Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
File:                     BG5SgQdApuwTSZPbya0RtkVNmno.mft (raw, json)
Hash identifier:          iuSd04puRPtjvbW/fzi7bRup3/0iZwNjlhp+/GgnMbI=
Subject key identifier:   2B:E0:32:A0:D2:68:89:CF:CA:4B:1E:06:B7:4E:64:19:82:DD:2D:09
Authority key identifier: 04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A
Certificate issuer:       /CN=046e52810740a6ec134993dbc9ad11b6454d9a7a
Certificate serial:       01962E2B2B59E936E908BA35BB0239AEAAD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft
Manifest number:          04DD
Signing time:             Sun 13 Apr 2025 08:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:43 +0000
Files and hashes:         1: BG5SgQdApuwTSZPbya0RtkVNmno.crl (hash: LylV5T2gHngqquf9r624OuL0Tla0JcJN1co/jrX9p88=)
                          2: V1gcgrRQvSf2dtL0E41D42XNa0c.roa (hash: J5zYvKNdV+l5Y6eVeDRqi8ebNs+g0KhpZ1mPMI4wWZE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2b:59:e9:36:e9:08:ba:35:bb:02:39:ae:aa:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=046e52810740a6ec134993dbc9ad11b6454d9a7a
        Validity
            Not Before: Apr 13 08:01:43 2025 GMT
            Not After : Apr 14 08:01:43 2025 GMT
        Subject: CN=2be032a0d26889cfca4b1e06b74e641982dd2d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:64:f0:80:e7:58:cb:53:2a:32:ea:61:d3:96:
                    43:dc:eb:a3:b4:e0:18:3e:4e:d1:19:af:4f:07:ab:
                    d0:f1:0e:7b:1e:9f:5a:b2:ae:79:66:7b:16:c5:6e:
                    c7:13:16:18:a0:dc:54:44:12:07:45:80:f5:b5:02:
                    bd:24:10:e5:b5:ea:bc:8e:9b:0d:60:41:e8:f5:a5:
                    a8:9a:f5:ea:49:33:42:c8:b5:b8:a6:b0:47:6b:fb:
                    26:2d:ef:bb:8c:6c:00:0e:24:a7:6c:61:36:c0:49:
                    bc:ee:16:31:0f:90:7f:3b:34:97:9e:e0:b1:6d:c8:
                    dc:2b:81:69:e4:2c:95:db:4c:4c:0a:c9:24:6e:0f:
                    a3:20:d1:cd:28:11:5a:db:2f:93:2e:c7:73:ac:0f:
                    37:3b:64:fd:15:eb:74:56:11:0b:b8:82:7d:c1:51:
                    2a:37:0e:aa:ed:02:31:d5:70:e5:e1:6f:e7:3d:1c:
                    74:af:5f:2d:63:23:23:01:aa:3c:4e:5c:82:f9:a3:
                    76:8c:d1:18:36:b5:fe:35:52:a9:20:fd:ca:81:ed:
                    e7:81:d9:f1:5b:3f:97:5e:52:ed:13:f6:97:8c:f2:
                    26:69:b0:f6:0a:c6:f1:a5:c6:62:0e:28:e2:c1:a7:
                    51:0c:12:39:5b:7b:53:12:1b:0e:24:7d:32:25:4c:
                    4c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E0:32:A0:D2:68:89:CF:CA:4B:1E:06:B7:4E:64:19:82:DD:2D:09
            X509v3 Authority Key Identifier:
                keyid:04:6E:52:81:07:40:A6:EC:13:49:93:DB:C9:AD:11:B6:45:4D:9A:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG5SgQdApuwTSZPbya0RtkVNmno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/77a699-055b-407c-b12b-ad9542ad4f43/1/BG5SgQdApuwTSZPbya0RtkVNmno.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:54:04:0b:d7:05:ed:c3:60:b6:5a:04:6b:c0:bf:a2:5b:0b:
         bc:f3:3e:77:6a:a5:71:58:ad:f2:3c:89:c3:06:e5:27:67:91:
         d7:57:81:bf:26:60:8d:7f:8e:f2:60:bf:02:8a:27:75:c2:15:
         ca:1b:35:c2:6f:f8:e1:90:7c:5a:d7:18:20:86:b9:3a:a8:0f:
         ca:0f:c1:35:77:45:6e:84:39:35:5f:82:c6:8a:b5:e0:00:72:
         d2:8a:44:87:77:bd:fd:14:d4:14:80:d3:df:0a:29:09:b7:36:
         32:69:1a:03:4e:e2:2c:ce:cb:57:92:46:f0:96:97:7f:d1:ea:
         85:4e:ab:cf:a0:71:1c:31:47:b1:7b:c2:c2:c7:db:07:05:88:
         45:ce:fe:89:4f:ba:6f:dc:b8:90:9c:cc:4e:87:1c:a8:97:04:
         36:39:01:90:cf:e5:5a:e1:84:56:bb:31:81:c7:02:c3:23:94:
         b8:79:8e:81:ef:03:9e:01:0e:89:71:32:5c:c4:aa:1f:ca:5d:
         cd:d6:5c:e2:0f:c3:a3:a0:f3:af:2a:5e:56:c4:14:f2:04:24:
         fb:1f:ad:85:ef:e7:86:10:3a:80:04:1e:dd:51:c4:5b:52:f3:
         40:30:1a:84:fd:85:0d:59:82:21:eb:8b:94:e3:8c:e3:e4:cb:
         7f:a1:6c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----