Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.mft
File:                     a-BR-5PgFam3YbtFr-EJ2740fGY.mft (raw, json)
Hash identifier:          EmjJuYJQH7Bbk49L65WR6VYQI5KGaR+ILPO/JvFCSNE=
Subject key identifier:   5B:F4:80:A2:C2:5B:DC:3E:1D:8C:BB:56:B2:8A:74:27:2E:D1:22:33
Authority key identifier: 6B:E0:51:FB:93:E0:15:A9:B7:61:BB:45:AF:E1:09:DB:BE:34:7C:66
Certificate issuer:       /CN=6be051fb93e015a9b761bb45afe109dbbe347c66
Certificate serial:       01962F743638D4EE7F6CF7F8E04B56803329
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a-BR-5PgFam3YbtFr-EJ2740fGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.mft
Manifest number:          049B
Signing time:             Sun 13 Apr 2025 14:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:07 +0000
Files and hashes:         1: a-BR-5PgFam3YbtFr-EJ2740fGY.crl (hash: ju4QYfXr9FsIzNsRf4U2q7JirsxfohWOMOAl6co6lrI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:36:38:d4:ee:7f:6c:f7:f8:e0:4b:56:80:33:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6be051fb93e015a9b761bb45afe109dbbe347c66
        Validity
            Not Before: Apr 13 14:01:07 2025 GMT
            Not After : Apr 14 14:01:07 2025 GMT
        Subject: CN=5bf480a2c25bdc3e1d8cbb56b28a74272ed12233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bd:e5:0f:0b:16:5e:00:88:85:a6:71:a2:f9:
                    9b:e3:57:14:c2:3c:3e:a2:e5:d1:92:40:c9:17:10:
                    4b:cb:a5:67:2b:43:e7:26:11:5e:e4:8d:39:42:6c:
                    93:48:41:0d:59:d1:8e:44:9a:06:34:01:cc:90:87:
                    74:df:93:3a:69:7d:9b:16:fb:fa:64:c8:e4:2b:e6:
                    82:d6:23:17:56:5f:14:e7:a6:66:ec:4a:50:97:35:
                    78:70:88:33:d7:86:d6:bf:df:43:cf:f3:ea:05:e6:
                    a6:1c:42:3c:0a:a1:28:2b:f5:35:61:73:aa:f1:b9:
                    d9:17:fd:21:83:b8:73:a4:b1:9c:85:f3:fa:0d:ce:
                    2e:ee:51:f6:15:88:5d:0f:fa:30:86:8a:17:1e:18:
                    b0:83:db:e2:4e:81:08:aa:4e:1b:a9:f7:67:49:55:
                    33:77:50:a7:fc:47:ed:c0:c2:7e:94:50:54:20:3e:
                    d4:9b:f0:12:1e:99:78:c2:5d:b0:8b:44:31:7d:f5:
                    e5:0d:bb:32:82:7b:fa:8d:c7:60:7d:ac:40:96:e2:
                    54:c2:a0:35:73:62:ab:55:7d:b9:ba:2a:f9:ee:79:
                    fc:a8:48:bd:b1:b3:b8:07:62:dc:74:dd:58:9a:26:
                    89:f9:37:b6:cd:2b:d5:2e:9a:fa:71:30:9a:68:e9:
                    41:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F4:80:A2:C2:5B:DC:3E:1D:8C:BB:56:B2:8A:74:27:2E:D1:22:33
            X509v3 Authority Key Identifier:
                keyid:6B:E0:51:FB:93:E0:15:A9:B7:61:BB:45:AF:E1:09:DB:BE:34:7C:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-BR-5PgFam3YbtFr-EJ2740fGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:85:48:c5:3b:e0:85:a1:2f:78:17:cf:c8:93:a5:1e:ec:4d:
         41:0e:80:13:37:46:b0:01:e4:44:5c:e8:a0:5c:36:3d:2c:d1:
         25:24:cf:6d:f0:02:a3:69:34:22:c4:e1:ed:d0:c6:e5:20:cb:
         e5:54:9b:ce:b5:34:fe:32:af:97:16:0a:b7:fa:36:ab:20:15:
         0e:e2:92:50:00:d6:e6:7e:3a:87:17:27:8d:bf:cb:d5:f8:9c:
         ef:0b:9e:52:5e:61:77:3d:16:ce:d1:b7:72:d2:9a:3f:af:d1:
         8e:44:a0:58:9d:ef:9d:4d:f7:d9:19:da:24:4c:07:c0:49:a6:
         e7:b5:ce:9f:f4:18:3a:2c:b6:48:fc:e4:5d:64:7d:8a:61:ed:
         43:80:66:94:cb:43:a7:34:04:29:97:e9:2d:0f:5b:6c:39:69:
         5b:82:f0:15:01:db:82:2e:3f:2c:ac:e6:61:f4:49:8f:cf:d8:
         c0:f6:f0:06:9d:3c:af:5a:b1:91:71:97:3f:69:51:39:b6:ef:
         45:8c:9d:c2:40:ef:d1:1d:27:53:12:28:19:62:f1:0f:6b:b9:
         3c:e8:dd:48:e7:4f:b7:33:1e:59:80:f8:f5:f4:33:19:e0:73:
         47:69:56:2a:77:2b:f6:ee:be:64:98:fe:c2:d0:ed:42:1d:8b:
         0a:8f:d6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----