Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/832d67-4506-47f2-a944-cabe1d84f709/1/BSLIJ03EQgYXFxrL8pML6bi1bWA.mft
File:                     BSLIJ03EQgYXFxrL8pML6bi1bWA.mft (raw, json)
Hash identifier:          hJ7AJWS5eewV7TC61A1QidBtGOEw8fiC/S1qpt3VS5M=
Subject key identifier:   28:AE:38:AF:E8:36:94:5E:C9:37:BF:52:78:8D:BC:DA:18:7B:9D:AC
Authority key identifier: 05:22:C8:27:4D:C4:42:06:17:17:1A:CB:F2:93:0B:E9:B8:B5:6D:60
Certificate issuer:       /CN=0522c8274dc4420617171acbf2930be9b8b56d60
Certificate serial:       01962E2AF8EE446E9E7C24FD5802E80B8D71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BSLIJ03EQgYXFxrL8pML6bi1bWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/832d67-4506-47f2-a944-cabe1d84f709/1/BSLIJ03EQgYXFxrL8pML6bi1bWA.mft
Manifest number:          0253
Signing time:             Sun 13 Apr 2025 08:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:30 +0000
Files and hashes:         1: BSLIJ03EQgYXFxrL8pML6bi1bWA.crl (hash: 8uQOgo7NoHwJN+kP+w0p1nJjLWqZh9c3RQ1Pr4AEhXM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f8:ee:44:6e:9e:7c:24:fd:58:02:e8:0b:8d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0522c8274dc4420617171acbf2930be9b8b56d60
        Validity
            Not Before: Apr 13 08:01:30 2025 GMT
            Not After : Apr 14 08:01:30 2025 GMT
        Subject: CN=28ae38afe836945ec937bf52788dbcda187b9dac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:90:db:e2:6c:e0:64:37:8a:b3:96:d2:31:3b:
                    16:14:a0:19:10:72:1c:b4:8e:a2:08:77:74:a7:24:
                    1c:6e:fd:fc:7e:75:ec:d5:66:e9:28:2b:0a:e3:78:
                    c9:a1:66:19:3a:66:5d:77:e1:f2:6e:70:ef:c3:90:
                    35:e1:68:36:ff:57:ec:ff:ae:3b:48:f3:99:3f:c5:
                    7e:b3:66:ab:c9:f2:7e:31:77:20:5a:dd:75:9e:66:
                    cd:5b:53:06:0f:89:e8:26:65:78:2e:97:0f:7f:7c:
                    9e:ef:15:cd:fa:63:36:16:4e:8d:6d:ac:99:ca:a0:
                    be:0d:b0:b2:7b:66:24:78:c0:85:00:91:47:03:39:
                    03:02:da:c6:33:3d:1d:1e:a8:e0:a1:1a:b4:d2:8f:
                    7e:57:6c:57:24:7c:90:0b:b2:f3:c3:77:c8:99:b5:
                    ba:c9:80:48:88:bd:f1:34:3b:ab:c0:65:01:c8:d8:
                    91:ed:5f:81:7b:1e:74:81:a8:30:4c:5b:83:a9:4d:
                    d8:ea:9e:ce:39:a2:ef:db:d4:65:81:b7:c8:00:9b:
                    9f:f0:f5:8e:14:61:3b:51:a9:96:01:df:4a:26:1a:
                    14:b1:c5:b0:48:78:b7:9f:ff:63:6e:cd:50:a4:e4:
                    14:4a:b4:3a:8e:67:5e:33:09:da:26:86:2f:89:7f:
                    4e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AE:38:AF:E8:36:94:5E:C9:37:BF:52:78:8D:BC:DA:18:7B:9D:AC
            X509v3 Authority Key Identifier:
                keyid:05:22:C8:27:4D:C4:42:06:17:17:1A:CB:F2:93:0B:E9:B8:B5:6D:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSLIJ03EQgYXFxrL8pML6bi1bWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/832d67-4506-47f2-a944-cabe1d84f709/1/BSLIJ03EQgYXFxrL8pML6bi1bWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/832d67-4506-47f2-a944-cabe1d84f709/1/BSLIJ03EQgYXFxrL8pML6bi1bWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:49:ec:a7:f5:29:96:8a:ab:74:a2:67:68:04:7f:eb:95:6d:
         e3:07:c8:0e:74:03:be:08:23:1c:eb:e5:6b:d0:cd:3c:9c:80:
         67:d3:67:de:82:ec:ae:f2:50:e5:29:04:b5:03:74:b6:1e:99:
         ea:6a:d0:21:68:9f:b8:5f:a5:57:79:f6:32:5c:b7:8e:80:50:
         55:6b:b3:0a:63:d4:92:f3:71:13:1d:cb:1f:02:d4:07:ff:2b:
         3d:c1:1a:03:5a:10:c9:3a:28:28:fc:8e:d7:fb:cf:94:5f:e2:
         5a:1b:ef:ab:eb:61:c8:09:4c:d5:ae:fb:30:fb:4e:d2:15:43:
         21:a3:e5:ee:39:fa:ff:ba:2d:3b:e8:ec:03:21:80:41:ff:9c:
         c2:20:42:d5:b1:23:c6:11:3c:05:a5:52:07:25:14:a4:0a:80:
         7d:83:11:20:04:4a:11:93:70:9d:87:7f:ae:6d:ce:ee:9b:29:
         58:17:c6:f4:09:29:5d:7d:f3:8c:ef:9d:e3:5a:bc:ec:ce:1e:
         eb:8e:0a:df:b4:33:f9:1e:e8:a8:fb:66:5e:dd:9c:9c:5b:4b:
         75:08:7a:97:fd:b4:a8:dd:ec:b4:2e:6a:00:6b:fa:5c:79:6a:
         c6:db:43:35:de:ac:c2:07:66:8b:e1:e6:b7:e7:d5:70:37:5f:
         bf:ae:c5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----