Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
File:                     BYc3rBvKjBQos5aVRvGXTwaU5AA.mft (raw, json)
Hash identifier:          8HCDPs0r8Wk6UWYXB2EWLre5PEXp7nMw9eCh9dLVu6I=
Subject key identifier:   5F:F4:EF:81:05:CB:BB:1D:62:E1:C6:12:BF:00:BD:C5:56:12:0F:E7
Authority key identifier: 05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
Certificate issuer:       /CN=058737ac1bca8c1428b3969546f1974f0694e400
Certificate serial:       01962F06A2FE304CC3903583D854B84C34C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
Manifest number:          0F8D
Signing time:             Sun 13 Apr 2025 12:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:26 +0000
Files and hashes:         1: BYc3rBvKjBQos5aVRvGXTwaU5AA.crl (hash: Mepp852cjmC3HVYRNzBCWbP4DbJ/PuVEpqf/+A9yTso=)
                          2: S34eKn41CbeHBs9JztR1Ea-qnWM.roa (hash: ivl9YTuqSiUvueW/pRMX9Z40ugXy2JCZOHJUmHTZ+5g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a2:fe:30:4c:c3:90:35:83:d8:54:b8:4c:34:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=058737ac1bca8c1428b3969546f1974f0694e400
        Validity
            Not Before: Apr 13 12:01:26 2025 GMT
            Not After : Apr 14 12:01:26 2025 GMT
        Subject: CN=5ff4ef8105cbbb1d62e1c612bf00bdc556120fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a1:19:fa:fd:c9:a7:a9:67:7c:86:89:3a:fb:
                    8b:5e:35:28:58:b3:7e:b9:cd:28:84:b8:d3:75:c6:
                    39:ea:c2:c4:f2:ad:4c:be:f6:32:ca:40:bb:1c:0b:
                    63:6f:bd:ec:c1:58:2d:9d:82:83:94:66:80:11:ad:
                    ce:ce:df:92:b5:ab:96:4a:a7:bc:c5:17:07:4f:b7:
                    35:13:1a:f2:9d:c9:c7:59:43:c2:36:3b:01:2e:cb:
                    00:40:1e:d1:56:e3:44:95:da:57:d1:8e:fd:7d:d4:
                    1c:fc:c1:aa:bc:28:34:63:d8:b2:e6:ea:64:a0:62:
                    f2:73:9d:a0:ea:45:47:de:20:51:20:27:79:86:5f:
                    c4:80:f4:5a:29:ea:50:d5:93:0e:d8:da:4e:2e:1b:
                    c5:00:c1:c5:8f:f3:77:5e:6c:1d:15:26:2f:32:9a:
                    88:c7:5e:dd:b9:78:16:22:33:21:f1:9b:b8:72:61:
                    50:0a:78:c5:e5:52:07:40:e0:3f:5e:09:ff:3b:e8:
                    a5:ff:54:7e:ea:b1:71:3a:6f:6a:60:6b:22:2f:bf:
                    6a:6c:3f:bc:2a:43:c5:2c:7d:bc:83:ec:08:3a:c3:
                    c4:e1:b3:75:90:62:e5:f0:b2:18:25:a6:c1:2f:8b:
                    e1:f2:ca:c5:ef:37:23:87:22:7e:c3:61:a4:94:ca:
                    cd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F4:EF:81:05:CB:BB:1D:62:E1:C6:12:BF:00:BD:C5:56:12:0F:E7
            X509v3 Authority Key Identifier:
                keyid:05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:82:68:f7:67:1a:1f:3a:6c:9b:b5:77:65:8a:dc:46:a7:f3:
         5d:b2:a4:07:15:3d:a8:a9:00:98:81:a9:10:0b:70:73:18:21:
         f6:56:2f:63:87:f2:64:7a:04:8e:dc:23:90:8b:42:84:26:8a:
         34:4f:a6:75:cc:67:a5:b4:c7:dc:1f:f7:69:5f:05:db:a6:df:
         46:68:77:75:b5:84:ed:ca:a7:a0:ec:61:62:9d:58:f3:70:7a:
         58:35:f4:5a:b6:24:3b:1f:a9:01:3e:f4:f7:e7:c8:bd:91:3f:
         4d:79:fe:f0:d4:0c:2c:9d:10:39:a2:fc:be:2f:57:3e:e2:57:
         d8:5a:9e:74:50:5a:60:d3:b6:ae:53:fe:54:2f:22:38:b3:51:
         ad:56:6d:d2:17:8d:5f:21:6a:21:54:0c:85:85:17:53:97:83:
         e0:36:03:2e:fa:a0:5f:b1:a3:d3:aa:61:60:9f:ba:50:4d:2e:
         83:d5:c0:59:8d:35:e6:f0:a4:8c:e6:8d:35:5b:f0:7e:29:7e:
         3a:b1:11:ba:ae:9c:eb:86:48:a8:40:b5:e1:f7:78:e4:18:10:
         a5:41:c4:b8:bd:a1:91:a2:e9:d6:42:21:fd:e4:32:e9:cd:9d:
         29:a4:de:39:bb:c0:ae:b9:e9:e8:1f:3c:15:95:6d:ae:8f:26:
         65:e3:93:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----