Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
File:                     BfxVV0h24Nb6voqXkcwNNmWv-OY.mft (raw, json)
Hash identifier:          YmK8+aJZg2W4XKsrr7ClCVo3PcV5VQDJ+D1tYLNqq0k=
Subject key identifier:   D1:D9:E3:09:45:9B:1F:CE:95:0D:77:12:25:F8:A6:C9:A1:84:F7:0A
Authority key identifier: 05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6
Certificate issuer:       /CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
Certificate serial:       01962E996109F5DCD8AAF8E73CD67C6DC5C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft
Manifest number:          05B9
Signing time:             Sun 13 Apr 2025 10:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:05 +0000
Files and hashes:         1: BfxVV0h24Nb6voqXkcwNNmWv-OY.crl (hash: FA4PQuwUEzTr/SsjHalLkoOpp1jo4W2k8CTrd4069S0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:61:09:f5:dc:d8:aa:f8:e7:3c:d6:7c:6d:c5:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6
        Validity
            Not Before: Apr 13 10:02:05 2025 GMT
            Not After : Apr 14 10:02:05 2025 GMT
        Subject: CN=d1d9e309459b1fce950d771225f8a6c9a184f70a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:26:81:36:90:61:e4:1f:33:51:48:bc:7a:cc:
                    2d:7b:24:3a:57:ad:9a:ff:32:71:f6:51:53:1a:ba:
                    37:58:33:97:01:e7:37:f1:4e:bf:ad:fa:b7:b8:21:
                    04:9f:4e:9e:c0:01:bd:6e:3d:12:0d:e5:d3:7e:8f:
                    a4:ba:1a:9c:a5:92:3a:3c:9c:02:0a:2f:1e:27:ba:
                    2a:55:93:77:af:37:97:b0:30:a0:50:05:89:8d:78:
                    41:eb:09:a7:c7:9b:db:92:66:4a:8a:0d:0e:2d:87:
                    39:fa:41:58:eb:3d:97:3a:f0:8c:bc:88:7c:ae:b9:
                    0a:47:16:e6:69:b1:67:17:72:37:4b:37:e8:1c:7c:
                    86:c1:03:14:99:5c:8e:ce:ad:d8:98:33:e0:53:da:
                    5f:a4:ad:ef:45:23:a5:2c:2d:a1:45:0e:c8:18:0d:
                    95:96:2f:d3:85:3f:90:72:b3:1a:37:86:45:57:d8:
                    ec:44:b9:47:72:00:88:7f:70:ee:ef:d0:69:23:01:
                    2c:26:53:81:6d:de:b3:87:99:32:22:c2:77:f1:0d:
                    91:e0:25:eb:22:b7:a6:33:6a:9d:c6:ec:3f:71:da:
                    dc:07:82:1f:0d:87:8e:4e:9f:5b:71:60:ec:f4:15:
                    39:21:81:eb:b4:0c:ae:57:71:d5:18:f7:b8:e9:a8:
                    81:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D9:E3:09:45:9B:1F:CE:95:0D:77:12:25:F8:A6:C9:A1:84:F7:0A
            X509v3 Authority Key Identifier:
                keyid:05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:3b:3f:7b:f6:6f:1d:da:fc:b7:9f:6a:31:d2:53:b0:ea:5d:
         f2:97:14:26:89:26:fb:a7:5f:ac:5c:80:d8:4c:a0:5a:39:ab:
         07:db:40:a5:bf:a7:98:09:e8:20:1f:0b:18:44:6e:f6:03:90:
         c7:ff:82:eb:24:48:3f:d9:dc:24:23:c8:a9:6a:34:c3:d2:6f:
         20:dd:1b:7d:1a:af:d5:eb:83:59:a2:3e:60:09:ee:a5:0c:08:
         79:53:9c:41:c0:b7:a9:39:6a:d9:fe:58:44:7f:bf:05:f8:6a:
         9d:48:00:41:ea:42:95:07:47:a2:7f:94:2f:83:b8:18:6d:ad:
         22:1f:90:2f:e6:bd:1a:5e:04:b4:4d:0a:7c:fe:fc:2c:c0:c1:
         71:77:12:a5:ed:2d:aa:55:92:f1:61:6a:71:d5:6e:1d:f9:a7:
         bd:75:fd:66:0b:ce:c6:b3:f5:32:95:36:b8:27:75:92:44:e6:
         84:20:a8:de:99:31:af:43:b8:8c:08:ca:92:76:90:d6:7a:c4:
         b2:77:b3:bf:57:91:27:1b:10:3d:84:a8:5e:76:c5:85:12:db:
         6e:68:4b:2c:16:1c:37:75:eb:66:3b:42:c5:fc:77:74:aa:6e:
         0f:6e:d7:30:07:61:8b:be:71:63:6c:dd:38:8d:5e:bc:41:f2:
         90:05:9f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----