Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
File:                     Bcij-qGLbXF6ovdiIYG62L5bVaM.mft (raw, json)
Hash identifier:          JG40Nhz5Q0TIs1ZicPTjam7Xp7Eux5CL/LlNtvS9UaU=
Subject key identifier:   B1:12:B6:F1:24:00:84:BA:E9:88:D2:3B:F2:14:13:89:73:A8:49:A4
Authority key identifier: 05:C8:A3:FA:A1:8B:6D:71:7A:A2:F7:62:21:81:BA:D8:BE:5B:55:A3
Certificate issuer:       /CN=05c8a3faa18b6d717aa2f7622181bad8be5b55a3
Certificate serial:       01962F06D9B46583884DAB3DA1B46150158A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:40 +0000
Files and hashes:         1: Bcij-qGLbXF6ovdiIYG62L5bVaM.crl (hash: +N4HgzSfe4NJKaBzXOpcQx+Q7UbxRxGqG6nFSdbOyow=)
                          2: tNEEVzPUvK-ygDPmYLA5K9Cm79o.roa (hash: /IY44KTu7ulQ8DUrvEAnJ6AB/WTV2xBTm/RnCC+27ZU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d9:b4:65:83:88:4d:ab:3d:a1:b4:61:50:15:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05c8a3faa18b6d717aa2f7622181bad8be5b55a3
        Validity
            Not Before: Apr 13 12:01:40 2025 GMT
            Not After : Apr 14 12:01:40 2025 GMT
        Subject: CN=b112b6f1240084bae988d23bf214138973a849a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:68:af:71:09:5e:53:f4:78:84:4c:51:43:12:
                    0f:57:f6:b9:c4:ea:a9:46:f2:22:6f:f1:c6:45:70:
                    72:ca:fb:82:57:d2:2d:3e:73:b0:4d:29:f6:84:35:
                    d8:9b:e0:12:fe:c7:10:e8:3c:79:82:81:de:4b:b2:
                    e9:cf:2a:f5:7d:13:86:76:4d:69:83:a7:8f:02:2a:
                    54:b7:29:48:0c:72:fa:e1:03:fe:8f:a3:98:8d:db:
                    34:22:04:37:8f:12:6c:9b:b3:42:11:17:3d:c4:87:
                    d1:ae:61:2a:e6:63:c0:e9:f0:ff:c8:3e:a1:2f:1c:
                    4e:7e:b0:7e:10:a2:1f:31:6f:a4:a0:d1:ea:91:7f:
                    6a:69:7c:a7:89:41:9e:73:1c:fc:7c:dd:9f:98:6d:
                    8a:c4:cc:8e:af:c0:5c:d7:9d:19:1f:0e:d9:69:f9:
                    9d:4b:15:52:99:5c:c5:c4:dd:ad:7a:72:a5:71:6d:
                    3b:94:35:15:9b:18:1b:fa:51:91:ba:9f:07:3c:49:
                    8a:13:e1:67:f2:8c:f2:b3:be:bb:1d:c0:d7:09:5d:
                    7a:a8:f9:dd:49:78:d5:33:83:0b:6f:45:a7:1c:5f:
                    97:03:d1:9d:bb:45:0e:5a:aa:cb:ca:36:42:2d:a3:
                    f9:b7:0a:a7:4a:68:cb:7c:75:ad:4b:c7:c6:81:58:
                    62:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:12:B6:F1:24:00:84:BA:E9:88:D2:3B:F2:14:13:89:73:A8:49:A4
            X509v3 Authority Key Identifier:
                keyid:05:C8:A3:FA:A1:8B:6D:71:7A:A2:F7:62:21:81:BA:D8:BE:5B:55:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:89:71:a1:0e:c4:3b:7e:3f:50:dc:96:12:a3:17:74:0a:e8:
         6a:b0:77:00:e6:2d:3c:88:25:4f:0b:c3:81:42:33:ef:8d:a1:
         ab:e8:e4:b2:8c:c2:ac:f0:f3:30:f4:b7:23:ed:e0:15:5a:13:
         4a:6f:29:f0:47:f0:2c:e4:a9:1f:c0:44:28:0c:dc:f0:75:fb:
         f3:4d:26:d0:cc:d2:b6:af:40:b1:0e:59:39:ca:9b:1f:e4:a9:
         50:dc:53:01:a3:28:30:c7:40:19:fc:5d:4f:66:40:d4:27:71:
         82:9e:ea:6f:d9:3c:7e:ca:e8:6b:a5:54:d0:08:94:fa:74:df:
         21:5a:c5:b0:eb:b4:14:38:cc:5b:24:22:88:b7:8a:d3:6a:19:
         36:27:48:5c:6e:cd:94:ae:c1:1e:a0:b0:c8:63:9a:ca:db:ea:
         8d:d3:70:19:c7:43:50:03:40:87:32:7a:a0:2b:c4:d6:2e:29:
         12:66:0f:23:0d:7b:77:da:97:7e:59:dd:10:05:e0:d5:d5:3a:
         65:66:ba:d1:75:bb:d9:2e:32:4a:5a:b5:06:99:5e:33:75:88:
         3f:d4:36:13:14:4f:e9:fd:1c:32:ef:05:da:ad:b4:6f:50:f4:
         6e:16:3f:2a:0f:26:6b:e1:fb:01:d8:bb:c0:0e:30:9a:bd:af:
         04:ce:e5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----