Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
File:                     BtvCTgiywmrakK1jjxrcdH9ppF8.mft (raw, json)
Hash identifier:          dyZ3imrdYZI72AnQBW/lGhvOfsiHQk3hzQ/uEmqZWv4=
Subject key identifier:   91:EF:7A:59:20:14:A1:0D:85:E1:0D:4C:7A:4B:35:2D:11:CB:C1:BA
Authority key identifier: 06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F
Certificate issuer:       /CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
Certificate serial:       01962E98D2997A4AEE50AF71BE9109C5CA2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft
Manifest number:          1439
Signing time:             Sun 13 Apr 2025 10:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:29 +0000
Files and hashes:         1: 5fp4REhZrqUt_jGwUghdFogNJ4s.roa (hash: XHIsP9GAsLpSqaROasGsDdk80cNjcNRUOKOHhRVGrsU=)
                          2: BtvCTgiywmrakK1jjxrcdH9ppF8.crl (hash: zURRHmqMKrUMVFmCQi+46c24WKoknBtxMKvTYiZmjuo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d2:99:7a:4a:ee:50:af:71:be:91:09:c5:ca:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f
        Validity
            Not Before: Apr 13 10:01:29 2025 GMT
            Not After : Apr 14 10:01:29 2025 GMT
        Subject: CN=91ef7a592014a10d85e10d4c7a4b352d11cbc1ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b3:6c:aa:0d:b5:22:44:04:bd:5b:86:48:8b:
                    b2:29:7e:2c:90:37:45:43:70:24:42:68:88:b7:f4:
                    43:81:5f:e9:6e:af:71:76:29:99:b9:00:fc:27:99:
                    b2:09:f9:4d:ef:2d:25:c9:9d:a2:b5:2d:b0:32:2f:
                    b5:b2:d7:b4:dc:fd:6e:40:81:5d:c3:45:99:4e:e8:
                    62:ea:d6:fb:d5:3a:9b:4f:3b:9e:90:f1:fd:fc:24:
                    f4:36:dd:c2:b6:52:73:53:fe:1d:e3:7e:21:24:6d:
                    b8:d8:97:80:3a:99:53:5f:e7:94:4a:5a:f6:8f:3d:
                    22:df:5e:ed:a5:67:4b:d4:8a:d1:15:71:d8:f4:f9:
                    6d:ec:b7:5b:3d:4a:15:66:6a:8a:44:19:ec:ad:3c:
                    c9:4c:85:b1:e2:28:a0:a0:11:a5:c2:c1:07:35:67:
                    ed:f7:4c:c0:b8:a2:af:2f:f0:a5:31:34:c9:d7:00:
                    19:42:b4:16:7c:19:87:53:84:ab:76:ac:93:43:e8:
                    6d:f3:a8:40:83:12:bb:04:8a:1a:a3:0b:3b:b5:43:
                    5d:e7:87:5e:c8:99:63:f0:37:4f:22:e5:07:2f:56:
                    a3:ee:5c:cf:bc:99:e0:54:5e:c9:a0:12:c1:e8:04:
                    1f:c3:61:92:cd:ba:76:e6:44:56:7d:56:df:b9:57:
                    00:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:EF:7A:59:20:14:A1:0D:85:E1:0D:4C:7A:4B:35:2D:11:CB:C1:BA
            X509v3 Authority Key Identifier:
                keyid:06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:25:2e:a3:55:d9:c8:58:0d:58:8f:fd:87:7e:18:b5:be:45:
         4f:f3:05:b9:42:9a:ee:fe:80:2e:94:68:e4:15:49:5b:dc:8a:
         c7:5f:0f:b3:b8:63:f5:16:4b:9f:de:17:bf:90:3d:ed:4f:9a:
         c5:d8:fb:8e:73:7e:c1:b7:87:da:bd:4d:2d:5a:9b:fd:73:69:
         d5:1b:05:0e:23:62:74:e9:1c:5c:f5:9e:11:92:2a:c7:fe:67:
         7d:0d:a3:db:40:78:de:e8:ab:4e:0d:88:cb:60:f2:a9:c2:83:
         dc:45:71:6c:f4:7f:31:52:fe:0a:86:9f:b9:da:f5:21:9a:67:
         78:80:97:3e:56:16:bc:32:1d:cb:9d:84:c3:18:7d:99:a2:00:
         30:77:dc:11:75:b4:5b:aa:94:37:39:b7:6d:a1:b4:a1:c4:41:
         79:1c:af:ca:1a:80:9c:bb:c1:47:47:ad:7a:cb:f9:f3:77:93:
         53:09:b7:0d:2b:92:2a:52:4f:5e:0c:95:e8:4f:77:c5:25:a1:
         a1:a5:a8:dd:a5:70:4e:c9:ad:3d:1d:1b:03:32:c4:9e:42:73:
         39:9c:85:ef:94:9c:ab:9b:1e:2e:30:f2:ef:4f:f6:10:a1:e7:
         90:11:75:c2:5f:f8:ea:8c:f8:0c:7a:f1:ef:cf:82:68:46:33:
         92:7f:ce:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----