Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
File:                     BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft (raw, json)
Hash identifier:          mz9lNmRyxcScTBo4FmYQEC5MT2TIhC3RHw8/8Q7NNMA=
Subject key identifier:   AB:BD:FD:3A:71:E3:58:CD:D5:01:0D:2A:51:56:46:EA:81:87:3D:5A
Authority key identifier: 04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94
Certificate issuer:       /CN=04bedb6154a8795dc4ceefa67a18fedfc6521594
Certificate serial:       01962DF443399C39674392E85160D0B0295A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
Manifest number:          037A
Signing time:             Sun 13 Apr 2025 07:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:44 +0000
Files and hashes:         1: BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl (hash: 3vuV0wJADcxhdtRkXuMPJQ4LzZfUIDP0unX1gBkCNlI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:43:39:9c:39:67:43:92:e8:51:60:d0:b0:29:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04bedb6154a8795dc4ceefa67a18fedfc6521594
        Validity
            Not Before: Apr 13 07:01:44 2025 GMT
            Not After : Apr 14 07:01:44 2025 GMT
        Subject: CN=abbdfd3a71e358cdd5010d2a515646ea81873d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:bd:3c:13:bf:84:fb:3f:56:15:af:a3:81:a7:
                    05:a4:3e:e8:49:f9:91:d9:87:2e:aa:2d:07:35:70:
                    8c:24:5b:81:22:f8:9d:b2:60:47:32:38:9a:7a:af:
                    a0:4b:55:d4:bb:41:38:de:2a:79:ce:40:a2:12:37:
                    7b:ca:ef:8f:a1:50:dd:66:6b:a8:5d:3a:ae:d0:e6:
                    88:0b:a0:b1:4b:ab:c4:4c:b8:6d:0b:95:25:0d:d7:
                    a3:f1:44:10:d7:c9:70:dc:58:4b:16:67:0c:47:ea:
                    bb:fc:b6:8e:f9:89:04:6b:5d:e3:21:d1:38:7c:89:
                    a1:e6:1a:ea:dd:ce:4f:39:ad:e3:1a:ec:a9:3b:64:
                    db:b7:04:8b:a6:8e:66:5b:9f:39:d7:17:10:41:6a:
                    ed:1a:2e:73:2c:8e:e5:90:f7:1b:2d:5f:4c:c4:06:
                    6f:9c:6a:0e:f7:b0:86:fb:aa:75:86:93:9a:c8:54:
                    24:de:b2:11:26:b0:8c:a4:f2:c5:b6:9e:8a:b5:0d:
                    2b:67:14:0c:a3:b5:b8:70:76:9b:0a:d4:02:38:25:
                    57:02:53:d0:c4:d5:03:15:bd:44:d5:75:41:3d:a5:
                    e9:85:23:42:d0:bb:93:79:e8:30:56:af:84:cb:20:
                    7a:b0:a2:28:4c:b9:f7:8d:97:fc:8b:1f:1c:a0:d3:
                    c6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BD:FD:3A:71:E3:58:CD:D5:01:0D:2A:51:56:46:EA:81:87:3D:5A
            X509v3 Authority Key Identifier:
                keyid:04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:28:e3:34:8b:75:4f:ae:a5:9a:20:f3:61:45:a3:f2:d1:29:
         c1:6b:ae:48:a1:df:8d:bd:7d:d1:b4:73:f8:29:bb:ae:06:3e:
         1f:4c:25:ae:51:15:f9:ff:68:fd:04:ee:8b:8c:33:9a:2f:69:
         32:56:24:52:83:92:dd:32:4d:db:c9:67:7d:35:4b:c8:f8:be:
         27:fa:e6:c3:10:70:ed:0a:c1:4f:f6:3b:a1:a3:68:ee:dd:44:
         71:02:61:20:0b:be:4e:13:2b:4f:87:c8:e5:7a:76:fc:a2:8b:
         da:7e:34:2d:e1:d1:89:5a:84:56:bf:8f:35:f1:6c:20:5e:f9:
         43:39:5c:1a:8f:20:87:15:7e:1b:db:33:4a:a8:e3:fa:e6:2a:
         a9:46:f7:6f:6a:a0:9d:1b:ca:ec:f1:e5:49:57:8f:67:c7:80:
         6a:3d:69:bb:ee:5f:6e:e9:6b:fa:b7:9f:7b:43:af:7b:aa:93:
         86:27:54:a8:9c:5a:06:9a:5a:5a:65:14:a3:1d:ca:61:fa:ea:
         af:36:be:bf:c5:36:d8:5c:2c:28:c7:c6:d0:0a:f6:76:81:d2:
         ff:91:2e:2f:31:33:59:bc:65:c1:cc:64:22:3b:ca:76:9a:c6:
         d0:86:c5:7e:da:0f:af:68:96:e0:b8:48:6d:29:12:2b:23:16:
         4d:72:10:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----