Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft
File:                     BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft (raw, json)
Hash identifier:          yEYneOJqtSOVwjAJqcuCKpQQ1x3GSgsxqQbSIRHtAxA=
Subject key identifier:   37:5E:89:B5:30:8C:E4:51:94:DF:35:E9:FD:A4:91:7F:AB:F2:B9:A2
Authority key identifier: 04:4D:A5:B7:E2:DB:F7:C7:6F:CC:66:C9:6F:FE:64:8F:EA:D4:B0:60
Certificate issuer:       /CN=044da5b7e2dbf7c76fcc66c96ffe648fead4b060
Certificate serial:       01962E9978B8DFF90437F98A9ACF29B4462D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BE2lt-Lb98dvzGbJb_5kj-rUsGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft
Manifest number:          05AE
Signing time:             Sun 13 Apr 2025 10:02:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:11 +0000
Files and hashes:         1: BE2lt-Lb98dvzGbJb_5kj-rUsGA.crl (hash: +sP/LSJZQkv0+65ElzsJBseDMeA5U8BbjhndzBoVINA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:78:b8:df:f9:04:37:f9:8a:9a:cf:29:b4:46:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044da5b7e2dbf7c76fcc66c96ffe648fead4b060
        Validity
            Not Before: Apr 13 10:02:11 2025 GMT
            Not After : Apr 14 10:02:11 2025 GMT
        Subject: CN=375e89b5308ce45194df35e9fda4917fabf2b9a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9c:34:b6:d0:c7:30:1d:1b:36:ad:2f:76:a9:
                    46:ff:48:10:0f:60:7c:76:55:bd:84:68:04:ba:65:
                    35:e8:a7:1a:10:6a:04:f3:3e:62:c2:1d:45:c6:82:
                    c3:34:76:46:69:45:6c:68:ad:68:c8:00:73:4a:3f:
                    2c:7d:e3:63:fe:d3:31:71:87:13:ed:46:88:fa:b7:
                    a3:4c:6b:25:81:12:3b:2b:3d:a9:15:c6:d9:cb:97:
                    46:f4:ea:29:a0:12:08:85:8a:c4:1d:3a:e6:c0:5e:
                    2d:9e:71:7e:b1:73:df:d0:aa:c7:7d:65:0c:3e:64:
                    4c:df:e1:3b:4e:d1:f8:de:a6:b8:98:57:c4:33:2a:
                    fa:36:c3:1b:63:5c:1a:7e:ac:1e:78:e4:4e:f3:f2:
                    43:ba:63:bd:a1:74:fb:2e:a7:3a:37:fe:24:2a:28:
                    97:e1:8b:00:0e:cc:eb:25:9c:08:0a:43:82:8a:e2:
                    d7:b7:b6:e2:4e:a2:eb:a3:1e:1f:d8:36:b1:b0:5a:
                    e4:09:fe:6f:79:9a:af:d2:8c:3d:ff:54:be:86:5f:
                    2a:d1:3c:28:83:cd:e6:63:89:9c:f8:9a:64:a0:fd:
                    27:31:c9:02:08:98:bd:ba:96:bf:fa:7f:14:5f:38:
                    3d:82:a2:8f:8e:0b:7c:1d:1c:ac:48:cd:a4:e2:ee:
                    00:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:5E:89:B5:30:8C:E4:51:94:DF:35:E9:FD:A4:91:7F:AB:F2:B9:A2
            X509v3 Authority Key Identifier:
                keyid:04:4D:A5:B7:E2:DB:F7:C7:6F:CC:66:C9:6F:FE:64:8F:EA:D4:B0:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE2lt-Lb98dvzGbJb_5kj-rUsGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/11a600-596b-48f5-b3f3-acbc9d4e0843/1/BE2lt-Lb98dvzGbJb_5kj-rUsGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ee:90:48:a7:cc:2e:9f:c9:0b:0c:de:a3:be:be:99:6d:11:
         86:28:7b:fd:4f:82:62:d2:13:9b:94:23:00:2c:77:fc:f1:bb:
         4d:8f:c7:59:52:d3:32:12:89:f6:3a:2a:1f:27:21:93:57:8c:
         f5:48:83:e6:ca:08:fb:43:ae:ff:86:f5:20:1b:19:09:0d:76:
         4e:2f:61:11:a7:4b:c5:92:04:6c:4a:9a:3c:9d:c4:48:4e:1f:
         a3:6d:6b:54:77:09:77:cd:1d:70:b8:e8:c8:48:a4:5d:13:bb:
         d3:6f:f0:50:c9:ec:7a:ee:8b:2e:3c:bc:1c:33:2b:23:07:d7:
         d7:a1:69:64:7d:00:d0:05:fa:ff:4f:67:b0:2e:7d:a7:e6:f0:
         31:63:78:45:81:de:2e:d3:a5:70:03:24:ef:37:27:d3:75:06:
         7f:65:17:db:c7:58:e1:dc:4e:8f:b8:d6:ed:e7:a7:40:0d:0e:
         6a:c3:83:2d:34:3d:b8:6f:a3:5b:79:fc:39:e1:76:5d:59:43:
         60:ef:bb:4e:4a:29:84:eb:5f:49:96:aa:b7:a0:47:be:31:d7:
         a5:c9:69:b2:79:5b:78:7b:cf:d9:a4:d3:fa:5f:84:29:9f:cb:
         ce:62:54:1e:db:2e:dc:de:6a:da:e9:d1:2c:9f:43:71:fd:96:
         9b:be:23:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----