Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
File:                     Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft (raw, json)
Hash identifier:          1DIQHTsWYnNyuzsjs95YP6q1B6vb/yVe1lt+X6H9siU=
Subject key identifier:   22:C8:C8:59:8C:E5:D4:85:B4:9F:3E:90:E1:DD:8A:63:BA:9F:85:AC
Authority key identifier: 06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
Certificate issuer:       /CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Certificate serial:       01962F74BEB81AE2654682ABD586A0004E58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:42 +0000
Files and hashes:         1: Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl (hash: r98y0AwEUARPDGVEcQXRow/a+im8lPquWAtNJwqt/ts=)
                          2: GCU6ctyJbqAMhWQYVpX0QaP8Qy4.roa (hash: dW5jCxXLX0Q6KCT48fWLPtjZskUAawNAnNuHkyFw1ow=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:be:b8:1a:e2:65:46:82:ab:d5:86:a0:00:4e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
        Validity
            Not Before: Apr 13 14:01:42 2025 GMT
            Not After : Apr 14 14:01:42 2025 GMT
        Subject: CN=22c8c8598ce5d485b49f3e90e1dd8a63ba9f85ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:59:69:8b:d3:08:7c:dd:e2:7b:66:ce:ee:5e:
                    ad:b8:f5:a2:1a:86:73:8a:33:d5:78:25:5a:d3:76:
                    4c:2b:ed:6b:ce:94:65:b5:65:8b:36:85:90:51:0a:
                    3e:2e:94:ca:c8:2b:ed:73:86:a8:ae:9c:a5:53:af:
                    4a:0d:36:6a:56:b0:7b:36:56:38:5c:c0:ef:0c:9a:
                    25:2a:e8:f4:0c:ec:34:15:18:68:04:d4:9c:44:c3:
                    89:83:05:95:4c:3c:b2:03:2c:3d:e0:da:f5:59:a8:
                    43:de:a4:99:96:1b:c8:40:39:f9:04:ba:bb:19:d9:
                    37:e5:68:0b:27:42:ee:6e:a1:e8:6a:fe:91:0a:f3:
                    b3:93:db:a4:70:88:0f:5c:7b:25:29:77:50:aa:e2:
                    a6:36:3f:4f:9a:77:03:02:21:52:27:9c:99:90:06:
                    48:8e:70:11:8d:33:ef:92:c4:38:b3:97:62:33:a4:
                    cb:95:67:79:62:f4:73:01:1c:53:82:87:ef:2b:00:
                    54:de:48:71:8b:69:c4:e1:44:2a:63:43:c9:af:99:
                    58:0b:ab:cb:50:88:32:06:a9:93:19:de:e7:07:cb:
                    f2:92:1c:cb:67:da:ae:02:d4:5c:4e:04:a7:f1:48:
                    35:f6:66:6e:80:82:b5:95:ae:84:7c:4f:d9:54:73:
                    d8:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C8:C8:59:8C:E5:D4:85:B4:9F:3E:90:E1:DD:8A:63:BA:9F:85:AC
            X509v3 Authority Key Identifier:
                keyid:06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:38:68:24:08:29:07:7c:36:7a:27:fd:f4:1c:30:b5:17:16:
         63:00:ee:f3:c1:99:2f:df:f4:52:fd:4b:a3:bc:35:60:e3:b0:
         ea:78:90:ef:1c:24:84:4c:b1:7f:03:8f:42:a9:e9:d9:4b:50:
         99:4c:c4:6c:dc:91:cc:a3:05:05:b3:ad:f2:f5:0f:44:63:ac:
         54:38:dc:6b:d0:fe:8b:40:00:0a:4d:8e:47:69:d2:7c:5a:38:
         2d:f9:14:8d:1c:8e:dc:fb:89:bc:ce:0a:e0:49:49:c6:e2:aa:
         0a:e7:3c:3f:3d:ed:60:6a:9a:71:83:73:90:6b:47:0b:6c:86:
         43:e2:ff:73:78:f1:45:a9:12:2b:48:e9:3b:3d:b7:21:a5:1b:
         4e:cd:42:c1:cf:de:fe:48:48:cc:36:19:12:8e:b3:3b:ca:10:
         a5:19:61:4b:f1:1b:7d:e4:ff:2b:e6:9c:84:c7:38:f9:57:1b:
         4e:70:96:ca:f5:27:84:61:00:cb:ae:ae:94:1e:d5:97:4b:28:
         ca:67:f7:5b:e9:18:8e:be:31:2d:65:43:8e:60:c0:36:ff:ea:
         9c:3b:32:da:5b:a5:39:d7:dc:d9:51:32:92:23:12:45:93:67:
         d4:62:71:f7:55:76:91:61:af:9e:c6:0b:20:88:6e:20:b2:32:
         a9:e2:1c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----