Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/11e050-c5d5-4a9d-b498-83c168b2c071/1/BBxG_mPW-GQd9gjNIavaPrwa5Mc.mft
File:                     BBxG_mPW-GQd9gjNIavaPrwa5Mc.mft (raw, json)
Hash identifier:          I0gOY6ewIJGkoVsm/83RVFPJc2MAnReMEHqoG4rqlaM=
Subject key identifier:   EB:82:03:CC:E4:F3:85:74:81:98:46:3F:02:59:69:7D:98:09:CB:91
Authority key identifier: 04:1C:46:FE:63:D6:F8:64:1D:F6:08:CD:21:AB:DA:3E:BC:1A:E4:C7
Certificate issuer:       /CN=041c46fe63d6f8641df608cd21abda3ebc1ae4c7
Certificate serial:       01962E98AA81AE22676D26C40F15186C298F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BBxG_mPW-GQd9gjNIavaPrwa5Mc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/11e050-c5d5-4a9d-b498-83c168b2c071/1/BBxG_mPW-GQd9gjNIavaPrwa5Mc.mft
Manifest number:          03F8
Signing time:             Sun 13 Apr 2025 10:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:19 +0000
Files and hashes:         1: BBxG_mPW-GQd9gjNIavaPrwa5Mc.crl (hash: 7o1OYniEMZCvDgbXIGtxRMrfSxXwT9UZBOcwT0tJTr4=)
                          2: WhtfNl4kPsvSKKPK4a5edmJqBO0.roa (hash: fLmSne41hG7wjVHW396uQUWjNlIxQRVkrNFvdbSceKE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:aa:81:ae:22:67:6d:26:c4:0f:15:18:6c:29:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041c46fe63d6f8641df608cd21abda3ebc1ae4c7
        Validity
            Not Before: Apr 13 10:01:19 2025 GMT
            Not After : Apr 14 10:01:19 2025 GMT
        Subject: CN=eb8203cce4f385748198463f0259697d9809cb91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:35:34:49:6a:27:66:b5:24:c9:50:9e:bd:eb:
                    8a:af:76:9c:e7:48:96:9d:52:df:a4:ef:cb:76:d4:
                    e6:6c:00:93:18:7f:26:fc:ce:7d:f5:41:6b:c5:8f:
                    08:1d:6f:ff:46:07:81:b0:ea:43:f5:97:8f:b0:61:
                    aa:1a:d5:71:11:c0:47:5c:1c:2e:8c:a3:fc:e5:2e:
                    b3:57:25:27:ec:67:07:44:63:de:42:97:ed:53:34:
                    36:49:9e:91:cf:2e:0e:cc:62:3d:c7:11:b8:81:ab:
                    32:62:ee:ff:da:a0:d4:7b:17:e5:a3:a5:17:23:a4:
                    e2:39:fb:db:ab:86:0f:3b:2d:1c:ae:1c:67:2f:3c:
                    fe:b2:4b:6d:b0:df:1d:5f:3d:ae:75:59:85:0c:63:
                    b6:d0:31:a5:6a:bf:d4:81:8c:91:b9:ed:2a:19:19:
                    e8:bc:e3:d4:de:7a:80:44:f9:48:1b:7a:ba:54:70:
                    95:d4:40:91:da:56:12:6b:93:a5:15:47:ea:81:6f:
                    ea:d0:04:94:aa:cb:30:11:79:0f:f9:7a:9e:74:01:
                    35:34:d4:40:55:6a:ba:e8:c9:03:70:4e:c8:b2:d6:
                    70:71:83:ef:9e:c6:2a:d9:8f:57:7f:b9:ad:16:e8:
                    e6:55:06:10:7f:ef:cd:6f:52:94:c0:a8:bd:13:54:
                    c9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:82:03:CC:E4:F3:85:74:81:98:46:3F:02:59:69:7D:98:09:CB:91
            X509v3 Authority Key Identifier:
                keyid:04:1C:46:FE:63:D6:F8:64:1D:F6:08:CD:21:AB:DA:3E:BC:1A:E4:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBxG_mPW-GQd9gjNIavaPrwa5Mc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/11e050-c5d5-4a9d-b498-83c168b2c071/1/BBxG_mPW-GQd9gjNIavaPrwa5Mc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/11e050-c5d5-4a9d-b498-83c168b2c071/1/BBxG_mPW-GQd9gjNIavaPrwa5Mc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:04:8e:65:6b:05:9a:f1:a9:11:ab:ba:4f:1e:7b:85:d1:10:
         b8:b9:e9:c1:b4:f1:6a:95:7b:b5:79:df:76:db:cc:ff:e4:e0:
         d3:25:90:64:70:7b:2b:01:18:2f:39:b8:e7:ac:71:99:0c:0a:
         62:26:4a:51:04:68:11:ca:a4:59:8e:9a:bc:7e:23:3e:7d:e8:
         ad:06:73:c5:07:2f:24:48:e6:f6:b1:4e:ae:b2:d0:82:ec:69:
         d8:d6:5c:b9:06:02:18:a5:97:b2:43:39:8f:d1:8e:05:7e:1b:
         8c:c0:3d:f1:3d:64:c2:2f:ed:c8:5e:10:8c:fe:e3:fd:21:58:
         03:6a:62:a2:c9:13:dd:ae:c9:5e:4d:6d:bc:1e:84:1f:01:1c:
         54:0b:56:da:d5:70:c5:5c:f7:dd:a3:70:fe:8c:81:87:47:da:
         3d:65:d6:2b:d6:1b:0d:65:a5:01:f5:c4:c5:f4:5d:e8:d0:80:
         a8:28:26:68:ab:ab:46:4e:89:82:05:d5:c5:26:56:aa:16:35:
         0f:12:17:5f:1b:81:4e:bc:27:0e:04:4f:7e:1a:67:27:63:25:
         c0:a3:79:b9:b6:35:da:76:2f:a0:67:9f:60:25:f3:ed:32:6d:
         a3:e5:71:d2:3d:4b:e9:39:6d:18:e7:73:3b:c3:49:43:7d:f8:
         26:59:10:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----