Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
File:                     BqTXfcLhnm-WAydMCSOmGordtJY.mft (raw, json)
Hash identifier:          Ul1TUdF2/BSKfBEGz/PTly1XLbC5gBTD06LmHSYo3Pc=
Subject key identifier:   F4:59:FA:10:11:D6:8F:AD:DE:8C:C7:9A:F9:29:EA:99:51:52:43:9B
Authority key identifier: 06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96
Certificate issuer:       /CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
Certificate serial:       01962FAB7C0AECB8F5DA02E24770703F1815
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft
Manifest number:          0978
Signing time:             Sun 13 Apr 2025 15:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:29 +0000
Files and hashes:         1: BqTXfcLhnm-WAydMCSOmGordtJY.crl (hash: h+aJaR8oAboQO+BhOVBZcUR82voj5XWSFejtePRm+1E=)
                          2: cZHYHiGd6PIrfuySObNNa9cF_qc.roa (hash: uKrwrqOr4nsQ7JI8tFB0iH3uyz/0QpuKeozXQRhmsYA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7c:0a:ec:b8:f5:da:02:e2:47:70:70:3f:18:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06a4d77dc2e19e6f9603274c0923a61a8addb496
        Validity
            Not Before: Apr 13 15:01:29 2025 GMT
            Not After : Apr 14 15:01:29 2025 GMT
        Subject: CN=f459fa1011d68fadde8cc79af929ea995152439b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:70:40:4a:33:71:4d:bf:fb:20:99:ee:fd:e4:
                    92:27:1e:bf:74:04:b9:f8:1b:03:94:50:e9:9c:71:
                    31:c2:4e:13:b9:08:21:b7:bb:a6:69:87:b4:48:5c:
                    6c:cc:51:a1:8d:6a:6e:d6:07:74:5e:9f:17:00:db:
                    32:86:b5:99:77:dc:f6:3c:68:ed:cf:4b:a3:40:2e:
                    40:98:2d:db:81:7a:b5:ad:76:3f:df:57:f9:55:9c:
                    9b:2a:51:87:8b:2e:51:ad:a9:dc:bb:1a:45:3e:95:
                    f5:aa:e3:cc:da:c2:cf:9b:cb:16:57:87:5b:3c:0f:
                    e2:92:b8:ec:cc:b2:57:ac:1a:7f:ca:6c:02:5c:55:
                    7f:b4:48:20:3e:8c:14:38:f8:ae:bc:9c:d1:51:10:
                    a1:ce:d0:b3:24:7b:ee:1b:22:5c:fa:26:be:43:10:
                    3a:7d:58:3c:f2:55:e6:aa:2b:bb:25:39:b5:3e:42:
                    64:63:44:b0:a7:cf:a4:6c:67:f3:ac:1a:30:68:37:
                    81:e3:a0:59:73:22:a2:d2:ca:68:b9:5d:8f:7c:8f:
                    d2:0e:f9:71:a9:23:0b:53:2a:b8:6b:8e:c7:5b:d0:
                    64:1d:cd:56:53:ad:8c:a1:c2:47:90:61:e0:ce:35:
                    60:a2:11:24:6a:5e:96:9e:67:5c:1e:d0:26:41:a7:
                    cd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:59:FA:10:11:D6:8F:AD:DE:8C:C7:9A:F9:29:EA:99:51:52:43:9B
            X509v3 Authority Key Identifier:
                keyid:06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:a1:ff:5b:a4:4b:e5:cd:9c:e2:2d:b2:5c:5d:92:5a:e2:3e:
         86:d2:53:d3:9f:53:c4:2e:69:c8:72:05:05:37:37:32:72:00:
         f2:37:bc:19:f4:ec:0b:db:29:56:21:5c:0a:1c:38:6a:bc:d1:
         6e:7b:33:dd:58:09:0b:3d:90:1f:2b:98:98:1c:ac:eb:4d:f1:
         95:ca:f6:7f:86:09:27:da:58:89:de:06:f6:09:23:b1:8c:0d:
         68:1f:ba:cc:d2:0b:44:aa:ad:1c:33:d1:9d:22:0f:3e:57:8d:
         a2:91:25:0b:e1:3c:0b:39:73:48:b4:47:93:b3:fc:ee:a4:b7:
         d0:83:57:fa:69:05:5b:ce:7e:cb:35:29:8a:4a:cb:4f:f2:48:
         32:69:4f:20:d3:62:f1:c4:0b:3a:29:76:0b:b2:93:96:cc:f1:
         5b:5c:44:b2:fc:d8:03:e2:71:9f:af:3b:8a:5c:08:37:14:66:
         e6:fc:ec:36:4e:f9:dd:b2:b2:0d:e5:e4:51:fa:04:81:31:fc:
         9f:22:05:6a:f7:16:64:b1:7c:36:05:dc:60:a6:ad:2b:42:d3:
         14:3a:bf:dd:dd:3d:86:13:2c:84:1c:bd:8a:77:9c:19:ab:c3:
         cf:e1:5a:5b:18:8f:09:ea:68:96:18:e5:29:d2:20:4a:7e:ac:
         96:8e:8a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----