Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
File:                     BRYHqGja9IRiRfPIu_nr52mCmtk.mft (raw, json)
Hash identifier:          88zLl1f9OCBgDig19JZz/RjFDX/eLs40cuC1JendhQ0=
Subject key identifier:   C2:81:8E:C9:1E:BA:ED:E4:15:5F:2B:26:ED:AA:8A:38:D1:15:1E:07
Authority key identifier: 05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9
Certificate issuer:       /CN=051607a868daf4846245f3c8bbf9ebe769829ad9
Certificate serial:       01962F06FEB19F1800E3925F7AF3A9DC3ADA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft
Manifest number:          01BB
Signing time:             Sun 13 Apr 2025 12:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:49 +0000
Files and hashes:         1: BRYHqGja9IRiRfPIu_nr52mCmtk.crl (hash: 21jX2ACtKx4Y2mBOFS9toJ5cJv4BijL4H1/neid/TCs=)
                          2: Zeihe15xeOf_8eph8Lmd7nVS6QU.roa (hash: JQM/oL1wyAlCh94BhjS67lo8ewncZfqlX/jO3PDDKkM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fe:b1:9f:18:00:e3:92:5f:7a:f3:a9:dc:3a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=051607a868daf4846245f3c8bbf9ebe769829ad9
        Validity
            Not Before: Apr 13 12:01:49 2025 GMT
            Not After : Apr 14 12:01:49 2025 GMT
        Subject: CN=c2818ec91ebaede4155f2b26edaa8a38d1151e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8a:30:1b:ea:fe:c9:19:14:69:e7:e1:f6:37:
                    be:f6:f8:34:20:75:4b:42:bd:0b:22:1d:9b:4a:d2:
                    e1:5f:e3:52:5d:e4:f0:3d:f9:dd:14:71:6b:d7:67:
                    eb:a9:2f:16:a8:99:c8:f5:f4:2d:ec:20:0e:09:f9:
                    d6:93:85:a9:c6:42:89:1e:fa:12:ee:93:56:35:c0:
                    63:34:37:56:35:1d:00:fa:da:13:3b:14:d7:c9:7b:
                    b9:c4:22:17:c7:43:13:64:e8:44:5c:a8:c8:3d:67:
                    ad:04:84:43:0a:f3:4f:56:e4:d5:d4:8a:e6:77:fa:
                    43:b5:ad:a2:3d:57:4c:64:e7:fe:8c:20:c5:04:a0:
                    39:50:4f:c9:8a:48:7f:84:69:37:0e:a1:ef:af:0f:
                    f6:45:17:fa:01:cd:a3:a4:19:c5:8b:29:00:23:55:
                    d9:db:93:43:99:94:97:d2:2b:38:2f:26:f5:dc:4b:
                    31:88:60:f3:6b:35:12:b0:d7:81:ee:2d:1e:d8:4a:
                    54:17:77:27:dc:26:cd:45:73:a5:42:cb:84:62:84:
                    27:57:25:ff:e3:9a:78:d0:83:a5:9e:b7:85:cd:68:
                    9d:c1:be:98:61:5f:d0:03:3e:99:bf:b4:58:d9:18:
                    21:a3:19:a2:28:52:32:c4:e8:d9:6d:85:b0:f7:b2:
                    50:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:81:8E:C9:1E:BA:ED:E4:15:5F:2B:26:ED:AA:8A:38:D1:15:1E:07
            X509v3 Authority Key Identifier:
                keyid:05:16:07:A8:68:DA:F4:84:62:45:F3:C8:BB:F9:EB:E7:69:82:9A:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRYHqGja9IRiRfPIu_nr52mCmtk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a70710-fdd7-4146-9821-72cfdaa959a2/1/BRYHqGja9IRiRfPIu_nr52mCmtk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:b6:d5:57:20:0b:da:1e:65:26:7f:ab:a1:f6:87:2e:7e:cc:
         3c:21:6e:78:2e:85:87:7d:72:6c:2f:f0:5b:0d:94:b2:75:ed:
         90:67:12:63:2b:21:ef:10:0e:03:53:0e:17:84:35:72:97:28:
         9e:f3:4b:71:a2:81:06:32:52:a1:09:33:ff:ca:a5:fa:e8:51:
         3c:98:1b:14:1f:86:ed:5a:b3:d5:c7:c6:7b:95:49:45:f5:c7:
         f3:6e:fb:ad:5d:ea:36:34:1a:67:ad:8a:9a:33:ae:d2:1b:0f:
         b4:cf:96:35:1f:46:b4:85:a0:50:97:df:9f:fe:d8:c1:4f:a8:
         dd:79:10:29:e9:f8:25:69:32:02:61:2b:aa:2f:e1:61:40:59:
         96:41:ff:40:59:33:db:da:f3:c4:aa:b7:e1:1f:8b:90:dd:ca:
         c3:65:33:99:f8:8b:0d:bf:85:0c:dd:4c:4c:0c:e2:3c:0f:08:
         9f:38:44:2e:a4:24:42:5d:46:ea:a9:fb:33:8b:71:fd:4e:6a:
         f4:74:2a:f1:71:53:b2:0f:b5:17:2f:c8:eb:24:ae:9a:55:7b:
         68:2a:e7:c2:6d:16:e6:b9:52:6a:d3:1f:f1:b7:70:f3:eb:2e:
         60:01:8e:98:cc:64:ba:88:32:20:b9:e1:12:06:bc:81:8a:db:
         4f:3b:8a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----