Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
File:                     BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft (raw, json)
Hash identifier:          fZhZR2fp1bDCNiR6aWBjoSOSrpSBz+t+QPhoSyfwAkg=
Subject key identifier:   6A:C7:E9:78:EC:9D:63:18:DE:EF:F3:27:6A:11:D2:E9:9C:9C:8F:A0
Authority key identifier: 04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C
Certificate issuer:       /CN=044aacab9a49e143de68979ad156b42dabddde8c
Certificate serial:       01962F74F8655066E0404108B23BB59CD5BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 14:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:56 +0000
Files and hashes:         1: BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl (hash: OfCcRT1TiUBBuZGSjNLloGkjx0ORFtbgJV4JWi++tEM=)
                          2: hXYgFaLhg1h4smB81OExsZ5kDYA.roa (hash: J1LdPvY1o2Z/PcEpdVjEoKRtwcTpNQB0rwhpVoUBM7k=)
                          3: xNMIWy2dS-kAK1ke_Y9FCAMH0bc.roa (hash: Ms6l/F8PW5KZFppFyiKlVq4OI4pGZuAHpYocAWIKp4U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:f8:65:50:66:e0:40:41:08:b2:3b:b5:9c:d5:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044aacab9a49e143de68979ad156b42dabddde8c
        Validity
            Not Before: Apr 13 14:01:56 2025 GMT
            Not After : Apr 14 14:01:56 2025 GMT
        Subject: CN=6ac7e978ec9d6318deeff3276a11d2e99c9c8fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:99:f5:a5:74:34:e1:f7:7c:a6:c3:d8:18:66:
                    a6:fb:ce:66:09:85:3d:0c:21:a2:4c:7c:c7:50:7c:
                    c8:b6:2d:39:67:93:a3:43:4e:a0:00:41:8e:67:fb:
                    53:c3:7f:0b:ae:97:45:0a:5a:67:a9:44:44:d5:c4:
                    38:0f:c8:ed:e9:c4:18:d9:db:79:b7:21:44:04:20:
                    ca:07:04:5e:c8:81:c4:a6:7c:20:53:3f:f8:04:93:
                    b8:95:13:b7:f3:b2:29:52:0f:ab:6b:b3:4d:c9:9b:
                    75:54:96:83:b9:41:4e:2f:f2:db:96:73:b4:29:1d:
                    e2:4c:9b:d7:4f:0b:33:2b:9d:d8:95:8f:f0:79:3d:
                    58:2b:02:a8:10:02:c2:b4:6a:aa:c0:74:37:53:1f:
                    f7:90:e9:23:9d:ee:58:09:2b:1e:ac:39:d1:a2:b9:
                    10:5f:af:96:2c:a5:87:b2:f2:a9:e6:95:09:b6:fa:
                    ea:e4:4f:77:6d:82:38:95:4b:b6:78:ca:3f:70:7a:
                    84:9e:d8:4e:97:10:c2:49:56:c8:74:99:45:72:eb:
                    c8:75:b5:db:dc:dd:f5:38:c7:30:48:fa:01:bd:47:
                    99:ef:59:b2:5b:cb:0e:24:27:a0:83:69:e8:65:62:
                    eb:15:a7:df:a0:6b:c8:e5:fd:d6:e4:96:a4:12:e6:
                    fe:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C7:E9:78:EC:9D:63:18:DE:EF:F3:27:6A:11:D2:E9:9C:9C:8F:A0
            X509v3 Authority Key Identifier:
                keyid:04:4A:AC:AB:9A:49:E1:43:DE:68:97:9A:D1:56:B4:2D:AB:DD:DE:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEqsq5pJ4UPeaJea0Va0Lavd3ow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/86a74e-4db8-4fe9-9802-3bb92687602c/1/BEqsq5pJ4UPeaJea0Va0Lavd3ow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:31:1c:b2:1e:ed:ac:f7:90:9a:33:55:e9:67:e7:74:77:f8:
         4e:c8:61:6a:70:87:37:22:7e:0c:72:23:a3:1d:59:4c:ee:a4:
         ea:ce:fd:5d:13:46:a0:23:91:30:24:5a:bd:a6:21:a2:e1:c9:
         a2:50:a1:3c:34:05:7e:44:40:42:72:2e:66:5b:e1:f3:43:5e:
         d4:85:ff:fa:65:d6:0a:35:61:2d:72:a5:03:11:a7:3c:61:4f:
         bf:90:51:6e:d3:3e:0f:b9:a4:e6:65:67:85:e6:80:22:39:e8:
         62:d2:c2:10:a5:33:8c:22:6c:21:1c:eb:b6:6b:e7:ad:25:d1:
         6c:1e:ff:c0:12:60:78:68:1a:e2:59:85:48:43:61:4b:6c:5f:
         5d:f4:e2:65:a7:91:73:76:e1:e6:29:7f:9d:9f:3c:d3:81:80:
         56:43:1e:20:65:c6:94:a4:2b:83:71:4f:28:b2:03:a5:50:bd:
         75:54:96:3b:fc:cf:ed:68:11:43:f3:7c:96:57:ed:60:f2:64:
         98:1c:de:7c:98:fb:16:f5:52:6f:70:d0:9d:0e:88:cf:7e:fd:
         8c:98:e7:1a:e8:52:11:f2:e5:20:5a:5f:40:06:69:22:fe:ea:
         6c:37:37:cc:1b:0a:a7:5e:f9:8d:3c:37:37:6a:cd:03:40:dc:
         4a:e2:0a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----