Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
File:                     BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft (raw, json)
Hash identifier:          TtYzee/aiBK4zkmxDlVuSyoiN0a2zYY/Yx7ETMeUOuA=
Subject key identifier:   D2:A6:4C:F2:4A:3C:9D:28:FB:30:9C:4E:A4:F0:8D:BE:FB:C9:0F:36
Authority key identifier: 05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76
Certificate issuer:       /CN=052b864969e9680764899015e163ece77bb4cb76
Certificate serial:       01962DF3D4B959542DF07E899F14A63823A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft
Manifest number:          08D5
Signing time:             Sun 13 Apr 2025 07:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:16 +0000
Files and hashes:         1: 5fuOdmrlGVquJxF0B-B8z5sBlNI.roa (hash: DT/HXrl83qCIDVdBkYEE4TLDh03lHlOlq+VLneGm87c=)
                          2: BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl (hash: nUzEj8QqF5c7GyOG5xN/YbLetpzec1QzpP12z2Bwi6I=)
                          3: Z4nN-Ws_wnObQX43h7KB04MEX0Y.roa (hash: 7C7D7tdUB5rOJYlfI1UfJ/CA32g7kMZ0Kt4eDwWV77Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d4:b9:59:54:2d:f0:7e:89:9f:14:a6:38:23:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=052b864969e9680764899015e163ece77bb4cb76
        Validity
            Not Before: Apr 13 07:01:16 2025 GMT
            Not After : Apr 14 07:01:16 2025 GMT
        Subject: CN=d2a64cf24a3c9d28fb309c4ea4f08dbefbc90f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f5:fc:bb:ae:a1:18:3e:b5:60:c3:c5:aa:85:
                    4a:51:d1:c9:d1:45:b6:aa:eb:74:d5:5f:6e:00:9e:
                    82:69:df:60:d0:b5:b5:98:9f:fd:0c:cb:86:2e:2a:
                    59:d1:dc:93:34:dc:6b:b9:5f:e6:4e:1d:0e:ed:a0:
                    f9:a0:24:1b:0c:89:8c:68:e1:c3:f1:0e:51:5e:ec:
                    24:71:c2:e6:ea:82:36:30:ed:06:f6:11:37:c8:7b:
                    98:b4:2e:97:4e:ce:17:17:06:2a:1d:55:38:ae:e2:
                    42:0b:e7:1a:17:bf:2a:53:a9:91:44:5e:b5:5b:a3:
                    e9:6b:81:e8:e4:e0:64:07:a0:99:35:05:de:4d:32:
                    e3:68:1f:79:47:ce:f8:10:24:bc:31:e8:c9:1a:88:
                    e2:13:b4:1e:2d:f1:66:93:30:85:06:69:c3:a8:be:
                    a0:7d:9b:31:73:19:62:31:57:62:43:50:28:f6:2b:
                    cc:25:93:3e:6d:7b:9c:59:95:80:3c:f1:50:f0:76:
                    84:2f:6f:03:85:56:90:92:9d:ec:4e:1d:24:9a:e7:
                    61:88:c4:d9:b6:98:b5:fa:a5:c1:24:e6:39:06:b0:
                    d6:8d:09:0f:6e:dd:e9:6c:e4:fa:d5:72:2e:a0:df:
                    7f:90:bf:46:a5:76:51:2e:c1:b2:fe:27:eb:df:ae:
                    91:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A6:4C:F2:4A:3C:9D:28:FB:30:9C:4E:A4:F0:8D:BE:FB:C9:0F:36
            X509v3 Authority Key Identifier:
                keyid:05:2B:86:49:69:E9:68:07:64:89:90:15:E1:63:EC:E7:7B:B4:CB:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSuGSWnpaAdkiZAV4WPs53u0y3Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4759f9-7fdf-4916-a995-6970ecd9a610/1/BSuGSWnpaAdkiZAV4WPs53u0y3Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:a6:2e:53:e1:f3:ff:c1:ff:99:5f:6c:a8:71:c5:0f:3c:d9:
         de:da:fb:cd:7d:c6:0b:d0:e3:aa:13:f4:41:e3:f3:66:8e:b7:
         a5:d5:85:4c:ab:86:a9:81:c7:14:e8:13:73:b7:c6:78:a7:a4:
         a7:53:16:62:e7:53:42:0a:3e:db:d3:30:2e:82:17:25:7a:19:
         19:4c:09:b6:e1:da:52:16:84:8c:21:95:8b:ed:32:dc:16:26:
         fb:ce:4e:69:72:e6:4d:96:f9:cf:ec:5a:2d:a3:f8:d7:a0:ed:
         40:c2:e7:56:7c:e4:19:05:92:e9:01:d2:e2:66:61:49:60:00:
         e0:a0:4b:0e:d8:54:b6:a5:3f:d3:59:1a:f5:d7:9f:20:cb:b9:
         16:7a:f3:0c:ad:db:b4:61:0f:19:43:4f:dd:6c:1a:40:f2:d6:
         6a:fc:da:96:2b:32:4a:8e:9b:6d:6c:57:db:bc:eb:89:1c:b2:
         08:01:54:b2:41:e5:db:ab:60:da:7c:78:3c:ed:f3:bc:39:68:
         0a:6c:0c:32:3d:48:cd:ca:dd:af:24:4d:93:ec:9e:1e:5b:74:
         f4:89:b3:ca:0f:f3:d0:f7:6d:4a:7e:9d:83:7a:33:36:1a:67:
         35:0f:79:a7:15:64:48:7b:32:67:41:90:d6:92:27:06:ae:d3:
         4e:fa:c0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----