Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
File:                     BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft (raw, json)
Hash identifier:          if3emNuz0OmarhD7ZPb9Z+BJdUoY2/LgD8llPKN4tBg=
Subject key identifier:   EE:83:29:E7:24:F9:A9:67:A6:69:6C:A7:4E:73:8E:D5:9B:86:2F:6D
Authority key identifier: 04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88
Certificate issuer:       /CN=04345b7638de9d2d2966527cb363e37c31d4a188
Certificate serial:       01962F7433DF3DD1151FE0198524493D05C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft
Manifest number:          041E
Signing time:             Sun 13 Apr 2025 14:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:06 +0000
Files and hashes:         1: 1-XQiidk5Ct3ju0BqANY0WBDUrWI.roa (hash: hKawH5abgtjD0UmUaEbKfYzMnvjfzoeylgKFbpggieE=)
                          2: BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl (hash: 7dh0Zy+K8Apa7b2D78ADU4ZDp2RR8mTw1vu48WXECD0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:33:df:3d:d1:15:1f:e0:19:85:24:49:3d:05:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04345b7638de9d2d2966527cb363e37c31d4a188
        Validity
            Not Before: Apr 13 14:01:06 2025 GMT
            Not After : Apr 14 14:01:06 2025 GMT
        Subject: CN=ee8329e724f9a967a6696ca74e738ed59b862f6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a7:8a:d6:bc:a8:13:75:6c:7e:ca:8c:b0:52:
                    ae:17:8f:7a:2f:e5:b0:77:d7:8c:1f:fe:9d:02:03:
                    d0:92:ad:ed:4a:33:4a:f8:00:19:23:aa:72:71:8c:
                    16:ab:10:3e:c3:7a:af:54:0f:74:c8:ed:01:99:bf:
                    a9:84:1e:cb:82:93:26:4a:59:1a:77:56:f2:9e:ee:
                    4d:ff:ec:47:b3:15:18:a9:9a:ad:ec:25:bf:ac:6d:
                    81:6e:b7:f6:a5:02:f9:1d:79:30:31:7f:c6:59:72:
                    9a:6a:47:3d:2b:1a:ef:a8:78:f0:44:7c:34:11:0a:
                    c1:40:1d:2c:95:ec:b0:16:36:5a:73:c7:66:9c:0d:
                    cd:85:9f:46:29:a7:98:ab:60:8c:98:61:e4:c6:31:
                    03:80:15:2f:ec:57:09:13:ab:2a:58:ce:47:16:1a:
                    95:26:88:8b:26:1d:44:89:46:e2:17:e1:2f:b6:be:
                    82:68:8c:29:ec:9c:6a:8c:6c:02:d3:98:61:cc:6f:
                    07:da:72:d6:17:5e:df:a6:96:f6:03:db:ba:bd:09:
                    2e:81:27:35:84:ab:ca:15:f8:c8:4d:25:ea:5b:b4:
                    04:e3:6b:be:52:1f:8b:2d:eb:11:74:3e:03:b6:0d:
                    fb:64:16:63:07:34:b9:df:72:66:01:73:42:00:0e:
                    05:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:83:29:E7:24:F9:A9:67:A6:69:6C:A7:4E:73:8E:D5:9B:86:2F:6D
            X509v3 Authority Key Identifier:
                keyid:04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:43:06:c9:16:82:ff:ee:9e:09:f5:7e:5c:a1:e4:5b:1e:1d:
         82:c9:c5:00:16:14:e0:65:1d:1b:9e:61:bf:f5:06:0b:72:5c:
         62:69:6c:12:0a:27:e2:ae:f2:c4:6e:e6:50:aa:f3:80:51:e0:
         be:56:25:5a:f2:b4:07:17:cd:4c:63:8f:7e:3b:d0:47:c3:d7:
         a7:16:b2:f8:ab:5d:74:3d:79:34:1a:e5:b2:3f:87:0b:15:61:
         85:58:01:fb:b8:c7:c3:b1:57:59:f0:49:d8:a8:6c:3b:e6:37:
         1a:39:7d:bf:80:66:00:e1:32:4c:f3:bb:fa:08:0e:cb:97:27:
         3f:9f:0e:9b:53:1b:04:60:5d:94:9e:55:6c:4b:e3:69:f7:71:
         c0:20:02:0c:4a:84:f8:73:03:a8:b8:7a:7a:85:e8:73:7c:f5:
         b8:2e:40:16:71:69:b1:7c:2d:d9:ef:c2:dc:ce:0a:30:80:9f:
         53:6e:fe:34:93:b8:ec:2b:f4:0f:44:a0:af:f3:09:c1:23:b9:
         1d:f3:4b:e6:ec:2a:34:77:d8:18:a3:18:75:6b:f9:b8:a6:fb:
         9b:56:67:62:88:a9:6a:78:bd:07:48:fb:39:da:0d:1e:aa:53:
         e9:d2:da:6a:0c:f2:40:66:1e:ef:75:64:23:43:90:8e:05:8e:
         68:3d:c6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----