Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft
File:                     V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft (raw, json)
Hash identifier:          G0s7vlqTNUjHl8WRz68DUzXcDT0l/cZG60bibVmTMg0=
Subject key identifier:   C3:D5:F7:BE:72:DF:26:34:9E:A1:B2:97:34:23:85:DD:46:08:03:A1
Authority key identifier: 57:50:4A:4E:FD:51:DC:95:84:7C:15:6F:4A:36:DB:FE:55:83:C2:B0
Certificate issuer:       /CN=57504a4efd51dc95847c156f4a36dbfe5583c2b0
Certificate serial:       01962ECF91D399DCE9F79895254F27742912
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1BKTv1R3JWEfBVvSjbb_lWDwrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft
Manifest number:          147B
Signing time:             Sun 13 Apr 2025 11:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:17 +0000
Files and hashes:         1: LO_AdzfatF4C9sIs1o52EbzmDNE.roa (hash: bUjCYFRihUcJ3W4Hnr4B5vT5UkBAyoxGKHKJzbwXNm0=)
                          2: V1BKTv1R3JWEfBVvSjbb_lWDwrA.crl (hash: R6Sm1mwkqgtZzJTYTpa5gI8SOWte8QVXKtD9W0PX9Vg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:91:d3:99:dc:e9:f7:98:95:25:4f:27:74:29:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57504a4efd51dc95847c156f4a36dbfe5583c2b0
        Validity
            Not Before: Apr 13 11:01:17 2025 GMT
            Not After : Apr 14 11:01:17 2025 GMT
        Subject: CN=c3d5f7be72df26349ea1b297342385dd460803a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:56:f6:fc:7f:cb:99:c5:56:f0:35:af:bb:a6:
                    c3:59:fa:80:ad:0e:8b:c4:cb:bf:f3:7e:30:af:80:
                    92:24:99:32:03:67:de:64:ca:58:60:4f:1d:aa:58:
                    b5:69:e4:e3:ba:f6:01:11:83:a9:0e:75:81:ae:ee:
                    3d:01:ff:5f:cf:75:00:d3:39:69:7d:82:ca:fb:09:
                    34:87:b5:40:af:7e:2a:d7:b1:64:85:83:44:b8:e7:
                    0a:07:b6:7c:c9:f4:01:2e:fc:b1:4e:c4:ba:08:ef:
                    98:b7:5f:14:57:dd:89:4d:3e:a0:77:2b:5c:18:b4:
                    ea:bc:b6:c9:0d:26:43:3f:f0:ee:dd:7f:7a:33:2b:
                    da:e2:47:e4:be:a3:b2:10:ff:c2:98:70:5a:41:17:
                    b9:fc:36:15:85:06:8a:cb:6b:a0:7a:da:a0:94:d5:
                    8c:e1:f1:5c:3e:9a:73:30:8e:b6:09:e0:1f:63:ae:
                    ac:2d:17:64:a4:a9:89:bf:1b:3a:e0:cf:d2:56:45:
                    3b:0b:45:5c:c8:dd:4e:80:3f:3e:a8:69:15:f0:2d:
                    f4:b3:98:38:52:7a:b7:08:fe:fe:ce:82:a9:72:5a:
                    5b:f8:5a:52:d6:99:63:1d:27:7c:d0:44:6d:76:be:
                    ed:23:b9:e9:c8:f3:4a:af:e7:54:ce:14:4e:59:52:
                    0f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D5:F7:BE:72:DF:26:34:9E:A1:B2:97:34:23:85:DD:46:08:03:A1
            X509v3 Authority Key Identifier:
                keyid:57:50:4A:4E:FD:51:DC:95:84:7C:15:6F:4A:36:DB:FE:55:83:C2:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1BKTv1R3JWEfBVvSjbb_lWDwrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:9e:36:1b:81:ac:3c:ef:47:f5:36:16:1a:6f:46:9f:c7:05:
         d6:52:ee:0a:8e:cb:ec:9a:21:99:36:89:aa:20:5a:27:6d:7d:
         a6:0d:f4:70:95:10:43:ec:5b:5d:d2:9f:5d:73:61:71:22:b8:
         87:ca:da:cc:6b:76:90:76:9d:f7:1d:4e:e4:c1:54:12:48:50:
         cc:64:c4:28:dc:10:1b:9f:9d:f9:87:48:ad:67:b3:7b:c0:7c:
         50:2f:d9:a2:19:fb:79:1c:83:44:55:1c:67:fb:a4:7e:f1:c3:
         48:3f:c1:62:db:6e:42:bf:c6:91:98:79:47:5a:89:e7:94:f7:
         07:16:8e:ce:e4:42:66:23:62:46:4f:b5:22:5c:19:09:7d:d4:
         3c:88:2f:88:39:9d:99:a7:68:5c:d5:c1:65:71:be:09:eb:ea:
         c2:bd:dc:6b:c9:21:b3:3d:44:e5:5d:a6:d1:3b:fe:9d:84:b3:
         63:8e:7e:fb:3f:63:a0:80:55:71:92:8d:9b:44:fc:d6:4a:f4:
         22:23:0b:2f:d7:db:9f:6c:fa:44:13:49:7a:5e:33:08:a3:77:
         38:f7:12:fd:11:64:6b:b6:00:1a:39:05:05:a9:05:1f:96:97:
         f7:55:1f:64:f6:01:db:76:5c:61:1b:2c:ad:f4:13:a4:54:37:
         b5:c5:55:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----