Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
File:                     BGrKxxMSOFbUrmwWBUYCaE39B8s.mft (raw, json)
Hash identifier:          HiGOtls4nv9/Zyp8fLbloPYb9WJc6QeYG/LAyCwcocw=
Subject key identifier:   DA:09:77:4D:94:CB:B6:D2:19:A3:A9:D2:95:A4:2A:47:70:CF:18:74
Authority key identifier: 04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB
Certificate issuer:       /CN=046acac713123856d4ae6c16054602684dfd07cb
Certificate serial:       01962FAB23C5C448B999025AA10EA64F043B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft
Manifest number:          0332
Signing time:             Sun 13 Apr 2025 15:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:06 +0000
Files and hashes:         1: BGrKxxMSOFbUrmwWBUYCaE39B8s.crl (hash: J48Cwj2Y0J1zEkBbH+fuqmpr4FwMwoWVZORWXksPCYc=)
                          2: b_K-XO5P7WSoaWNrsvXhJvIjTbM.roa (hash: bfmFzTeuKRR28Ci+54IJObwwwONZ0pFYWnhKp/hu7PE=)
                          3: eKW1kuPZCd7Q2-wUVFiZHmqNaHE.roa (hash: E2zSiIhX/F8uFFD091DwlATetZWIqRRANFto/vLbHCQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:23:c5:c4:48:b9:99:02:5a:a1:0e:a6:4f:04:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=046acac713123856d4ae6c16054602684dfd07cb
        Validity
            Not Before: Apr 13 15:01:06 2025 GMT
            Not After : Apr 14 15:01:06 2025 GMT
        Subject: CN=da09774d94cbb6d219a3a9d295a42a4770cf1874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:cd:59:8f:29:ce:df:bd:5d:13:fb:44:cf:4a:
                    0e:d8:b8:f9:0c:d5:b8:71:d6:1d:ce:85:5e:86:0e:
                    8a:a2:df:43:cc:94:71:b3:5f:86:ef:29:48:97:51:
                    3c:ef:12:e2:11:6a:48:4e:bd:ed:62:f2:aa:48:b3:
                    b3:33:c1:34:43:3c:92:c3:d1:fb:75:c4:12:46:d3:
                    3c:7b:a5:2c:57:b0:0e:b4:ad:4a:30:b8:4e:77:1b:
                    e6:b3:66:a7:d0:de:6b:18:72:61:1b:87:d2:c9:23:
                    fd:d1:84:6f:39:90:60:57:3c:2e:39:e5:e4:36:07:
                    30:26:1f:42:26:a3:41:7f:2b:33:f5:ea:06:af:0a:
                    4c:db:72:21:4b:dc:81:7c:5e:52:b7:a6:3b:0d:9a:
                    13:c9:75:f9:e9:17:fa:06:41:dc:40:dc:7d:e4:32:
                    cd:ee:aa:fa:73:be:1f:56:f8:f9:a6:1d:75:b4:63:
                    1e:d2:b4:89:76:ac:de:fe:bb:f1:be:b1:2c:fa:0a:
                    c7:7a:94:de:10:60:0e:38:14:52:96:f4:07:e4:d6:
                    d1:d5:af:85:68:a8:c8:50:fd:00:d9:cb:25:f8:56:
                    20:d5:5a:79:27:af:65:9c:67:e5:39:52:81:ee:97:
                    d5:0c:2f:b0:47:6a:ca:de:c9:7b:1a:a6:15:9b:7e:
                    d4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:09:77:4D:94:CB:B6:D2:19:A3:A9:D2:95:A4:2A:47:70:CF:18:74
            X509v3 Authority Key Identifier:
                keyid:04:6A:CA:C7:13:12:38:56:D4:AE:6C:16:05:46:02:68:4D:FD:07:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGrKxxMSOFbUrmwWBUYCaE39B8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/4186e4-a2a0-4bda-bc88-e6e928ce534f/1/BGrKxxMSOFbUrmwWBUYCaE39B8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:5b:3c:2f:fd:d8:10:54:8d:39:0e:cf:76:fe:e3:be:6e:f9:
         ad:30:6d:e1:54:7f:99:6c:df:fb:5a:10:5e:16:b7:85:e8:b1:
         8d:af:22:9e:49:80:7b:64:73:58:91:3f:f5:86:12:5d:68:58:
         c8:d2:cb:23:0e:7f:29:3e:29:3a:66:26:95:e7:08:25:ae:94:
         a3:83:89:f8:50:ca:f6:a8:70:ce:25:ea:47:95:d2:23:88:5b:
         68:11:13:d4:cd:65:bd:14:39:a0:f5:37:b8:f2:11:36:1a:f1:
         84:d9:c3:57:a4:46:18:35:c9:06:e3:79:0b:19:1a:92:80:77:
         90:64:c5:58:ad:a2:c7:53:86:4d:34:38:34:32:bc:c3:f5:46:
         5d:70:07:25:37:14:04:92:2a:37:f2:d8:b2:b8:64:48:5d:a9:
         0c:90:dc:3e:ec:c9:40:91:a2:a8:30:1f:b4:be:54:91:a2:e7:
         d7:ce:2d:be:fa:e9:c3:b6:d4:f9:27:8a:94:2a:b7:e2:a9:e2:
         73:eb:74:53:3e:61:51:56:9c:4d:e5:64:fd:a3:7e:12:72:9f:
         09:fa:ca:68:99:20:7e:d6:72:3e:7f:b0:e3:b9:a1:b8:cd:07:
         60:96:95:c9:e4:0b:e9:c4:75:e3:e0:1f:b5:91:dc:8b:5f:51:
         ce:6a:8f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----