Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
File:                     BWAG8qGECQDHU2KBIbP7fsW9iek.mft (raw, json)
Hash identifier:          tIRDehgkYdlmjLhqhzEo0vgamlgrMiRSppdkH6h4ZAU=
Subject key identifier:   4E:A2:24:20:9D:A1:B3:9B:E1:5C:F3:CF:3C:D4:1B:DD:69:C0:C8:CD
Authority key identifier: 05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9
Certificate issuer:       /CN=056006f2a1840900c753628121b3fb7ec5bd89e9
Certificate serial:       01962E9896D50F9B3FEDD1F6FB36E7335CA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft
Manifest number:          0728
Signing time:             Sun 13 Apr 2025 10:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:14 +0000
Files and hashes:         1: BWAG8qGECQDHU2KBIbP7fsW9iek.crl (hash: RB7WDFaIAQhu4HQQxFqQdGFfU/lbyEm4kIN5QtKnDhw=)
                          2: G7hpWPyXuPCdcjaRbCuAbyP7XNA.roa (hash: CuG2DStYKEKyAlh0IJta5/FjSh93nl0CeskY3cbZDZs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:96:d5:0f:9b:3f:ed:d1:f6:fb:36:e7:33:5c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056006f2a1840900c753628121b3fb7ec5bd89e9
        Validity
            Not Before: Apr 13 10:01:14 2025 GMT
            Not After : Apr 14 10:01:14 2025 GMT
        Subject: CN=4ea224209da1b39be15cf3cf3cd41bdd69c0c8cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8a:20:95:f7:5a:1e:ee:62:07:bf:47:e2:4b:
                    40:88:34:3c:60:15:6b:0f:29:4e:42:9d:2f:f4:26:
                    c2:c3:58:8d:a3:d5:df:4e:67:be:fa:f5:b5:b4:c4:
                    f2:e1:93:58:34:df:25:9f:7b:d8:31:78:1e:b8:78:
                    27:82:cb:05:8f:c6:7d:37:50:d3:2a:0a:88:24:47:
                    c7:23:5d:9d:be:e7:9d:0d:fb:ee:44:d6:6e:5f:03:
                    68:30:c3:71:3b:c7:31:f2:a8:7b:0e:d6:3a:6d:a9:
                    36:f8:26:5e:37:23:d9:ba:f8:6f:6f:a5:c7:9b:a9:
                    9b:03:f6:c1:29:33:ff:71:88:4c:73:7c:96:b3:80:
                    b2:39:61:12:c9:91:4d:19:c5:94:0f:20:4c:43:8c:
                    e6:aa:fd:9f:0a:10:08:35:73:5e:8e:61:c6:35:a6:
                    2b:26:7c:08:8c:67:e6:5b:a7:09:72:1a:00:9c:cc:
                    a0:b2:29:6f:91:3e:6f:f4:51:6f:42:6f:e9:64:5a:
                    f1:94:9f:0a:e4:7d:44:dc:a4:be:32:29:04:68:a0:
                    18:3e:f4:80:24:41:4c:0d:f3:35:f7:70:8b:1e:df:
                    16:76:7a:7b:19:c0:8e:17:7d:3f:68:95:ec:52:9d:
                    60:b5:fa:55:5e:28:93:29:c7:84:78:7e:80:1b:66:
                    e0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:A2:24:20:9D:A1:B3:9B:E1:5C:F3:CF:3C:D4:1B:DD:69:C0:C8:CD
            X509v3 Authority Key Identifier:
                keyid:05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:b3:57:06:22:58:31:61:1c:29:39:5e:3a:ac:d4:2f:c7:20:
         b0:f4:70:bb:27:6d:0a:89:e2:c5:76:78:4b:09:9e:fa:17:f9:
         17:a2:4e:13:29:c0:a7:dc:df:2a:1b:0f:50:d6:4f:9c:00:4c:
         8a:47:a9:ce:47:af:fa:ef:d9:b6:11:20:b7:01:2b:3c:99:63:
         bd:ee:09:07:2b:7d:46:b0:02:e4:7a:c7:cc:6c:85:ad:b5:39:
         00:2c:45:98:44:4f:c5:be:13:6f:72:9b:f5:26:ad:9e:f4:6b:
         d6:10:28:e0:4c:0a:dd:30:93:ed:72:50:1c:2e:98:2b:46:00:
         68:40:ef:c4:16:cd:29:46:83:ad:a9:0a:77:fa:ef:79:d0:9c:
         95:e0:d5:58:50:1d:57:bf:e2:0f:1e:e3:66:b6:04:5b:dd:7e:
         31:25:16:bc:2b:6e:6f:05:8f:8a:38:a0:e2:3e:01:a7:6a:af:
         c4:de:b6:9d:02:cb:ce:16:16:d5:3a:4b:32:d3:c8:12:ca:3f:
         80:3c:77:63:15:eb:49:f5:76:65:17:fd:27:89:ef:6b:42:93:
         cc:b7:62:de:e4:08:45:ce:2d:b5:31:03:3f:a4:53:01:30:c1:
         e9:5d:b0:0a:d4:32:c4:55:ad:a8:4b:c5:d3:4f:39:8c:b7:d9:
         19:e1:5b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----