Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
File:                     B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft (raw, json)
Hash identifier:          IQ4kto5/hZyJnr4MTKOTFM/Lg1wmVg88Ev5Z5TSRIlY=
Subject key identifier:   76:52:1C:4D:B8:0C:9C:E3:DF:55:FB:E3:A6:53:CA:60:D2:8D:33:2C
Authority key identifier: 07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF
Certificate issuer:       /CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
Certificate serial:       01962E98E57743E6FB9A2CFC8D1966B66A1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft
Manifest number:          0BAA
Signing time:             Sun 13 Apr 2025 10:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:34 +0000
Files and hashes:         1: B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl (hash: Jgte/Fm+q1JLEOkQRdV6GPYBepfQj/JIR/CP6+QGIe0=)
                          2: uMgXGnHJtpBZxUTOGcmdbVM1Ujg.roa (hash: 5kchvjwGIIWYfh1jo1LFwohMp5GRmL3D2YFjaqIXFeo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e5:77:43:e6:fb:9a:2c:fc:8d:19:66:b6:6a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07743006a8e9d0e1bf20557ad5964078fe8126ef
        Validity
            Not Before: Apr 13 10:01:34 2025 GMT
            Not After : Apr 14 10:01:34 2025 GMT
        Subject: CN=76521c4db80c9ce3df55fbe3a653ca60d28d332c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:53:70:3c:75:81:f3:08:7d:bb:d0:a7:0d:af:
                    f9:ed:b7:82:05:64:4d:c7:71:91:86:48:70:35:38:
                    8f:3f:7f:21:c4:97:66:25:25:01:af:8d:20:66:10:
                    78:71:68:5c:e8:2e:e1:b3:42:a2:a7:8b:d4:5e:d3:
                    c7:c6:75:7f:3e:71:67:10:73:de:01:4d:ca:5f:54:
                    a5:c0:c1:5d:22:54:81:11:d8:c6:9f:78:ce:7c:9a:
                    ca:56:39:5c:dc:29:5d:35:57:3f:7d:42:ea:85:45:
                    70:71:cf:5b:9e:cc:46:f9:44:56:9c:40:19:2c:78:
                    9c:f5:29:67:b6:24:78:a5:9c:c5:8c:56:98:6a:56:
                    50:48:e9:69:52:11:02:df:d0:6f:e1:f1:7d:55:fa:
                    16:65:29:74:10:1d:3d:de:12:de:2c:90:98:e8:ec:
                    d3:41:64:fe:ff:dc:4b:76:2b:1d:7d:5e:5d:99:7f:
                    41:dc:27:e0:ab:9f:97:ef:19:6b:ec:38:dd:98:aa:
                    7d:a0:3b:82:84:b9:16:e0:f1:6b:cc:04:74:e6:21:
                    04:17:5d:45:11:19:4b:84:06:c5:99:a8:5b:8f:5e:
                    1b:0e:7a:7c:bc:ef:f0:45:86:21:a8:1f:55:c2:4a:
                    f7:32:e4:b6:4f:31:60:66:d9:76:0d:30:ed:4e:04:
                    af:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:52:1C:4D:B8:0C:9C:E3:DF:55:FB:E3:A6:53:CA:60:D2:8D:33:2C
            X509v3 Authority Key Identifier:
                keyid:07:74:30:06:A8:E9:D0:E1:BF:20:55:7A:D5:96:40:78:FE:81:26:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3QwBqjp0OG_IFV61ZZAeP6BJu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/679cab-2cf4-40a5-b5ee-246646e9db1e/1/B3QwBqjp0OG_IFV61ZZAeP6BJu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:5f:5b:68:56:7d:78:54:a0:09:b9:99:b0:1b:10:ef:22:42:
         84:d6:c8:3a:f3:ab:97:f6:aa:92:b6:08:83:04:21:4f:82:db:
         78:ec:69:a9:ca:d6:64:e0:c6:5f:a3:71:71:d2:41:8a:e9:83:
         3c:8d:ab:8a:89:02:af:8a:9c:be:4c:27:32:d3:e4:a2:95:69:
         32:28:60:8a:57:9a:3a:bd:b7:20:f0:30:c7:67:a7:38:48:30:
         2f:56:15:6b:36:d7:a2:28:4c:a2:05:dc:99:03:e5:c2:b8:67:
         e4:6b:ad:4e:b2:51:a8:32:cd:2a:dd:55:a9:80:36:5e:8f:95:
         83:71:9f:6f:e0:7d:14:6e:90:b5:07:9c:6f:b1:5f:e3:cb:7f:
         88:e0:00:f6:b7:5e:94:ec:be:b3:ed:55:27:65:77:94:40:0b:
         0a:26:d1:c9:b7:d8:e4:1f:3b:78:6e:89:e8:4b:72:e8:45:8c:
         d9:3c:11:be:2a:08:f9:c5:9d:86:92:15:30:f9:21:a0:6a:66:
         37:be:b2:20:a7:f0:3d:af:9a:ac:2a:3e:71:b2:2c:e2:36:95:
         1c:56:d1:81:2a:52:b2:7e:f5:5f:cb:e0:60:9f:c9:0e:fe:b8:
         c1:00:54:c2:d6:ce:28:9a:12:a1:c5:a7:e9:52:10:56:79:cc:
         f0:ae:44:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----