Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
File:                     BYmfOXZIcDij-mNDlSsUtNBysz0.mft (raw, json)
Hash identifier:          bkxzcZW05iU3CYldHYet4nn5lahTLdFvBSRegauuVrc=
Subject key identifier:   40:2F:B4:39:89:56:2F:EB:31:E7:0B:6C:32:06:4A:2F:86:12:C4:BE
Authority key identifier: 05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D
Certificate issuer:       /CN=05899f3976487038a3fa6343952b14b4d072b33d
Certificate serial:       01962E618E09881FFF234BAE886C1EFC7102
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
Manifest number:          121E
Signing time:             Sun 13 Apr 2025 09:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:07 +0000
Files and hashes:         1: 0FPPBtsN210U9TcyUOoD4vT2QPY.roa (hash: fG8Q0h59H0I6+//7X6/ScKzAsNXNuiLvMcAt229Ohto=)
                          2: BYmfOXZIcDij-mNDlSsUtNBysz0.crl (hash: yBjSWp8aSwKYRIpREuUBcpG+WICBmgzgbUVmpcXXb7k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8e:09:88:1f:ff:23:4b:ae:88:6c:1e:fc:71:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05899f3976487038a3fa6343952b14b4d072b33d
        Validity
            Not Before: Apr 13 09:01:07 2025 GMT
            Not After : Apr 14 09:01:07 2025 GMT
        Subject: CN=402fb43989562feb31e70b6c32064a2f8612c4be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:64:f1:5a:ba:1e:dc:18:31:1d:d4:eb:55:d0:
                    f3:ca:6f:6a:a2:a1:9d:ff:af:16:b5:91:df:51:c1:
                    b0:89:94:99:9a:6f:79:16:a9:08:8b:43:8f:b7:f5:
                    d9:e0:57:8e:71:47:a3:5d:40:f3:a1:65:62:46:d0:
                    9b:37:38:e2:1b:69:55:16:5a:8e:bf:66:60:77:4e:
                    51:22:a4:af:4e:28:c2:e9:60:f8:59:5b:04:0d:f9:
                    86:d1:fc:a9:2a:71:01:59:d8:2a:52:88:ad:1a:c7:
                    57:e6:71:7a:c0:a3:bb:b5:60:3f:c9:92:4a:41:ad:
                    d3:00:63:b3:b2:99:31:f9:9c:4b:d3:34:85:dc:4a:
                    c9:76:bb:2f:fd:43:c9:42:d5:48:f0:bd:99:a2:ce:
                    ba:5b:76:e0:ba:29:43:04:e2:bb:a6:30:f4:6e:4f:
                    6b:09:a5:b2:1f:f3:a6:96:9c:5e:bb:e0:96:bc:75:
                    3f:5f:c0:48:39:89:b1:82:a7:5b:25:6c:ef:26:d4:
                    34:02:0e:f9:5c:a6:ea:a9:36:07:f3:b5:28:d3:30:
                    4f:1f:5d:c0:14:b4:94:6a:92:46:fd:af:1d:2a:55:
                    c7:a5:0d:8b:fd:fa:75:1a:3e:d3:11:57:e4:c1:e4:
                    e8:a7:f5:39:47:13:35:71:2e:2a:7e:3c:5f:81:4e:
                    ea:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:2F:B4:39:89:56:2F:EB:31:E7:0B:6C:32:06:4A:2F:86:12:C4:BE
            X509v3 Authority Key Identifier:
                keyid:05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:ac:e6:82:1b:9a:cf:c2:a5:af:a7:06:b5:4b:f2:55:51:93:
         f7:d6:08:79:ca:39:9e:4a:fe:24:07:0f:88:ab:ea:24:7f:5f:
         e6:e7:3d:a1:d6:2c:c1:74:54:27:fb:a7:e0:d8:84:79:f7:e5:
         a8:97:10:4d:e8:b4:71:88:43:47:c6:fb:16:0c:1a:c4:d5:33:
         c9:84:f8:bc:01:d5:e1:e3:e4:a2:8a:fe:b4:c2:a6:e5:88:97:
         62:39:d0:97:43:c3:42:b2:51:c0:0f:f6:9a:4e:07:16:30:90:
         fc:23:aa:32:6a:b6:a2:73:3f:68:e0:1d:92:c7:21:85:5d:8d:
         66:5b:68:ec:d1:c2:20:37:3c:fa:06:7a:c1:32:13:01:f7:67:
         c5:02:c2:ff:08:83:e2:12:4d:10:36:25:29:f9:c1:44:40:b1:
         74:2d:a8:bf:41:15:90:23:09:38:f0:bf:28:6e:3b:ea:bb:2a:
         c0:1a:9e:0c:43:c0:41:eb:65:c1:ae:ee:a2:54:99:8b:1f:79:
         64:72:dc:97:79:36:9c:56:80:31:dc:27:8e:c7:da:b8:47:cc:
         0f:91:f2:e6:13:d0:a8:5b:58:b7:e8:0f:0f:1b:39:16:f7:cc:
         20:d8:fa:dc:ed:ec:05:0d:f6:ab:fa:d3:d0:12:26:c6:2c:c5:
         a1:7e:1a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----