Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
File:                     BYgfNX6maA3eUqKpv7u27UOF2Nk.mft (raw, json)
Hash identifier:          2usE9Ozh0UGU2UXR0SRy3DvEnvUosjCIb/Z+c2ia3RM=
Subject key identifier:   C3:98:F1:0E:C0:F0:49:C4:A4:9B:24:EF:F4:8D:CD:2B:AC:C7:9A:F4
Authority key identifier: 05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
Certificate issuer:       /CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Certificate serial:       01962ECF745C1C0C6F5FD9A213203A4B2690
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
Manifest number:          141F
Signing time:             Sun 13 Apr 2025 11:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:09 +0000
Files and hashes:         1: BYgfNX6maA3eUqKpv7u27UOF2Nk.crl (hash: MvZ5kAHN33CtA/RT8G4GIJdJIg7bb74BlSGiA9aPX5U=)
                          2: J4NELhXbzsP0O-fo9Zwk6eyKSHs.roa (hash: PonpGKcr3QXOrmCtfTF4Hg7UZOzqXswPkTn+XjDFr7I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:74:5c:1c:0c:6f:5f:d9:a2:13:20:3a:4b:26:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
        Validity
            Not Before: Apr 13 11:01:09 2025 GMT
            Not After : Apr 14 11:01:09 2025 GMT
        Subject: CN=c398f10ec0f049c4a49b24eff48dcd2bacc79af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c7:07:45:5b:c7:70:c0:84:bf:94:8f:43:ca:
                    1c:d8:fe:cf:31:62:43:a0:dc:fd:8a:95:81:cd:ca:
                    03:b8:7a:58:83:68:5e:02:09:8c:6c:82:05:c8:25:
                    a6:ce:9d:31:c4:33:dd:2f:c6:ed:e3:b6:b4:24:2d:
                    a3:ff:6a:ed:ca:fd:67:ce:2e:6b:23:b7:74:e9:6c:
                    5a:e0:62:35:4b:30:8f:93:6e:db:da:2d:34:27:20:
                    f4:fd:69:cb:bd:c0:2c:5b:3c:38:6e:71:70:fe:63:
                    71:c9:70:58:a2:75:07:a4:95:cf:3e:00:ed:16:69:
                    75:5f:54:1a:4f:31:8a:19:d9:9c:c0:f1:05:46:11:
                    be:1d:d2:0b:f9:6c:20:ff:4a:0c:6c:46:9e:95:b4:
                    c1:ea:ae:6f:03:c7:c7:ed:1a:36:09:19:a8:85:f4:
                    2e:93:b3:ec:75:73:72:89:a7:2b:76:52:04:07:14:
                    2b:1a:2c:04:24:0f:50:41:47:15:13:8c:b6:58:d9:
                    6c:aa:9a:12:73:27:07:59:a8:28:ae:d6:55:f5:b3:
                    43:de:6c:96:fc:47:03:1c:bd:30:54:0c:a8:5b:7e:
                    66:fd:e5:63:42:ca:e8:de:5c:02:e3:ae:2b:94:d7:
                    1d:32:a1:39:d2:98:b5:4d:94:d3:ce:f0:1b:26:c4:
                    2a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:98:F1:0E:C0:F0:49:C4:A4:9B:24:EF:F4:8D:CD:2B:AC:C7:9A:F4
            X509v3 Authority Key Identifier:
                keyid:05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:0c:30:27:df:81:dd:88:90:f9:ee:04:d1:36:d8:89:ca:e9:
         44:b7:0c:a6:65:00:80:5b:4d:3b:8b:0e:85:9f:b9:47:76:cd:
         db:2a:92:80:f9:46:54:40:66:93:69:25:98:36:c9:f7:73:37:
         c0:a2:fc:dc:e2:9f:c5:c9:96:69:07:71:22:6d:05:90:2f:4e:
         33:50:9f:1a:68:d0:4b:05:92:f1:3d:e2:87:e1:14:dc:2e:ef:
         d3:dd:ba:f9:37:39:9b:94:23:cd:ad:ed:10:a4:9d:3f:72:c3:
         d2:7b:2f:c9:9b:d2:fc:a9:c9:27:24:a1:be:1f:b4:c9:44:c2:
         4e:5a:e5:60:76:5e:67:66:c0:8f:f5:99:a3:fc:c8:41:98:8a:
         e0:a0:46:8b:a6:1b:78:48:f9:b4:9f:f6:28:da:c9:f1:68:e9:
         ff:72:d2:0a:f1:af:1a:8d:4c:d3:49:fc:88:05:4a:57:c1:ca:
         13:62:66:28:7b:f4:eb:a3:0c:a3:38:6c:55:5d:d7:36:2e:88:
         35:e1:77:3e:03:4c:b5:18:e6:03:a6:df:6c:6d:a7:7e:68:a3:
         56:83:66:7e:1a:40:a6:8a:fa:e0:4a:c1:df:06:5d:b7:58:e2:
         e9:37:ee:9f:64:f2:3b:ef:91:33:2b:68:00:4a:2c:ce:27:bc:
         b4:16:71:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----