Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
File:                     BGelYhGyHprHzcj7Y58xCpLCEEw.mft (raw, json)
Hash identifier:          0vQGO8SoINAOzT2/4lSLW5DjyrVPC77h8Q/BzQxLuEQ=
Subject key identifier:   38:7D:F9:0C:B4:07:F6:81:7A:23:08:4E:50:84:A2:31:EB:62:55:E4
Authority key identifier: 04:67:A5:62:11:B2:1E:9A:C7:CD:C8:FB:63:9F:31:0A:92:C2:10:4C
Certificate issuer:       /CN=0467a56211b21e9ac7cdc8fb639f310a92c2104c
Certificate serial:       01962ECF6D72C7A4357BC2AB81DF1A20005D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft
Manifest number:          0BCB
Signing time:             Sun 13 Apr 2025 11:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:07 +0000
Files and hashes:         1: BGelYhGyHprHzcj7Y58xCpLCEEw.crl (hash: 3ZXPqRI3LOaw4mxkIrm46fBxDBSHsBq5fv/kwYn0qtg=)
                          2: vBbw-4MxcReP3ao6MqHjBCu3GcI.roa (hash: W28uSnDMlGVkrCQsXwIvXwkvC/TrS+441MfK9XqL5Zo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:6d:72:c7:a4:35:7b:c2:ab:81:df:1a:20:00:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0467a56211b21e9ac7cdc8fb639f310a92c2104c
        Validity
            Not Before: Apr 13 11:01:07 2025 GMT
            Not After : Apr 14 11:01:07 2025 GMT
        Subject: CN=387df90cb407f6817a23084e5084a231eb6255e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:75:43:90:06:c3:47:fd:93:70:55:72:d4:1c:
                    35:41:7d:21:6d:cc:94:2b:90:f5:1e:c0:62:e3:46:
                    21:16:17:10:fd:ba:9f:d8:89:ba:19:2e:b0:ce:60:
                    87:9a:48:df:4b:0f:f6:68:3b:96:56:1d:32:c7:11:
                    c6:74:82:9c:d9:ad:af:8c:2e:05:0c:99:f9:59:7d:
                    26:9f:b6:11:6c:c6:02:64:13:32:0b:01:c5:14:e7:
                    72:b3:f7:81:40:88:3b:c4:2b:60:62:55:b8:78:3c:
                    f1:67:fd:09:31:04:67:96:4f:a1:5f:c0:39:81:f9:
                    7d:1f:3d:fe:ae:75:36:33:1b:af:db:9f:ae:40:c3:
                    ac:55:28:69:6a:a6:f7:8d:f3:03:41:b9:a4:c2:15:
                    b6:0f:3c:bb:29:a2:6d:d9:07:ca:58:60:3b:00:b9:
                    c8:a7:77:6f:b5:e5:4a:ed:a8:24:c3:2f:eb:df:72:
                    36:ae:0f:be:09:65:d6:4f:43:80:7f:f6:0f:fd:d2:
                    72:71:4f:8b:e5:6b:48:5d:cd:72:fc:ea:ef:10:b5:
                    ff:3b:6d:c8:82:3b:37:dd:c4:8b:76:1e:6a:aa:ad:
                    74:b2:f2:21:f5:ba:ff:3e:01:37:9c:bc:04:0b:ff:
                    49:7f:5d:e5:e9:9d:4c:f4:c8:15:5b:69:d7:75:b4:
                    fd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:7D:F9:0C:B4:07:F6:81:7A:23:08:4E:50:84:A2:31:EB:62:55:E4
            X509v3 Authority Key Identifier:
                keyid:04:67:A5:62:11:B2:1E:9A:C7:CD:C8:FB:63:9F:31:0A:92:C2:10:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGelYhGyHprHzcj7Y58xCpLCEEw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/045c4b-c0d7-4778-9f44-823ad2c2f5f1/1/BGelYhGyHprHzcj7Y58xCpLCEEw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:84:89:8d:ad:d5:38:b6:65:f2:d4:33:f6:66:4a:bf:70:7f:
         2e:e7:71:75:a7:0c:27:9c:bd:57:08:39:b9:9f:59:e4:c2:62:
         cb:2f:50:e0:ef:fd:22:ea:76:1e:38:dd:71:36:2f:84:14:26:
         64:6e:07:ab:b0:d1:24:0e:7f:d8:da:51:11:85:8e:be:a0:4e:
         51:59:4c:cc:f0:2f:9a:38:e4:13:eb:f4:58:95:0a:0f:33:1e:
         85:61:a7:f5:10:49:10:9c:e0:09:ad:9e:99:4f:14:4d:1d:3f:
         f9:2a:28:21:2e:2d:a9:32:04:bb:c6:be:f4:24:44:a1:4b:8d:
         87:ee:2f:6a:66:97:f2:a5:e9:1f:91:5b:7c:12:39:81:06:3b:
         c1:8e:f2:22:c7:a3:7c:a0:1d:76:2e:9f:10:9a:b7:07:c5:55:
         2a:4b:9f:08:5d:74:af:87:9c:9c:a7:70:98:32:31:e7:f7:27:
         64:21:10:07:27:03:72:dd:ae:47:11:62:d3:9b:d5:75:e0:6c:
         92:c3:49:6b:77:1d:77:96:11:fa:f0:c3:2c:9b:8a:2e:9f:93:
         fc:b6:c5:b5:b6:43:69:a5:18:20:76:10:a6:29:db:3d:da:ac:
         a6:7d:22:95:b5:a6:77:75:74:a2:61:fe:30:29:c3:6d:eb:e5:
         26:c6:d3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----