Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
File:                     BA3T08UtTG-lG3qDNXjO-zqyZkk.mft (raw, json)
Hash identifier:          pjOJiN/6iM0IHlhsZ/rV37IU2qMyrgfybpgvFO9Dla0=
Subject key identifier:   4F:45:C4:D6:EF:14:30:34:71:70:53:BF:3C:11:3B:BB:99:C9:72:E0
Authority key identifier: 04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
Certificate issuer:       /CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Certificate serial:       01962FA49EF955A1D7D8D381BC655D24020A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 14:53:59 +0000
Manifest this update:     Sun 13 Apr 2025 14:53:59 +0000
Manifest next update:     Mon 14 Apr 2025 14:53:59 +0000
Files and hashes:         1: BA3T08UtTG-lG3qDNXjO-zqyZkk.crl (hash: NBfyuHO6rY5H3Pdglvh0+Fq1IGhiAOs/avpAgGG4ayc=)
                          2: CZQw40ubgHVu1Jof03ClaqRzNO0.roa (hash: ryau3A+d+gfpE7i1EIyrHi9oMGq0/6OLOcTA/JPeZzo=)
                          3: jLbMl-iRXo5CtEApXDgnLFSdrEQ.roa (hash: nHgsQuuO7Y9rP7+Bsj4rZpGDnYmOC1HMRfXo6zw5zbc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:a4:9e:f9:55:a1:d7:d8:d3:81:bc:65:5d:24:02:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
        Validity
            Not Before: Apr 13 14:53:59 2025 GMT
            Not After : Apr 14 14:53:59 2025 GMT
        Subject: CN=4f45c4d6ef143034717053bf3c113bbb99c972e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:60:65:8e:72:ae:a3:81:e8:e2:1d:f9:c0:17:
                    34:bf:4f:02:a0:2e:e2:6e:5f:b2:11:3e:1e:ce:4a:
                    ed:34:83:65:e2:19:82:df:e8:dc:9b:06:b8:de:94:
                    dc:17:ed:7c:51:d0:0f:1d:6e:e9:70:5d:d5:93:b4:
                    bf:8b:06:a4:e1:e8:e9:ef:aa:24:1e:7b:c0:4b:a3:
                    53:30:3c:2f:b7:00:50:41:7c:c5:12:35:8a:6b:40:
                    ce:fc:f3:99:cf:8c:92:e1:07:98:4d:41:51:87:d4:
                    e0:ba:11:f2:59:2e:5a:d8:eb:ef:ba:5c:97:c3:a5:
                    fb:b7:47:cc:d3:00:0d:cc:87:d8:d3:1d:e1:20:21:
                    29:3d:3e:3f:5d:bc:3c:0a:48:ba:c4:39:f7:16:cb:
                    6a:a1:c8:ec:79:08:e5:b6:d5:40:01:36:d5:34:07:
                    4a:05:d5:41:58:54:68:4b:cf:3f:f6:4a:f4:f3:71:
                    2e:61:4e:c0:a1:d4:43:22:5b:14:44:9f:12:f2:23:
                    dc:ab:8c:43:7f:12:4c:6f:b5:ba:da:06:39:4b:9d:
                    c3:c7:7b:c9:71:fb:59:59:eb:54:ee:d4:db:03:21:
                    ae:b8:28:e2:02:43:4c:ff:db:eb:62:2e:99:a0:74:
                    90:a5:a9:99:49:3e:43:f8:38:c6:64:2a:4a:79:c4:
                    f2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:45:C4:D6:EF:14:30:34:71:70:53:BF:3C:11:3B:BB:99:C9:72:E0
            X509v3 Authority Key Identifier:
                keyid:04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:0e:ac:d6:47:9d:f1:9f:5d:ec:46:21:e6:55:53:3e:a2:1c:
         f6:dc:a3:06:91:a1:38:3f:48:60:e3:99:ee:b9:06:0d:52:23:
         7e:9a:f0:06:87:bc:11:c5:16:eb:53:e2:37:30:79:ec:d3:dc:
         0b:7b:0c:6e:45:18:2a:36:d6:61:f8:4c:ff:6a:28:20:19:7e:
         24:30:dd:3a:44:b0:66:02:bc:a8:8c:18:01:44:8b:90:e3:0a:
         f7:c4:55:32:f6:3f:9d:98:4d:10:1a:c5:e3:8e:40:49:c4:08:
         9d:ac:5f:43:29:0e:a8:1b:5f:86:c5:2b:a3:18:87:ff:66:c7:
         e3:7e:af:97:85:d1:88:8e:be:8d:21:a6:b7:ca:6e:27:28:c4:
         2b:06:90:d0:90:b4:f7:72:90:a1:10:86:2e:20:0e:57:4c:3a:
         55:43:e8:59:56:d8:f8:7b:9a:03:17:db:af:5b:41:e6:b7:cc:
         db:bd:fd:b9:73:12:f7:c6:89:07:ca:b1:08:71:bd:0a:4d:d0:
         c2:44:df:cb:b9:6b:bf:2e:85:30:e7:fc:da:12:59:26:a5:74:
         70:58:7c:f9:18:0d:13:62:74:50:c6:45:5e:ec:ff:f6:3e:89:
         3f:b8:43:a7:88:6a:cd:78:4c:f1:7c:d7:62:4e:b5:7f:44:44:
         64:26:f3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----