Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
File:                     BeHQfebxKPRpxMOzAorfjU034tk.mft (raw, json)
Hash identifier:          Lz/L8D8aNjjvpS3BYbA/TiZYU+tWeZBZUi/JZIMd4+k=
Subject key identifier:   65:B2:A0:F2:1A:66:73:62:50:72:CA:23:B1:E7:A0:6C:22:6D:27:9F
Authority key identifier: 05:E1:D0:7D:E6:F1:28:F4:69:C4:C3:B3:02:8A:DF:8D:4D:37:E2:D9
Certificate issuer:       /CN=05e1d07de6f128f469c4c3b3028adf8d4d37e2d9
Certificate serial:       01962E2AC4BB985D310C21CB154BC5006F66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 08:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:16 +0000
Files and hashes:         1: 5_4qOd1GTRdKd6DbyMT4VAzgn60.roa (hash: Q449y6NU5T0NgahXGNO0aRD91GR+m9cfLNErlQRiyf0=)
                          2: BeHQfebxKPRpxMOzAorfjU034tk.crl (hash: I8J/w3Y5oLEwsbkrYTel/16o3rLDk+S3KKnf2FDSSlQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c4:bb:98:5d:31:0c:21:cb:15:4b:c5:00:6f:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05e1d07de6f128f469c4c3b3028adf8d4d37e2d9
        Validity
            Not Before: Apr 13 08:01:16 2025 GMT
            Not After : Apr 14 08:01:16 2025 GMT
        Subject: CN=65b2a0f21a6673625072ca23b1e7a06c226d279f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e3:11:62:ba:e7:50:3f:02:7e:83:4a:42:04:
                    b9:4e:4c:78:4c:67:5e:04:49:31:55:8c:0b:bb:51:
                    c2:eb:51:b4:d5:6a:f6:4c:6e:50:cf:58:27:f6:a4:
                    9c:68:28:7a:a1:d8:84:0e:c8:51:2a:c4:2a:c3:a3:
                    e3:63:72:c3:07:78:80:ac:1d:c2:a2:f0:d0:00:70:
                    db:15:37:d7:27:1c:fc:dc:bb:d5:85:c2:3a:6c:59:
                    1f:51:72:c1:f3:00:26:c9:38:60:00:20:ee:7b:e9:
                    e0:39:ec:70:ed:b8:91:55:20:91:00:36:cd:91:f6:
                    95:e4:c3:40:37:e6:1b:36:50:df:e8:fe:21:7a:d2:
                    95:3c:f2:8a:9e:4a:ea:a6:ec:44:a8:5c:89:61:ab:
                    3c:7d:f2:72:d7:88:96:06:5a:83:4e:37:75:33:d3:
                    9d:b4:00:be:7e:b5:65:19:6b:8a:96:b3:61:71:63:
                    93:08:0e:2f:3f:8f:ae:bd:5d:2a:f3:8b:74:f9:f2:
                    b0:ad:7a:c2:16:d3:b0:d9:35:99:7c:42:0c:49:f5:
                    c8:89:05:8d:2c:af:e8:c0:2d:c5:1d:8c:e5:2a:c8:
                    1f:8b:20:b0:b0:65:77:0a:27:99:12:42:c9:fb:8e:
                    1f:db:3a:b9:8d:7f:76:e9:5c:7a:c9:ad:6b:b0:2d:
                    5d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B2:A0:F2:1A:66:73:62:50:72:CA:23:B1:E7:A0:6C:22:6D:27:9F
            X509v3 Authority Key Identifier:
                keyid:05:E1:D0:7D:E6:F1:28:F4:69:C4:C3:B3:02:8A:DF:8D:4D:37:E2:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BeHQfebxKPRpxMOzAorfjU034tk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ce8f5-fed2-47ea-83b3-8d13f7b3f142/1/BeHQfebxKPRpxMOzAorfjU034tk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:87:98:33:89:f9:ae:54:66:68:1d:c8:4d:30:2e:3e:82:97:
         16:e8:ac:3b:24:65:cc:cf:72:0b:49:08:c3:99:20:fd:00:b6:
         eb:77:6b:08:db:56:b0:40:45:56:ec:e0:3d:d8:07:6f:4b:df:
         0e:0a:7a:ce:55:ad:ba:c3:1e:23:8b:d5:8e:a3:f1:a7:68:ad:
         ec:1e:85:1d:82:78:1f:87:50:eb:f5:a1:37:67:0b:fa:4b:cd:
         1d:99:31:11:f5:1e:7d:ba:05:74:aa:4a:35:e9:a4:ed:3d:90:
         cb:a0:6c:0b:24:44:bb:4f:e8:cd:7f:ce:13:59:8d:a0:0f:85:
         64:b3:ea:34:1d:e1:7e:b4:a0:25:d2:ed:67:83:2e:79:c5:69:
         68:a8:5b:05:5e:d3:9a:0c:f0:6a:b2:10:99:68:95:3a:28:a4:
         b7:b7:7b:9d:6e:2d:72:ba:e4:62:74:e6:6d:b5:a2:bb:a3:5c:
         68:20:08:ff:99:8b:7d:49:08:cb:11:f2:86:b8:4a:07:dd:25:
         c4:dc:f1:33:76:75:ab:ab:5d:c2:76:4e:f9:30:d5:73:48:07:
         0e:6c:e1:ea:f7:11:d4:db:3c:57:e1:e2:0f:5e:5f:47:e3:6a:
         53:26:09:00:c9:d2:3e:d0:83:b2:42:4f:5e:99:c7:e3:d0:0f:
         72:e3:23:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----