Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
File:                     BDqcNdnhovTTSnVPom0gNleEchg.mft (raw, json)
Hash identifier:          iZCGT+dXPkUdXL9V+PmQsWX7qOp+i0dQ3ptWaJCQqJI=
Subject key identifier:   72:98:25:E4:7F:C4:11:4B:62:55:47:79:66:C8:09:A2:F1:04:F1:0D
Authority key identifier: 04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18
Certificate issuer:       /CN=043a9c35d9e1a2f4d34a754fa26d203657847218
Certificate serial:       01962F744FCBBF1E38409D72D146F7F7F746
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft
Manifest number:          1323
Signing time:             Sun 13 Apr 2025 14:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:13 +0000
Files and hashes:         1: BDqcNdnhovTTSnVPom0gNleEchg.crl (hash: uCi41Nvdh2EndqduyGl7LswpZKtJApE+8H8dMhlenZs=)
                          2: dXeaBJl10vB-B0zSVkLwNY_iIs4.roa (hash: F86Ia5myX5pjFnoQkxccwMDKgx5XnQXJd15fpxB0f8o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4f:cb:bf:1e:38:40:9d:72:d1:46:f7:f7:f7:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=043a9c35d9e1a2f4d34a754fa26d203657847218
        Validity
            Not Before: Apr 13 14:01:13 2025 GMT
            Not After : Apr 14 14:01:13 2025 GMT
        Subject: CN=729825e47fc4114b6255477966c809a2f104f10d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:50:8e:1d:cb:da:34:9e:e2:46:8b:56:49:4e:
                    ca:22:4a:73:3e:e9:fd:71:36:ec:e5:3e:f6:a3:c3:
                    b3:6e:3e:2a:f7:63:39:24:1d:ea:31:6f:d9:3a:7c:
                    d3:b1:af:0f:74:12:61:f8:f3:f9:25:61:ed:7b:71:
                    1b:a0:cf:e1:75:41:8b:b8:4b:59:01:d4:d1:9c:ff:
                    02:49:95:95:d1:e2:ae:66:d8:9f:81:5e:ef:5f:0c:
                    37:92:9e:d5:18:57:95:f0:ac:b2:fa:c7:eb:95:9d:
                    c1:98:00:2e:56:69:b5:fa:c2:64:ae:84:54:ac:f2:
                    38:0d:a3:2f:cd:f8:d5:f3:5d:cb:3d:44:da:79:c6:
                    25:b1:50:25:f4:33:e6:e6:b6:cf:de:b4:48:d8:16:
                    9b:ad:25:3a:67:fd:01:38:7c:2f:67:c9:b1:c8:9a:
                    7c:5e:33:56:e7:55:4d:2f:a3:cf:69:50:f1:8c:b7:
                    d2:0c:ae:04:00:fb:ff:79:97:99:b1:16:c6:ac:eb:
                    c7:b6:e3:ef:f1:c0:a9:ee:47:40:dc:28:d3:4e:be:
                    19:c3:dd:1e:5f:a2:c9:30:59:ee:b8:22:c8:f6:4a:
                    12:3e:f1:5d:d6:12:00:8d:47:68:a8:cf:fe:a2:b5:
                    58:1a:f3:0c:c1:3a:77:91:72:b4:f6:63:61:23:31:
                    d2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:98:25:E4:7F:C4:11:4B:62:55:47:79:66:C8:09:A2:F1:04:F1:0D
            X509v3 Authority Key Identifier:
                keyid:04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:98:7a:be:81:06:eb:41:d8:b0:39:bd:ce:2c:87:65:d8:0a:
         a5:5f:de:e5:54:aa:ea:98:34:9c:f2:8d:69:ac:23:b9:f5:24:
         2f:dc:23:f2:d9:b8:d2:7e:b5:8f:b5:58:a0:fe:d4:56:a7:0c:
         31:7b:c4:6e:0d:9a:05:b6:96:4f:4b:58:e4:e8:48:13:35:20:
         ed:61:d7:f1:14:9c:fc:e8:cc:c6:bd:de:17:2e:1c:3c:f3:59:
         a8:a6:02:1a:e1:30:77:63:52:52:87:0d:80:a1:79:3b:ed:5f:
         6c:f0:08:a2:14:0c:92:d8:3c:89:71:2e:14:c5:b5:1e:d7:e2:
         c7:d2:f4:00:59:b0:3d:d2:24:2b:3a:0a:74:43:10:67:35:ec:
         52:fa:8a:9e:54:4b:c8:2a:fb:f3:46:2c:f1:11:33:69:df:41:
         72:c4:4f:7e:11:e0:34:52:7c:a1:aa:84:14:2e:f8:91:b0:de:
         0b:ce:f6:86:02:43:f2:e5:18:16:5f:c4:7d:a5:b5:df:32:91:
         aa:2e:94:89:96:0b:92:7c:6c:c3:df:97:63:e4:a5:fe:64:60:
         3c:3f:b0:e1:be:bc:24:82:5f:ce:fc:f4:98:af:3e:39:a0:ca:
         2a:ee:da:36:aa:29:4e:59:50:57:f7:8c:5c:0c:d6:e2:58:d0:
         c8:65:4f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----