Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft
File:                     BLHnVu2xw70vV2afWCv2qVG4P0g.mft (raw, json)
Hash identifier:          jbn+IDUeW8LxO3xL4ceT16pzdFD7tsXhK2ts56bq5gM=
Subject key identifier:   9F:D0:6C:11:A4:20:5A:08:96:02:EA:3A:C5:42:2A:53:80:57:18:20
Authority key identifier: 04:B1:E7:56:ED:B1:C3:BD:2F:57:66:9F:58:2B:F6:A9:51:B8:3F:48
Certificate issuer:       /CN=04b1e756edb1c3bd2f57669f582bf6a951b83f48
Certificate serial:       01962E61A37770A2F45FCAB651B94D1E0BD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BLHnVu2xw70vV2afWCv2qVG4P0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:12 +0000
Files and hashes:         1: BLHnVu2xw70vV2afWCv2qVG4P0g.crl (hash: qz0kRzM1UIG/ebibVCuQIoQdIfzUj3TmrQJ622DIEBc=)
                          2: RK9xACY5XxzSQaeBbJjDwmPGdFw.roa (hash: Z9/aIdSLDIxdeAqdfXn6u/SeZl9dpZ2YPR093LrIQCs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a3:77:70:a2:f4:5f:ca:b6:51:b9:4d:1e:0b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04b1e756edb1c3bd2f57669f582bf6a951b83f48
        Validity
            Not Before: Apr 13 09:01:12 2025 GMT
            Not After : Apr 14 09:01:12 2025 GMT
        Subject: CN=9fd06c11a4205a089602ea3ac5422a5380571820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a7:2e:74:e9:41:8e:0b:89:62:ee:e6:c5:6f:
                    9b:a5:17:c5:e7:fb:ac:be:05:91:46:17:2d:39:61:
                    d7:7f:03:4c:d1:8f:ef:85:e5:d4:d2:36:51:f1:51:
                    7b:4d:0e:7d:42:9f:7c:b8:a0:49:27:e7:d8:ac:15:
                    1d:25:fe:17:a8:0f:14:7b:5b:8d:24:02:f9:11:24:
                    88:f8:fc:f7:a2:50:90:ff:b1:73:c0:90:e6:93:e3:
                    7b:69:f6:20:57:3e:6d:8d:da:42:8d:60:0e:e7:46:
                    a8:b3:af:70:64:1e:05:1d:8c:c9:21:5a:ab:84:ef:
                    46:fc:7a:51:92:5b:b2:3a:84:bf:7e:c7:f6:70:2b:
                    ce:81:f5:db:98:ed:b6:29:f0:ab:bf:d4:09:7e:12:
                    ba:c8:af:5b:4a:d4:d8:5f:fe:46:d6:77:03:16:59:
                    77:94:e9:5d:66:40:34:59:6c:7e:97:30:3e:88:f1:
                    a4:a4:c2:53:0c:35:6c:37:16:d4:5f:d2:0a:56:a4:
                    d9:c6:8c:16:b4:a0:d5:23:b3:db:3e:09:fc:13:0f:
                    aa:b3:21:00:d4:01:16:c5:93:8d:0f:95:7a:62:9f:
                    68:8c:d4:6d:e7:01:69:67:bf:1b:d8:3b:47:59:7c:
                    dc:92:34:a6:28:e7:18:97:08:19:50:48:72:5c:db:
                    33:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D0:6C:11:A4:20:5A:08:96:02:EA:3A:C5:42:2A:53:80:57:18:20
            X509v3 Authority Key Identifier:
                keyid:04:B1:E7:56:ED:B1:C3:BD:2F:57:66:9F:58:2B:F6:A9:51:B8:3F:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLHnVu2xw70vV2afWCv2qVG4P0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a5b368-3313-4132-9897-d017957ea39e/1/BLHnVu2xw70vV2afWCv2qVG4P0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:10:af:c9:61:a2:41:e7:05:f7:df:17:eb:32:36:46:81:62:
         36:39:1a:ee:2f:99:3c:0a:ad:79:1a:ab:3f:93:db:6b:8b:b9:
         b1:d9:db:e6:e4:b9:95:1c:7e:d0:c0:9d:1e:da:d0:37:56:d1:
         35:ce:88:aa:c6:6d:e8:fb:44:18:c7:5d:f6:22:5c:5e:e5:b7:
         9e:56:52:61:5f:62:2d:1c:bc:25:c8:ac:9c:7c:f3:0d:eb:10:
         ca:58:0b:fc:b7:cc:d1:25:c9:c0:5c:8b:9b:de:d0:73:43:6c:
         8e:c2:15:f6:2d:0b:6d:46:0c:40:10:bd:64:39:c8:89:36:f1:
         24:e7:07:42:fd:b6:8f:29:d3:ab:73:ca:87:85:22:f7:f9:75:
         25:24:65:6a:4d:e0:00:51:5e:29:f4:d9:fe:33:89:5b:c5:5e:
         5d:c3:40:53:3f:4e:47:79:b9:4d:a8:56:77:3a:93:60:57:26:
         1a:01:6f:2f:04:c6:0e:2c:ae:67:b8:f5:5f:98:2e:2a:c6:5b:
         2b:b2:56:7d:fd:1d:f3:68:61:1e:0a:c4:78:9b:e5:61:50:22:
         f5:8c:d8:f9:90:d1:f7:34:42:40:ad:51:43:a0:ff:e3:dd:bb:
         47:ce:08:c1:97:3b:d1:ff:04:1e:30:f0:0d:6d:87:eb:fc:b0:
         04:02:1f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----