Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
File:                     BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft (raw, json)
Hash identifier:          DZYe6PDIrk1MK/bas8vDQkKLKLcuBmoRFLjLjTlRDFU=
Subject key identifier:   30:5B:80:1B:B6:7A:9E:6F:00:CC:80:C5:44:98:64:40:66:2C:BB:9C
Authority key identifier: 05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
Certificate issuer:       /CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Certificate serial:       01962E61A441562DEB93CD393BA998E806CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 09:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:13 +0000
Files and hashes:         1: AygjfPSd-BYn9y5589qLTfq5Rzs.roa (hash: Xsk4y1Xslni0owNFlDmKiaazs1AHnjaqup5PkFi/QvQ=)
                          2: BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl (hash: bghCavzjiddYWIuaYiR5uCF7pN3Fj1m4YCxT3p4Ep54=)
                          3: _R70hvmCDErcQolme5Vd42Vi6c8.roa (hash: KbGa/eiRh/5D5R1QaKcGjt0GDJJLwcDE+DkGHax+lFc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a4:41:56:2d:eb:93:cd:39:3b:a9:98:e8:06:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
        Validity
            Not Before: Apr 13 09:01:13 2025 GMT
            Not After : Apr 14 09:01:13 2025 GMT
        Subject: CN=305b801bb67a9e6f00cc80c544986440662cbb9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a6:ce:43:0b:da:0e:72:93:99:c0:04:db:d2:
                    27:02:53:91:8a:b4:64:27:a5:5b:19:5a:ea:15:1d:
                    ee:ab:12:2a:87:66:b1:c6:ea:ca:96:39:8f:57:08:
                    43:2f:98:b5:a4:fb:56:54:1c:fe:44:fb:38:87:b1:
                    18:6d:ca:c2:b9:fd:88:9f:f2:a2:2b:1b:eb:7a:93:
                    98:f1:dc:0d:5e:39:f2:31:5f:24:74:19:93:f9:a3:
                    a7:38:16:13:49:3f:85:89:69:dd:d7:c9:b4:a6:5a:
                    ad:e9:f8:6b:98:09:78:38:9e:f7:5f:1c:82:94:bd:
                    8b:be:af:c0:e1:55:91:eb:6b:8b:67:33:a8:a8:7d:
                    62:92:b3:bf:f0:12:39:21:4d:0f:e9:df:d5:da:0c:
                    f0:ba:b6:af:b3:ad:c4:bf:a7:4f:50:23:c8:c7:7a:
                    ee:78:63:17:64:20:ba:3f:f9:77:97:93:cf:0c:4a:
                    8d:44:56:5f:c6:ab:54:59:72:64:60:8c:ec:8d:44:
                    92:92:fb:5a:c1:06:20:a4:86:21:26:84:6e:78:20:
                    f9:4f:f8:e8:5e:54:e4:38:d0:13:ed:f2:cc:aa:57:
                    95:54:08:2b:c2:9d:c4:10:27:91:0c:88:70:18:5c:
                    ef:cf:f7:c5:45:36:53:38:90:08:8d:f9:14:7e:4b:
                    dc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5B:80:1B:B6:7A:9E:6F:00:CC:80:C5:44:98:64:40:66:2C:BB:9C
            X509v3 Authority Key Identifier:
                keyid:05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:89:cf:4e:c1:48:29:6a:18:05:e3:32:8c:e1:41:7b:48:17:
         96:26:a6:b3:1b:85:f2:d2:1e:88:c6:40:db:92:bd:a8:2f:48:
         ff:ef:b6:10:d5:cf:3e:c6:78:74:62:36:fe:eb:e3:90:cf:9b:
         f7:e6:1e:3c:ef:21:ed:4e:80:2c:8f:e6:32:88:4e:eb:d0:c1:
         01:b6:4e:0e:0f:83:db:2a:90:92:6c:47:dd:68:45:14:6f:a3:
         3d:2f:bc:86:42:45:18:6a:7f:f1:ba:3d:3b:6b:c6:10:c5:c8:
         eb:c6:32:1f:52:b7:b6:db:ae:26:29:fb:79:a6:5b:e6:62:c0:
         88:1d:1b:d9:28:3f:e8:43:5e:b3:61:67:80:71:cd:3e:df:87:
         6b:33:ab:53:2e:43:45:af:88:54:55:a2:f2:fe:97:de:e1:af:
         f0:88:0e:26:5b:78:0d:b0:6a:08:7e:3c:e8:f7:e7:90:27:2e:
         f9:76:f5:1d:da:1d:82:99:97:3c:cc:d0:8b:aa:84:15:c6:24:
         33:03:0d:85:89:28:40:2f:5b:79:63:f2:05:49:fe:e1:28:4d:
         00:c7:c7:04:88:39:11:83:5d:2a:75:54:5f:8a:ea:36:9b:df:
         f3:ca:72:91:d0:eb:4b:72:c5:b4:9c:82:08:82:93:c1:38:a0:
         a0:fe:e2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----