Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
File:                     BSQGb4Zs826cup6b5vkCZNo3Lz4.mft (raw, json)
Hash identifier:          CFpztKl/8y+J4XoNKyRl2paKoreoVyStPAEdkVCAJDw=
Subject key identifier:   90:BA:01:05:7F:CC:5E:13:1F:5E:6B:61:E4:ED:30:F5:62:5D:7F:C6
Authority key identifier: 05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E
Certificate issuer:       /CN=0524066f866cf36e9cba9e9be6f90264da372f3e
Certificate serial:       01962F07210F25CB8EAC67737D51937BFE2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:58 +0000
Files and hashes:         1: BSQGb4Zs826cup6b5vkCZNo3Lz4.crl (hash: RI53PKxq6jGhgJrBVo8ZszBhwM1bGd26gwK83MtwzOY=)
                          2: Y3RMoJznpenQfrP3I4h7m1FHoFA.roa (hash: e1BDAMfL6M0zEJOo5zSP4vUUcw0LzSTWKVMkd0N43ps=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:21:0f:25:cb:8e:ac:67:73:7d:51:93:7b:fe:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0524066f866cf36e9cba9e9be6f90264da372f3e
        Validity
            Not Before: Apr 13 12:01:58 2025 GMT
            Not After : Apr 14 12:01:58 2025 GMT
        Subject: CN=90ba01057fcc5e131f5e6b61e4ed30f5625d7fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:01:44:7c:ec:40:2f:d6:9e:d1:33:5f:a5:89:
                    c9:9a:3a:e9:ab:52:97:ae:0e:85:c1:c6:4f:33:04:
                    ae:14:3c:79:79:fb:81:3b:7e:a7:4c:12:46:73:39:
                    f1:23:5a:91:6e:28:74:75:e4:41:6b:c9:37:5d:f8:
                    e5:2e:f6:9c:40:a7:08:6e:65:37:2e:c3:8b:30:81:
                    e2:52:70:f8:48:59:d7:1d:7e:d5:6e:a8:f5:fe:71:
                    6d:e4:15:c2:e0:94:09:69:32:d2:0b:f5:e5:ea:9c:
                    bd:20:75:21:93:2e:de:99:1e:b7:6d:2f:b4:49:cd:
                    80:22:8c:dc:bf:86:e8:8c:5f:ac:1a:10:ad:96:41:
                    ca:27:22:93:85:05:49:c9:0d:ba:16:65:88:be:cb:
                    30:a6:ba:aa:d9:bc:8e:dd:3f:ef:13:1b:e9:6f:9c:
                    4c:b0:ae:6a:c5:f5:e6:89:b1:92:6e:d6:df:63:7a:
                    3e:83:33:57:a8:77:8f:a6:9d:9f:13:20:76:f9:a1:
                    13:d7:04:8f:66:53:3f:63:63:82:fb:86:7c:80:74:
                    4e:45:5c:e6:d2:d9:ba:22:62:b9:cc:57:7c:81:66:
                    cd:3d:7e:88:50:fd:60:0e:94:a3:ca:78:86:1f:b9:
                    41:fc:84:1f:b7:d0:b2:1c:03:49:5b:d8:e3:c7:db:
                    b5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BA:01:05:7F:CC:5E:13:1F:5E:6B:61:E4:ED:30:F5:62:5D:7F:C6
            X509v3 Authority Key Identifier:
                keyid:05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:52:22:47:d9:39:6e:ec:c7:02:b4:a3:02:a8:9d:bf:be:7b:
         fa:2e:30:fc:1e:a0:54:43:b8:dd:db:3c:95:4d:6a:f4:f9:2f:
         43:49:52:d2:47:d3:76:df:1a:72:34:75:3c:43:40:96:12:54:
         a1:50:ea:58:eb:e0:95:5d:48:f7:ea:2a:0d:8f:8a:54:ec:d3:
         b1:fc:7a:59:26:1b:09:f7:19:34:0e:08:4f:5c:2f:15:f7:82:
         00:04:58:9b:d4:ca:2c:b4:82:41:15:7f:51:d0:d5:45:74:df:
         20:91:56:df:da:10:98:e7:11:3a:88:4a:c9:3b:6c:54:f8:fd:
         20:7e:d9:2b:60:d7:9e:de:41:a1:ab:bc:21:cf:10:30:31:a1:
         7f:bf:4a:93:6f:ae:24:a4:24:02:78:9a:a1:ee:ed:3a:f2:69:
         78:36:da:4b:67:d5:0c:3b:e5:b5:b6:f7:c0:de:9b:a9:bb:26:
         c6:e4:61:a4:d3:0f:eb:42:77:2c:55:69:90:55:a1:ee:d5:b5:
         de:00:d1:fe:49:d4:b0:89:b6:c7:ab:a0:82:8d:cb:e6:6f:37:
         b3:f1:74:40:41:7c:e5:1b:99:a6:bd:4c:fb:d4:9b:94:09:c8:
         5f:c4:bd:04:9c:5b:d6:6f:4b:8b:9a:22:f4:c5:95:ee:30:4e:
         db:c0:79:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----