Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
File:                     BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft (raw, json)
Hash identifier:          uGqgmZ2bDTIONPGpN2yXa46Ld/jH2VgiZCSpd+q08tk=
Subject key identifier:   95:5A:52:65:45:F9:DD:DF:31:6C:8E:F5:B2:CC:51:00:4C:FB:34:37
Authority key identifier: 04:D2:92:11:F9:2E:56:0F:0B:78:34:BB:29:32:AC:63:CA:BF:A1:4A
Certificate issuer:       /CN=04d29211f92e560f0b7834bb2932ac63cabfa14a
Certificate serial:       01962FAB32E37059BCC52AE22285A884ED88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BNKSEfkuVg8LeDS7KTKsY8q_oUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
Manifest number:          09CF
Signing time:             Sun 13 Apr 2025 15:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:10 +0000
Files and hashes:         1: BNKSEfkuVg8LeDS7KTKsY8q_oUo.crl (hash: PxJHcaUZwIxJLWOsaDDJORQTAUZPr0wQKZl+lJg2EQQ=)
                          2: dShe1ipT6-Y_-edVr4eNtxtPKAo.roa (hash: 34QucPlafnV+iMZk3j4FDiUJFtGuS1f17YL6xBvVoIo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:32:e3:70:59:bc:c5:2a:e2:22:85:a8:84:ed:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04d29211f92e560f0b7834bb2932ac63cabfa14a
        Validity
            Not Before: Apr 13 15:01:10 2025 GMT
            Not After : Apr 14 15:01:10 2025 GMT
        Subject: CN=955a526545f9dddf316c8ef5b2cc51004cfb3437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:91:00:23:c9:93:ae:16:98:c0:b7:36:4d:3f:
                    17:ca:85:88:be:0b:91:23:05:17:9b:51:19:5f:87:
                    68:96:97:af:c4:34:3d:e6:da:08:93:bf:11:3e:b7:
                    c8:69:44:f3:28:9a:ca:64:53:dc:10:0b:f8:bc:fe:
                    bc:0f:19:f8:6c:42:86:f6:94:94:54:4e:38:98:57:
                    b2:0f:28:ef:8f:9f:e0:50:68:d1:93:60:0d:95:c2:
                    50:f4:bf:6d:79:e3:d2:0c:ac:b7:8c:59:5a:60:fe:
                    46:e2:53:69:a1:dc:16:44:df:cc:04:b1:19:3d:b4:
                    d6:8e:14:33:28:d7:71:88:e7:be:55:22:7e:3e:9c:
                    62:7f:98:a8:1b:4a:73:d1:84:28:31:d1:ea:1b:bd:
                    66:06:f3:3b:47:b1:25:52:5b:a6:18:41:92:8c:da:
                    a0:b9:42:21:c1:43:3a:bc:33:52:6d:21:5f:78:a6:
                    0d:1a:3d:f3:bb:8e:a2:9c:a0:a8:28:94:f8:7e:aa:
                    8a:21:75:ff:60:c2:a5:b3:80:f2:d0:f9:a8:ab:a1:
                    6a:43:26:43:df:23:4c:b2:a2:83:38:56:62:09:0a:
                    35:36:4d:34:46:3b:06:d0:43:a5:ca:7c:70:aa:de:
                    0a:08:a9:b1:f6:ff:19:2b:7e:f4:c9:77:3c:e6:07:
                    06:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:5A:52:65:45:F9:DD:DF:31:6C:8E:F5:B2:CC:51:00:4C:FB:34:37
            X509v3 Authority Key Identifier:
                keyid:04:D2:92:11:F9:2E:56:0F:0B:78:34:BB:29:32:AC:63:CA:BF:A1:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNKSEfkuVg8LeDS7KTKsY8q_oUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:b3:ad:47:e8:a8:97:4f:e7:2a:13:55:d7:11:1e:ea:20:84:
         f0:68:be:03:32:f6:ce:4d:57:ba:ef:d3:36:e7:48:04:a5:5c:
         e2:3d:1a:51:a5:d2:e3:45:15:55:f0:52:8d:8c:b7:7e:4a:24:
         61:9d:0e:51:cc:80:4c:f1:03:9a:58:74:77:47:58:96:c0:bd:
         d5:a6:08:c8:08:b3:0c:86:37:94:85:ab:39:18:35:c9:21:39:
         6c:c8:e0:10:ea:fa:83:ef:5a:7b:6d:72:1f:12:ad:e8:70:2b:
         2d:2b:ec:e2:7c:72:b7:83:e7:36:90:9a:aa:31:f8:31:31:88:
         75:b5:c4:8f:52:05:c2:b8:bc:36:63:04:d0:b3:fc:0c:d8:52:
         de:56:5f:c8:90:86:67:51:f9:2d:53:c4:9b:26:75:4e:ef:b1:
         35:bb:0e:66:af:99:de:f0:e9:67:af:07:07:bd:68:f9:eb:d7:
         88:f8:73:1f:40:24:fb:d6:cc:32:f3:30:f2:0c:54:89:a6:1b:
         6f:76:fc:44:ab:a5:5c:75:2d:da:7a:ae:18:5b:25:b4:3c:e6:
         67:cc:5c:2e:7f:cf:0f:8f:d1:39:1c:f5:f1:23:ae:d7:5e:7f:
         68:b6:19:a6:88:b5:8e:98:e2:8c:9c:48:83:46:07:6b:8e:e1:
         fe:eb:34:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----