Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
File:                     BGyntgTsCPb1Sw50iQZUfdN1Z00.mft (raw, json)
Hash identifier:          BkmjiuH9Fiue5eVIDpJsG3hf7gySS2vkSYzC1qv9az0=
Subject key identifier:   1C:61:EC:A1:46:A4:A7:DE:45:31:39:88:A3:CD:E6:92:E5:44:A7:EA
Authority key identifier: 04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
Certificate issuer:       /CN=046ca7b604ec08f6f54b0e748906547dd375674d
Certificate serial:       01962F06D0602AB283B828C509E8296C50CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft
Manifest number:          11AD
Signing time:             Sun 13 Apr 2025 12:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:37 +0000
Files and hashes:         1: BGyntgTsCPb1Sw50iQZUfdN1Z00.crl (hash: Y6OOV2yGfiDdaSJrcVZ2sn3Na067dyeUoJUKi1nzZls=)
                          2: W_EWnDN7S-Lr4HAexwKFCibBunI.roa (hash: Hq7myDcvfhXQUDH03db33GGTXzn+mXDa35j7LIpyLJ4=)
                          3: _h-pD85oM-4QL5S4Ka5s8okAtQk.roa (hash: 0i71BBwnivmIgBhKogySa4VPmpxK93A6N2O06ABsBqc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d0:60:2a:b2:83:b8:28:c5:09:e8:29:6c:50:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=046ca7b604ec08f6f54b0e748906547dd375674d
        Validity
            Not Before: Apr 13 12:01:37 2025 GMT
            Not After : Apr 14 12:01:37 2025 GMT
        Subject: CN=1c61eca146a4a7de45313988a3cde692e544a7ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e7:d6:ec:22:05:ed:d0:94:2e:3a:0d:7c:27:
                    29:58:3f:18:e5:6d:74:48:11:7c:75:f2:25:db:59:
                    00:3c:9a:de:f9:dd:18:49:34:a0:d6:b7:23:3d:eb:
                    cb:3f:d1:c9:c0:97:b1:2d:d7:9d:77:f6:24:7b:f6:
                    78:66:3d:ff:a6:06:a5:37:5d:86:d9:77:10:68:e9:
                    dc:3f:61:4d:4b:46:47:74:98:35:b2:69:fc:92:9f:
                    4e:67:41:e5:ae:a9:29:8b:b1:f4:4f:22:8b:d6:28:
                    38:10:25:8e:4e:f5:5f:aa:98:2f:28:49:a2:9b:3e:
                    4b:4f:8a:01:da:8d:1f:db:de:3a:5d:2f:52:4a:9b:
                    23:38:87:36:37:c9:1f:76:c4:cf:51:47:e6:54:0c:
                    fb:6d:52:4b:e5:a5:48:56:f3:ea:b0:fb:7e:7c:ac:
                    6c:5d:26:be:3f:29:1d:ca:1b:78:99:c5:83:ae:62:
                    b3:16:e6:13:70:0b:58:09:30:d6:d7:55:b0:c2:38:
                    50:08:45:a7:f3:7d:2b:f6:57:e2:be:49:e1:c7:32:
                    d9:f3:72:7a:8f:ce:a8:39:ed:02:e9:f7:63:40:dd:
                    f1:86:01:29:ba:17:17:de:f3:32:d5:7a:6d:4a:0a:
                    05:9e:24:b9:8f:10:dc:f1:27:38:6a:fd:e4:8d:6e:
                    2f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:61:EC:A1:46:A4:A7:DE:45:31:39:88:A3:CD:E6:92:E5:44:A7:EA
            X509v3 Authority Key Identifier:
                keyid:04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:82:1b:f5:52:ad:3c:d1:53:a9:6c:d2:b8:4c:5d:be:31:70:
         19:6f:bc:65:a2:a8:34:be:26:2b:66:e3:c6:56:25:a4:3e:b8:
         07:7c:0b:5d:ea:ff:ad:c8:8f:39:02:22:42:eb:7b:7d:5f:cb:
         fc:11:b1:85:95:4f:d3:c5:1e:98:25:bd:cc:dd:f2:4a:03:01:
         60:8e:23:5d:84:f0:4a:f2:6a:b4:a7:63:92:c5:16:b4:20:c7:
         dc:2a:e5:73:64:94:e6:08:f5:2d:f9:b0:6f:32:c2:81:d9:f9:
         59:5c:e3:04:8e:4b:5b:a6:f5:cc:53:12:10:b9:2b:26:5e:df:
         5e:92:f9:f9:7f:83:52:64:36:11:7b:a3:77:15:db:f7:3c:fe:
         0b:ba:51:50:da:63:d4:da:fa:c3:b0:9a:9e:c1:37:8b:58:c4:
         d8:08:72:86:40:36:fd:d8:af:88:25:50:75:d2:fc:c6:25:aa:
         21:f0:d8:2d:ba:91:74:e8:15:b0:c3:ab:08:66:76:83:49:08:
         55:65:39:06:a3:05:1b:af:5b:32:ff:01:03:ed:4c:c4:1b:d8:
         e5:41:e5:de:fb:6d:0b:e5:a4:b3:10:76:b7:8a:ff:ca:2d:c5:
         07:68:ac:23:3e:9f:f2:88:95:7c:07:73:0d:63:31:27:44:32:
         ad:48:71:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----