Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft
File:                     BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft (raw, json)
Hash identifier:          0Fy8Cts8cjnmVPrB4b5mopaiZYe2t+kMtvBTT8XnVsk=
Subject key identifier:   D6:4D:C5:D8:6D:9B:8C:E2:5E:CA:BE:C1:1C:BD:F3:D5:37:11:0C:A8
Authority key identifier: 05:89:EE:30:3F:F7:D0:D5:57:59:9F:A0:4B:29:3D:C2:B1:6B:B4:D4
Certificate issuer:       /CN=0589ee303ff7d0d557599fa04b293dc2b16bb4d4
Certificate serial:       01962DF398C1DEC7EF2D016B7327E75C70BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft
Manifest number:          11EF
Signing time:             Sun 13 Apr 2025 07:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:00 +0000
Files and hashes:         1: BYnuMD_30NVXWZ-gSyk9wrFrtNQ.crl (hash: 1rrMviaqksWPEoke94WS1Pvc/bzekSZD3A/8oWKrzkY=)
                          2: Ss7XTWpHmXw6L7KiP6AnSkLRnd4.roa (hash: rhKrnmJP9HKc4ydR4WxRdbHD2Fh6lt0Ep1m2e2GnBII=)
                          3: vjNiGGPMMIohREeXJHQsS5InGhc.roa (hash: vM9ExtpBpPfcQzyytJ+sd/iRyD/Z0n+dZ48bP2Pgoro=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:98:c1:de:c7:ef:2d:01:6b:73:27:e7:5c:70:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0589ee303ff7d0d557599fa04b293dc2b16bb4d4
        Validity
            Not Before: Apr 13 07:01:00 2025 GMT
            Not After : Apr 14 07:01:00 2025 GMT
        Subject: CN=d64dc5d86d9b8ce25ecabec11cbdf3d537110ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ca:83:20:6c:0c:a3:6c:51:7d:ad:5a:30:ad:
                    aa:1f:7f:c7:00:51:01:6e:d3:ba:ff:93:df:27:63:
                    ed:5e:64:62:2f:42:88:40:ec:6e:c0:fc:06:bf:25:
                    88:f5:ab:02:3a:a0:90:6a:9c:66:22:ff:9f:2d:e9:
                    32:cd:08:59:7a:28:55:08:55:2d:70:64:bc:68:3d:
                    d2:2a:6b:2f:d7:d7:d4:b2:9f:08:d8:17:fe:94:bf:
                    be:73:49:b3:05:31:89:4b:16:c8:52:49:c1:a3:d1:
                    6a:66:0f:d7:85:e9:59:b4:63:40:15:5a:a0:ec:5c:
                    13:53:28:8b:35:77:42:1a:b6:bf:50:4b:b2:b3:59:
                    8d:3b:89:4e:ef:52:69:b6:77:4b:0a:51:42:bd:21:
                    87:22:33:04:d0:51:15:a4:8c:73:67:f8:f7:81:1d:
                    26:b0:9b:b1:1c:56:96:a0:ec:ff:5f:32:76:7c:2e:
                    71:b1:61:66:d6:67:af:eb:85:2b:76:3b:f3:1c:ef:
                    72:af:a0:36:41:72:71:ab:30:d2:a0:0a:d4:43:5f:
                    81:1e:ff:d9:a3:27:32:32:47:81:45:6f:d7:a1:3f:
                    31:75:d7:33:f1:29:94:f0:0d:ff:12:aa:b4:f1:d7:
                    51:b2:ac:cf:40:12:30:c8:dd:c0:3e:63:e2:9f:35:
                    ae:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4D:C5:D8:6D:9B:8C:E2:5E:CA:BE:C1:1C:BD:F3:D5:37:11:0C:A8
            X509v3 Authority Key Identifier:
                keyid:05:89:EE:30:3F:F7:D0:D5:57:59:9F:A0:4B:29:3D:C2:B1:6B:B4:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/4e198e-2f61-46f3-b5f6-06d6e947e38f/1/BYnuMD_30NVXWZ-gSyk9wrFrtNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:2f:eb:47:0f:42:c2:82:aa:4d:7f:78:f5:b1:7e:f3:2c:7c:
         1f:9b:7e:02:02:1d:fc:bc:db:70:90:85:93:45:2d:73:b7:b6:
         65:7d:97:1a:3d:07:ba:cd:fe:81:2d:dc:0f:bc:d8:5b:11:fe:
         b6:04:c5:37:b0:7a:ab:4f:69:a1:39:9f:73:27:70:1d:2d:72:
         49:2a:dc:ac:7d:28:34:71:b3:b3:80:99:77:7d:e9:b3:e7:ef:
         9f:a7:08:1d:30:d5:7f:d8:7f:ba:98:d4:95:61:04:e4:e1:6c:
         52:d8:62:13:a1:ae:90:b9:e9:ab:00:53:71:5a:6d:27:cf:5e:
         97:b8:07:04:b5:ce:fa:5f:59:2e:65:13:cd:f6:5b:34:75:cd:
         d1:5b:a9:7f:9d:9a:93:0d:2b:ee:5b:cb:37:8a:ae:1f:39:da:
         3d:24:5f:c9:8f:b0:b0:ca:22:d0:2a:d6:77:d8:f2:00:8a:ad:
         ac:d1:67:42:2b:82:f8:12:f2:f5:da:e4:27:19:9c:45:0c:5d:
         62:05:4f:75:40:e9:70:05:26:bb:c3:30:c5:a2:5d:6b:6d:14:
         75:95:0c:11:33:72:e2:46:a2:36:20:f6:e7:9a:12:91:ac:80:
         57:54:2a:32:03:b9:16:9f:b4:d5:4d:62:50:c0:e4:f1:6d:0a:
         71:2a:65:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----