Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
File:                     BE-_fHvu77FSWiYU2c1jpCafn0o.mft (raw, json)
Hash identifier:          sQhqbsFQ1s9Rsb99hruCyk3ySCETejdxS/pP3P7hs2E=
Subject key identifier:   74:7D:95:59:49:D0:97:E1:36:3C:0F:C1:7B:45:19:AE:B3:8B:CB:23
Authority key identifier: 04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A
Certificate issuer:       /CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
Certificate serial:       01962F74C0C0E0D9BE031D6C21AD04C6060E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft
Manifest number:          06AA
Signing time:             Sun 13 Apr 2025 14:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:42 +0000
Files and hashes:         1: BE-_fHvu77FSWiYU2c1jpCafn0o.crl (hash: +wwhiNNVJqssYHUqD15uFI6nfRt7qtsWa0+qMRadJAo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c0:c0:e0:d9:be:03:1d:6c:21:ad:04:c6:06:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044fbf7c7beeefb1525a2614d9cd63a4269f9f4a
        Validity
            Not Before: Apr 13 14:01:42 2025 GMT
            Not After : Apr 14 14:01:42 2025 GMT
        Subject: CN=747d955949d097e1363c0fc17b4519aeb38bcb23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:22:00:f7:84:01:10:cf:f4:05:7f:c4:f0:9e:
                    3e:48:7e:da:aa:71:92:e5:86:f1:a9:1f:4d:ee:4b:
                    70:db:38:1f:90:98:82:3b:6d:4b:51:cf:07:e6:44:
                    34:67:da:79:25:c2:17:9c:a9:c8:17:c2:21:94:5b:
                    8c:38:17:86:ec:a1:1e:c2:e8:6c:1f:82:90:6b:db:
                    b6:49:8b:39:2b:a3:ad:af:bc:53:23:c5:4d:28:e6:
                    5d:14:41:a8:64:6a:31:bc:b4:83:9a:e9:50:8a:51:
                    4f:45:69:fe:29:7d:77:b4:b4:1b:80:12:96:cf:47:
                    dc:a3:ce:8c:bb:c0:23:6f:e2:23:ac:36:39:08:39:
                    cf:56:73:7f:48:58:41:e0:a3:b7:fb:4d:6d:ea:1d:
                    b1:51:b0:40:ca:eb:61:fe:4b:25:bc:b0:1a:dc:a0:
                    b5:14:78:ae:9e:97:36:58:82:31:b5:f6:8c:0a:45:
                    6e:1f:9e:d8:a2:27:78:6d:0d:d6:dd:ef:be:47:a9:
                    7a:58:8a:2c:46:3f:2d:e8:12:6e:6d:6b:cd:a0:4b:
                    a6:eb:b8:98:01:91:c1:48:c4:58:e3:f5:b8:00:60:
                    ce:dc:24:30:1c:36:7d:f9:ce:2c:28:53:df:a9:c5:
                    fa:0c:11:13:3d:a0:fd:6c:03:ab:0c:ea:34:31:3e:
                    92:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:7D:95:59:49:D0:97:E1:36:3C:0F:C1:7B:45:19:AE:B3:8B:CB:23
            X509v3 Authority Key Identifier:
                keyid:04:4F:BF:7C:7B:EE:EF:B1:52:5A:26:14:D9:CD:63:A4:26:9F:9F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE-_fHvu77FSWiYU2c1jpCafn0o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b23a9b-5cdd-4c41-bf26-51362695d085/1/BE-_fHvu77FSWiYU2c1jpCafn0o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:a2:62:15:0e:9c:f9:fd:6e:15:5d:ab:89:a0:4b:7b:56:7b:
         58:ce:c4:80:7c:ee:00:0b:62:0d:54:7c:99:d1:5f:39:65:e4:
         43:e7:80:d1:5b:11:aa:60:75:e0:ec:6c:60:65:95:65:7a:c3:
         08:64:76:19:b1:8e:24:91:2f:97:89:cd:3c:e7:0e:93:53:ca:
         83:6b:28:4c:74:00:7e:a6:7a:11:3c:9f:e7:79:02:29:d6:5e:
         62:67:0f:e3:ec:15:4a:f5:06:f8:20:9b:72:f2:c4:7f:16:a1:
         76:8f:b3:27:8e:40:83:2f:02:19:6e:cc:5b:71:75:6b:f8:af:
         a2:b0:88:a8:2f:e5:41:88:7b:02:14:fe:c3:6a:28:3d:5f:64:
         21:58:46:4e:49:60:d0:cc:e1:93:26:2e:52:48:d1:c8:ff:45:
         a5:54:c8:19:a3:db:da:d4:91:34:19:8b:f1:ad:83:8b:7e:a0:
         1a:19:95:7e:52:a6:62:ca:b0:28:65:15:1a:62:16:34:4e:17:
         6d:3e:f2:39:56:43:67:79:09:15:1a:e9:e5:7c:0c:7e:38:54:
         33:e0:42:67:6a:51:a3:60:08:58:9e:68:61:d1:db:f6:54:eb:
         c8:80:db:94:04:4c:90:de:29:2a:1b:b4:22:13:21:71:84:9f:
         21:90:a7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----