Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
File:                     BFYL6jkur2kgircF70Bc94aEF2s.mft (raw, json)
Hash identifier:          di6TUZS0eG370eZYtMzMZP2Acz2sUJnGW96e0DSQTTw=
Subject key identifier:   B0:C4:7A:5C:27:A3:95:25:8F:69:FA:B7:9D:9D:30:12:41:28:1E:9E
Authority key identifier: 04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B
Certificate issuer:       /CN=04560bea392eaf69208ab705ef405cf78684176b
Certificate serial:       01962ECF6F4ECA9929FCFB1134B6CA5C6ACD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:08 +0000
Files and hashes:         1: BFYL6jkur2kgircF70Bc94aEF2s.crl (hash: ryp9ZTSbKD5r3Zhn50W7l3hx2FuqeEoAkUnynLbfHuM=)
                          2: lfnWEOvFiyPQ4V6fSENJIUzxTlo.roa (hash: haGiRVIYQql14DyAfU+5XwsD5ECg69Kir2HoWSWwiFo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:6f:4e:ca:99:29:fc:fb:11:34:b6:ca:5c:6a:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04560bea392eaf69208ab705ef405cf78684176b
        Validity
            Not Before: Apr 13 11:01:08 2025 GMT
            Not After : Apr 14 11:01:08 2025 GMT
        Subject: CN=b0c47a5c27a395258f69fab79d9d301241281e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:90:bc:17:48:6c:ed:a8:96:a9:cb:99:8c:98:
                    96:e8:62:ab:fc:c1:f4:f0:32:29:18:53:e5:3c:99:
                    97:d9:a7:31:2d:b9:49:96:26:39:35:75:c4:03:8a:
                    bf:39:5c:5d:f6:15:17:c4:8f:bc:76:6d:4c:4b:3a:
                    8f:c5:db:94:3a:ca:fb:c9:17:60:b2:c2:ac:38:0d:
                    49:36:ca:d6:8a:2a:f2:09:98:60:ed:ec:dc:41:e1:
                    05:7c:32:e0:bd:9b:79:63:b7:d5:f6:cf:be:fa:12:
                    a7:72:6c:eb:0e:f6:0c:15:66:36:8f:5f:2b:51:bd:
                    f4:79:7a:f4:9b:50:91:78:7b:ec:c7:e7:64:f8:23:
                    1d:be:6b:aa:38:e3:e8:67:e8:3d:cf:89:61:d9:6e:
                    0d:c8:ee:7d:a3:ab:23:6a:18:77:b6:a4:68:67:e8:
                    0a:cb:69:b8:b5:85:31:b8:cf:76:0e:ac:70:e9:59:
                    0d:0e:35:a9:15:0a:dc:06:07:89:f7:44:04:45:68:
                    db:4a:bd:09:b0:94:56:b0:fd:ec:b5:54:97:bf:3a:
                    b5:09:df:21:4a:d1:e4:40:44:4a:c3:9c:9f:97:35:
                    b0:a2:1a:15:29:e2:ec:c4:92:97:87:77:61:7d:56:
                    ac:8e:ad:4e:c4:95:d4:84:fd:5c:51:24:61:dc:a4:
                    d3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C4:7A:5C:27:A3:95:25:8F:69:FA:B7:9D:9D:30:12:41:28:1E:9E
            X509v3 Authority Key Identifier:
                keyid:04:56:0B:EA:39:2E:AF:69:20:8A:B7:05:EF:40:5C:F7:86:84:17:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFYL6jkur2kgircF70Bc94aEF2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ce4a4e-b1a3-45f4-a27c-e1aca01062ff/1/BFYL6jkur2kgircF70Bc94aEF2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:55:a9:23:b7:1e:72:d8:ea:65:5c:cb:7d:67:de:1b:d3:6c:
         27:4a:52:4d:69:27:bb:2b:02:79:69:53:04:71:20:95:ec:d1:
         41:37:9e:cf:b3:45:0b:c7:cc:0c:f7:db:1f:6a:69:94:b2:82:
         b3:71:00:06:5c:f0:d6:fe:61:30:e2:7e:0b:01:0e:bf:68:cd:
         3e:b2:7b:ca:18:05:33:9e:c4:0d:1b:88:11:a9:0e:51:48:de:
         50:db:b1:aa:f3:c3:96:62:a7:e7:de:93:84:78:9e:d9:45:d6:
         38:e0:4c:ef:d6:a2:2e:39:7a:39:4e:ab:1c:83:98:95:b4:46:
         50:e3:21:91:c7:b0:6c:de:18:6b:a0:c8:9c:a1:b5:0c:e5:08:
         ae:23:74:e5:ba:ac:1a:3a:90:8e:d6:ea:8a:b6:c3:a8:a5:a3:
         8c:38:ac:8b:af:ba:7c:7f:c3:80:a3:22:80:e2:fa:20:0f:68:
         20:bf:c4:47:41:6b:bc:b2:78:bf:e6:f1:8c:88:9e:fc:c6:89:
         5f:5c:6a:7e:d6:82:af:db:71:37:cd:e9:8c:0f:76:27:88:c8:
         74:de:5c:15:a4:69:5c:e6:2c:55:23:d0:44:9b:62:f0:a9:52:
         2d:64:11:52:c7:72:ab:2f:d2:be:1b:7c:e9:cd:27:0a:38:58:
         84:39:ef:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----