Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
File:                     BpCRPbvu2t3pXc5HBFJihOeufMo.mft (raw, json)
Hash identifier:          V6N1wbB2zfKnx2aAjjbbamVw91YfAq7gi4aMQcNx8KI=
Subject key identifier:   93:70:74:1D:C9:64:E7:21:9D:70:3D:0D:BF:DF:48:DE:11:A7:68:75
Authority key identifier: 06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA
Certificate issuer:       /CN=0690913dbbeedadde95dce4704526284e7ae7cca
Certificate serial:       01962ECFDC46342213CB976865D58893BB7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
Manifest number:          147A
Signing time:             Sun 13 Apr 2025 11:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:36 +0000
Files and hashes:         1: BpCRPbvu2t3pXc5HBFJihOeufMo.crl (hash: whnV4EnCMBH8L57GZmdR5Fmr0qxABovtUo3+jjOulus=)
                          2: Iy7lkqpbyaSDL2grrU_SdETf7DQ.roa (hash: DorRUxYefmWL1rp1az3xVIzdxI7JSTisHh4gg2RZ6eo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:dc:46:34:22:13:cb:97:68:65:d5:88:93:bb:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0690913dbbeedadde95dce4704526284e7ae7cca
        Validity
            Not Before: Apr 13 11:01:36 2025 GMT
            Not After : Apr 14 11:01:36 2025 GMT
        Subject: CN=9370741dc964e7219d703d0dbfdf48de11a76875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:55:de:08:d5:6c:01:28:c3:f4:b8:86:be:0a:
                    13:fa:b3:fb:e0:57:c8:df:3b:52:06:a1:9b:4c:97:
                    7d:22:0c:4c:48:47:18:39:f6:48:8b:f9:d2:49:e8:
                    ef:28:0c:e5:47:14:ae:b2:66:2f:f7:63:e0:0f:e8:
                    d4:61:0d:43:87:39:6b:69:14:24:f2:9e:9a:84:5d:
                    06:b0:52:29:07:f2:4d:43:f5:1a:3f:9a:91:7f:35:
                    86:ea:01:d4:fc:71:b9:f5:f5:b3:1e:86:81:55:db:
                    88:48:68:ee:4b:4f:b1:56:4b:db:2a:ed:e9:51:27:
                    fe:03:3d:8a:12:cf:56:45:2f:4c:cc:25:2f:7e:2e:
                    5b:1b:8e:ce:c8:a1:69:cc:ff:f9:23:8e:7c:1f:9a:
                    9b:e9:24:77:d9:07:35:c4:75:37:c0:d3:1b:49:30:
                    46:88:92:5d:86:e3:88:37:67:2d:f1:a2:3d:86:77:
                    d0:7f:39:97:2b:cd:0f:27:4f:18:0b:56:e2:09:aa:
                    2a:6c:4b:5d:b6:77:c5:b6:2c:01:6f:8f:36:50:57:
                    8d:46:39:14:79:ef:ba:94:01:69:e5:ad:e5:89:d2:
                    c8:6d:08:0c:87:2a:af:9b:d4:65:f0:71:b3:27:c6:
                    4d:5e:e6:f0:40:8c:84:d7:e2:8a:0e:98:bf:5b:27:
                    1a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:70:74:1D:C9:64:E7:21:9D:70:3D:0D:BF:DF:48:DE:11:A7:68:75
            X509v3 Authority Key Identifier:
                keyid:06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:0c:9c:1a:5c:a7:11:cc:c7:7d:96:88:00:28:78:b2:29:62:
         0a:25:6d:67:64:91:96:91:f5:ea:cb:ff:13:58:7a:b8:9d:45:
         b5:39:26:e3:58:4b:39:bb:7c:31:36:f2:0a:01:c3:ef:d9:b1:
         0e:33:20:d0:d1:dd:57:bf:d0:bb:60:c6:15:94:25:23:40:12:
         f5:01:f3:7b:28:24:39:d6:20:ff:34:2d:02:62:a9:0c:b5:bd:
         37:bd:0a:53:de:e8:39:fc:53:90:3d:9b:d5:8e:a7:60:b6:13:
         6d:7c:7d:a4:64:f2:66:fc:e4:28:e6:5d:ee:3d:fd:0b:22:19:
         36:05:26:c5:06:2c:4b:98:ad:2f:b2:3b:ce:ba:fe:2e:c7:dc:
         0a:6e:de:ba:3e:64:08:a4:08:ee:95:0b:06:09:2e:78:b9:91:
         be:ea:8d:a5:95:e7:0e:8c:8b:9c:cb:5b:27:24:ad:11:bd:ed:
         c7:dd:73:5f:0c:b6:08:3c:7b:68:c5:58:58:ec:5e:22:f2:23:
         c3:92:bf:bf:00:69:45:46:4f:17:fd:f5:05:59:85:2a:5c:66:
         c1:9f:26:23:2e:3d:01:d0:44:2d:87:9f:d6:26:c9:9f:2e:4c:
         de:39:b1:d3:21:db:2e:92:85:bd:55:e0:3c:96:f2:3b:88:e9:
         8c:19:d8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----