Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
File:                     BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft (raw, json)
Hash identifier:          WS0pzHwKcjDfCeUDmZQ/jI6yGsPD+qqGC920GaRUDs0=
Subject key identifier:   93:16:30:F9:08:4C:D2:69:BE:2D:23:B2:A4:81:02:E0:60:13:CB:FD
Authority key identifier: 04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
Certificate issuer:       /CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Certificate serial:       01962F3D8CFB20B292E028B3A38795451FB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:24 +0000
Files and hashes:         1: BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl (hash: 9iLB7EdHuKDZJUs7vMYthbu/39phXyllfASHOCQ7A50=)
                          2: N9wZb19u6uDl2jmJsSrj5tJBTrs.roa (hash: 0C5L52QJ9EePN5vLiQx5L6BEy17vjwGiBKVGlRWVCRo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:8c:fb:20:b2:92:e0:28:b3:a3:87:95:45:1f:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
        Validity
            Not Before: Apr 13 13:01:24 2025 GMT
            Not After : Apr 14 13:01:24 2025 GMT
        Subject: CN=931630f9084cd269be2d23b2a48102e06013cbfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7a:38:69:7e:86:38:ba:0c:fd:15:48:d6:6f:
                    7f:a9:6b:01:51:c2:ae:66:94:16:92:98:ff:fe:77:
                    7d:16:a9:53:55:c6:78:2c:20:0d:c0:3d:5a:c1:d0:
                    1d:5c:a7:1d:a8:8a:b0:69:50:04:70:80:6b:32:5d:
                    f0:88:3f:fe:41:47:25:2f:7d:a9:47:d6:85:36:3b:
                    c7:9f:fa:d7:33:15:e7:b5:4d:a8:ae:5e:d8:7b:47:
                    ed:e6:e8:0a:c3:13:5d:50:bf:da:10:79:14:a3:d0:
                    e4:cd:56:39:ce:ef:07:21:01:35:18:18:81:3e:3b:
                    4e:7f:35:9a:a8:31:61:8b:e9:dc:70:fa:9b:c3:08:
                    d8:b3:cf:23:be:91:f5:70:ad:b2:09:bb:08:38:8a:
                    2c:c1:e1:fa:d7:c7:57:f4:ed:a8:cc:57:89:2e:91:
                    ae:cd:57:9a:63:7b:0c:6a:41:dc:12:d3:bb:23:e5:
                    2a:9a:92:c1:5a:56:d0:61:43:60:dc:37:1d:a0:6e:
                    c2:89:78:cb:ba:37:ad:38:1c:55:24:d6:b0:86:be:
                    4d:05:03:60:fc:a0:bf:6d:7a:6d:f5:44:ee:65:6e:
                    7b:66:8e:39:6a:d8:2c:13:da:b1:10:20:97:f8:87:
                    81:82:8d:f9:ff:6d:8e:2b:9b:34:e6:23:36:0e:d8:
                    fd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:16:30:F9:08:4C:D2:69:BE:2D:23:B2:A4:81:02:E0:60:13:CB:FD
            X509v3 Authority Key Identifier:
                keyid:04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:a0:16:ca:c7:29:d4:41:38:fa:ea:8b:d3:5d:f3:3f:44:78:
         9b:e1:f2:db:93:4c:27:35:95:66:a3:bd:1a:cd:53:9c:a9:63:
         00:47:60:be:dc:91:e4:94:87:2e:51:18:1a:8d:2f:f5:41:06:
         ad:9e:7c:42:2f:bd:9b:54:83:46:ad:67:b7:a1:a1:21:30:58:
         06:60:72:f6:6a:e2:92:ca:dd:8d:32:ff:a7:1d:19:5b:80:a1:
         58:d8:56:b0:90:5b:28:48:9b:1b:35:3b:12:11:e0:18:7d:c2:
         80:4a:f3:36:bc:a4:f5:50:2d:c9:18:f5:0a:60:4e:6d:8c:36:
         0a:bc:86:9f:75:9c:5e:c2:dd:fa:f9:db:80:11:37:e7:42:17:
         4e:85:df:15:ea:68:4e:3c:6a:45:6a:0c:14:55:fc:f0:ee:79:
         01:b4:d6:87:69:d2:bb:86:fc:8e:9d:59:de:93:51:25:ea:4a:
         7c:a2:b6:6f:e0:c9:4e:97:e8:1b:a4:27:6d:2d:17:65:89:a0:
         42:06:69:73:78:d3:d6:ee:a2:6c:69:44:ea:3c:75:cb:92:76:
         fe:e9:1d:ad:cd:f5:8f:4a:6d:50:6a:84:d2:fb:45:01:eb:08:
         c1:9f:8b:11:6b:c9:9d:db:fe:b3:fa:3a:df:48:ae:e4:66:a6:
         e2:40:fa:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----