Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
File:                     BjyTAb89LhVgz69-3EGnw-yKFqY.mft (raw, json)
Hash identifier:          whDLrDNwQXJaHDgo83B2TPrZyvom/QHgB0Ye4EkkkQc=
Subject key identifier:   45:90:BD:52:E4:91:06:2A:2B:5B:60:D5:C3:11:7C:56:88:09:8D:0F
Authority key identifier: 06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
Certificate issuer:       /CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Certificate serial:       01962DF3B5A142ACB10EA660D08A1FFFE932
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 07:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:08 +0000
Files and hashes:         1: BjyTAb89LhVgz69-3EGnw-yKFqY.crl (hash: pjHaFG6pAatqtgbA3ZfVLkcdmyfBIHuXhoz8ZIiAWQY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b5:a1:42:ac:b1:0e:a6:60:d0:8a:1f:ff:e9:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
        Validity
            Not Before: Apr 13 07:01:08 2025 GMT
            Not After : Apr 14 07:01:08 2025 GMT
        Subject: CN=4590bd52e491062a2b5b60d5c3117c5688098d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1d:b8:f5:85:9c:3d:f4:54:37:14:43:2d:a1:
                    18:40:c1:41:48:7e:2c:64:b0:20:10:06:a3:7e:a4:
                    ef:63:c9:8f:89:e7:72:93:3d:50:f2:66:49:52:97:
                    5e:0c:d2:92:c0:2a:c6:ef:17:f5:49:d1:da:e2:36:
                    a8:0b:12:28:9b:7c:f5:51:90:c4:1f:f0:9e:8c:2e:
                    0d:ec:41:6e:28:83:07:69:a9:2f:4a:ab:69:27:d0:
                    fc:a1:36:9d:5c:75:f1:89:33:93:b9:e8:39:ce:a2:
                    0c:6a:fe:5f:39:25:63:99:8c:f2:75:ff:4f:54:71:
                    f0:b4:1c:40:44:8e:91:51:c0:61:1e:22:fe:93:10:
                    2b:f3:2b:5c:1a:41:90:37:4f:d1:a2:1b:d3:22:a7:
                    94:1f:12:36:a0:0f:50:f3:50:2d:9e:3a:60:e7:09:
                    41:73:b7:81:a3:2f:91:d7:94:96:57:42:f6:1e:7e:
                    59:42:52:51:b5:c9:f4:2b:b1:c9:1b:bd:56:4f:05:
                    52:4d:95:96:17:b0:3e:59:60:47:9e:a2:2f:76:4f:
                    17:13:e8:f3:06:51:1c:79:9f:28:14:98:08:33:7c:
                    be:13:3a:06:2c:81:54:f7:c8:59:89:43:86:5a:2a:
                    20:01:2c:a2:1e:4e:4f:c1:c6:1e:a6:4e:c0:33:98:
                    10:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:90:BD:52:E4:91:06:2A:2B:5B:60:D5:C3:11:7C:56:88:09:8D:0F
            X509v3 Authority Key Identifier:
                keyid:06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:8e:31:95:8c:bd:f2:02:48:df:59:92:72:3c:18:34:53:b1:
         c4:c0:89:99:6c:2f:3a:a6:7e:2c:31:76:87:f6:2d:3a:15:a9:
         08:a6:da:d5:1e:01:01:da:ae:7f:97:4e:14:3c:a2:3a:af:d1:
         c1:64:8c:54:f2:57:e7:e5:80:bb:d9:f8:8e:91:d7:61:fb:0d:
         76:a1:a9:49:78:a4:30:c8:c8:bd:38:61:80:b5:79:5b:fe:15:
         3d:5e:e1:5a:70:7f:44:75:9b:a2:8f:c8:03:3d:37:6f:e1:6b:
         97:f0:03:6a:20:4f:b1:d0:b4:e8:5d:fe:30:1a:8c:8f:b1:a3:
         eb:c4:1b:a2:5f:cf:13:6b:15:ad:61:a1:e6:8e:79:f2:79:fa:
         df:57:58:91:ae:59:0f:98:ca:c4:66:28:0f:76:a0:be:73:25:
         f9:c3:51:30:2f:54:77:48:d9:d6:06:3f:54:f8:00:9f:46:21:
         60:7a:7d:3d:c1:73:85:56:d0:bc:9b:0c:4b:72:ea:68:d1:22:
         a2:e2:62:03:43:30:97:5c:f6:fa:e8:a6:6a:9a:e6:cd:1b:a8:
         ae:b2:61:52:2b:3a:93:b6:1c:b6:db:d8:a7:b9:34:38:20:6e:
         30:db:a0:8c:81:f0:d0:a6:6b:8f:fe:f6:3a:dc:7e:f4:15:ac:
         f1:d1:1d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----