:1f:ae:
                    e6:8e:52:bc:ce:a0:88:84:38:85:82:35:8f:a3:51:
                    79:3d:82:74:a2:51:26:a5:f3:15:d3:29:5d:d5:04:
                    34:91:06:0f:44:49:ee:e8:69:db:89:31:e9:87:67:
                    45:8d:9c:5c:94:d1:2c:38:98:46:ad:44:7f:55:3f:
                    36:ce:2f:8d:1b:d0:57:33:01:37:be:f9:64:cc:6d:
                    97:27:99:5b:21:df:50:d8:0e:99:94:ab:e0:54:94:
                    08:43:a8:6c:e8:21:ee:e4:ee:9a:f2:2d:85:75:cb:
                    06:7a:e1:f2:4b:91:9b:d6:25:a4:5c:78:d3:b4:e6:
                    83:86:af:23:6e:e8:60:1e:a3:59:c1:c0:4c:64:18:
                    7b:d6:6a:56:5e:de:f1:5e:74:f4:77:6a:4c:ce:a8:
                    68:a7:53:d8:76:ae:8f:22:06:ff:03:20:96:80:43:
                    31:f6:1e:48:0a:f5:33:38:81:70:1d:74:d3:12:6a:
                    98:d8:2a:8c:85:ca:f8:95:41:58:09:41:f5:2b:c6:
                    34:c5:a9:22:f1:55:7d:33:df:b0:9b:60:69:8c:4b:
                    d1:29:22:60:42:00:57:77:fe:48:00:43:cf:d0:0f:
                    40:92:2d:58:5b:80:10:15:2d:9d:54:9d:3b:ee:f0:
                    16:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:22:63:8F:10:EE:E0:6B:26:95:E6:EA:7B:AA:0B:5F:B1:29:72:C4
            X509v3 Authority Key Identifier:
                keyid:05:0B:1E:38:C7:04:BD:08:E3:B9:D1:7F:59:03:67:B1:D1:F0:3C:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQseOMcEvQjjudF_WQNnsdHwPEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/3cc9b4-1eff-48c9-b2f6-a01e9e6dcbf2/1/BQseOMcEvQjjudF_WQNnsdHwPEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:08:7a:f9:e4:b3:e8:7b:87:84:94:8d:73:11:97:fe:0c:d1:
         2a:a0:9e:56:2b:87:19:e0:05:87:5d:35:60:2c:42:12:29:7f:
         12:28:fa:77:df:10:2b:3d:53:df:d3:76:d0:70:3a:fd:68:30:
         b6:41:28:35:e7:72:fd:e5:52:9e:bd:70:b9:0c:9c:36:7e:d2:
         0d:18:5a:be:dc:b3:91:d9:b1:e2:92:93:7a:65:41:47:50:16:
         51:2c:89:39:75:6e:51:7f:b9:f5:8c:b6:8a:c6:d9:c4:79:bc:
         c3:9e:54:b0:80:f9:30:8f:43:a8:9c:d2:63:07:c7:9d:77:c8:
         d5:61:1f:70:d9:a0:23:96:e4:04:00:ed:df:07:3e:8b:90:b6:
         c0:c2:96:4f:b0:6b:f5:82:4b:8e:16:4d:0f:2f:a5:87:9a:99:
         e9:2b:28:0e:db:cd:97:a2:44:18:8c:a7:f7:74:2e:6c:e8:2a:
         c4:ca:42:6a:21:c5:6b:75:d3:4f:67:05:cc:27:10:75:51:ff:
         64:2d:db:06:bb:37:9c:48:7e:ad:23:6f:a3:58:27:06:44:cb:
         ae:61:0e:10:47:a7:4a:df:cf:90:c7:e0:df:c5:66:00:07:b4:
         1b:1e:97:d9:39:92:a8:06:e5:5c:40:08:d2:06:ff:bf:f6:d2:
         7c:cc:4f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----