Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
File:                     BDaS8qHRvHb_f50pCRvtoIt7yWw.mft (raw, json)
Hash identifier:          6IgoSFo6n8mwCMyWEarrFK2g9t0dNKaUchBk3k8Sq+k=
Subject key identifier:   AB:74:A5:82:66:6E:F8:42:B1:BC:A1:CF:91:22:97:9B:A1:13:EA:1F
Authority key identifier: 04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
Certificate issuer:       /CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Certificate serial:       01962E2B025BC4C57F2F178F2B8CFC4F4FD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:32 +0000
Files and hashes:         1: BDaS8qHRvHb_f50pCRvtoIt7yWw.crl (hash: Cad7faUZAbFq8N0FAF3NMKyTAfRY+7udPXvg6DD/rN8=)
                          2: F5ASQ_x2NzqLG2YPK-IJMnC68oA.roa (hash: rL17KB2ZeYz5uA3Maczd8dyCWpJw7h3YziKqc9PF9RM=)
                          3: fKRgm3J38CdqPYWraPnwaBHZfSw.roa (hash: faZcv/HNNKoTcf9eyD+mOEilysgTYS2fYEJ0tHKXiUk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:02:5b:c4:c5:7f:2f:17:8f:2b:8c:fc:4f:4f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
        Validity
            Not Before: Apr 13 08:01:32 2025 GMT
            Not After : Apr 14 08:01:32 2025 GMT
        Subject: CN=ab74a582666ef842b1bca1cf9122979ba113ea1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8d:b0:90:01:d2:01:c3:de:36:22:43:91:28:
                    37:5a:58:4c:dc:59:b3:77:37:2b:62:8b:64:5f:b3:
                    87:bc:9c:26:32:02:a8:de:32:13:22:9b:1a:c8:f2:
                    bf:3e:68:c9:88:65:18:9b:18:f9:1a:28:97:ba:8d:
                    7e:bd:1d:bd:a7:75:2c:09:72:15:c5:d6:bd:6f:2e:
                    76:ab:5b:e0:2c:1e:15:3b:51:ac:b1:ec:46:a4:a0:
                    da:9f:c8:aa:aa:fd:1e:0f:61:a7:84:4a:81:30:9c:
                    57:a1:5a:de:43:e2:cf:50:2c:55:d4:91:af:53:3c:
                    03:f7:08:25:82:70:4a:48:e4:fa:b7:d2:27:d7:c3:
                    a7:45:22:dd:52:23:65:4f:c7:e4:81:52:7d:53:e3:
                    29:15:da:63:b8:0c:d1:78:e6:ae:52:f2:6f:6a:e2:
                    2f:48:a4:79:21:9e:09:3c:6a:f2:8b:8b:57:a3:28:
                    d6:0a:29:25:23:08:a5:99:bf:f0:11:91:63:fa:ca:
                    48:9e:86:b3:23:a7:3c:17:4a:5c:9d:3b:34:c8:7a:
                    a8:70:2b:63:ef:42:0c:63:10:ba:9a:0f:a8:93:c5:
                    b7:cb:48:92:a9:6a:03:c2:97:6f:7c:e8:e3:87:2e:
                    8e:e4:0d:ef:1f:b7:7a:04:b9:06:d6:65:43:43:99:
                    ce:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:74:A5:82:66:6E:F8:42:B1:BC:A1:CF:91:22:97:9B:A1:13:EA:1F
            X509v3 Authority Key Identifier:
                keyid:04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:de:26:a7:9a:04:bb:e6:df:a9:d5:66:12:b7:24:60:51:0f:
         30:83:18:5d:eb:5a:47:e4:7c:ce:2b:6d:35:03:f2:75:20:b7:
         ee:c1:45:af:cb:62:96:cf:88:0c:aa:be:af:f2:29:fa:52:e2:
         17:1f:eb:0a:1c:5e:9c:04:61:e6:2c:7b:9b:41:ed:79:bc:e4:
         fd:61:b4:34:1f:6d:9e:4f:21:31:17:f9:a0:9c:b2:40:a3:86:
         b9:85:ae:1b:0d:38:42:b5:0b:e7:2a:78:86:06:cf:bc:25:71:
         b2:b7:d3:4e:f4:c1:c4:7f:92:99:b3:f1:ef:42:64:32:a9:61:
         31:a3:dd:49:42:41:14:e5:25:b6:6d:df:6b:5d:49:ee:6f:13:
         23:3e:75:6f:a2:f8:50:5b:7a:4c:91:ad:c0:68:c2:32:59:23:
         a3:79:56:35:c2:9d:90:4e:a7:b3:dd:a5:76:0c:e1:cd:43:ad:
         3f:7f:f9:b8:cf:42:00:de:0e:7a:e6:99:14:b6:a4:b5:2b:22:
         e8:3c:3a:0f:2f:a4:e5:cb:44:a8:ba:76:6e:6b:a3:73:8f:81:
         10:1d:1e:34:bc:c0:ed:1f:ca:ea:e8:fa:42:b5:a4:d7:8a:48:
         68:90:1c:be:93:09:a8:62:13:c6:c7:65:87:9e:db:a3:a9:8f:
         08:dd:c7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----