Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
File:                     BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft (raw, json)
Hash identifier:          vZ8G1nH30WGoqOEmwtyDKgno4ZAhEtDLYbKhIMij60I=
Subject key identifier:   98:25:26:83:7C:E6:96:50:FF:23:9B:CA:B1:60:80:6E:73:13:11:2A
Authority key identifier: 05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62
Certificate issuer:       /CN=0515c15583b9ccff942cfb3eee04e2de95642662
Certificate serial:       01962F742BE8D31C40B62796052962899E9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
Manifest number:          1067
Signing time:             Sun 13 Apr 2025 14:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:04 +0000
Files and hashes:         1: BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl (hash: DdMAR0sXKkvE7aOiS0EsiCmN+HDEm1N8bQ7s+g+uuPw=)
                          2: tBOKcfNxjTzkMUixXvH9M-s6MQc.roa (hash: WnsSxnvb5k4gG3MU31Atg7OcKa0e6J/w7SNoxsaja8E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:2b:e8:d3:1c:40:b6:27:96:05:29:62:89:9e:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0515c15583b9ccff942cfb3eee04e2de95642662
        Validity
            Not Before: Apr 13 14:01:04 2025 GMT
            Not After : Apr 14 14:01:04 2025 GMT
        Subject: CN=982526837ce69650ff239bcab160806e7313112a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a5:6b:58:66:bd:60:f0:40:ab:59:ba:7a:ee:
                    f5:bf:2b:a8:49:88:cd:48:a4:0c:6e:2f:91:a5:42:
                    b1:2c:a1:87:cd:1b:2f:af:f3:70:e0:de:ef:00:a8:
                    d4:16:a5:13:df:db:92:16:50:d2:f8:85:3b:8d:d2:
                    52:4e:af:d7:82:46:6a:0c:3a:c4:c1:e7:ae:95:e6:
                    a3:d9:b5:79:58:58:bd:f6:99:3d:d6:fc:5c:6a:78:
                    54:9b:14:55:7b:51:48:2a:3d:1b:b7:e9:c3:f3:4c:
                    44:17:c0:26:fb:fd:37:92:73:1b:c3:6d:44:75:f0:
                    71:af:ef:74:bc:2f:51:23:15:e1:7e:76:e1:64:14:
                    6d:2c:7d:a2:3a:55:54:2f:2b:31:e7:05:fc:0a:c6:
                    af:c2:df:89:de:d6:8b:2f:53:44:2d:a6:05:3f:a8:
                    37:01:21:f2:16:b2:25:26:c7:43:cc:b1:1d:36:ad:
                    5a:3a:0f:98:96:e9:a0:96:98:bd:08:2b:75:70:5a:
                    e3:83:e1:9e:ad:59:37:33:af:7a:d2:e6:26:95:ac:
                    32:97:05:d8:da:87:a7:10:fd:5f:1d:24:80:4e:2b:
                    66:c2:d7:ad:aa:80:43:67:fc:80:c2:09:8f:43:50:
                    6c:fe:42:9f:0f:b0:34:87:31:8e:0b:dd:82:15:8d:
                    93:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:25:26:83:7C:E6:96:50:FF:23:9B:CA:B1:60:80:6E:73:13:11:2A
            X509v3 Authority Key Identifier:
                keyid:05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:84:00:85:22:07:42:83:a4:15:79:0b:6e:ed:ee:a4:64:b0:
         3b:5a:54:72:5b:87:49:1a:03:8b:0e:2a:49:f7:6a:21:06:cb:
         e6:9b:56:0d:07:63:df:13:eb:8f:9e:0c:96:8a:a3:ed:7d:e1:
         04:49:29:a7:63:e1:6a:d1:5c:df:59:bd:a5:7b:e7:09:d8:81:
         63:0c:54:a0:72:50:32:ff:ff:2b:0d:11:e2:b9:91:ce:5a:57:
         ed:93:dd:1c:de:eb:d4:8d:22:4d:fc:10:b2:06:ed:c6:27:fb:
         8d:54:9a:d0:b9:7a:5f:b6:22:25:2c:36:b6:8f:da:03:3b:fa:
         1b:9f:1b:39:41:ae:6d:9c:52:a0:da:f9:2e:86:cf:9a:fd:bb:
         d9:58:22:15:f3:af:79:2d:26:86:32:01:9d:3f:cf:ce:cf:cd:
         bd:74:bf:4a:2c:a3:0f:8e:eb:4b:89:77:a0:d4:94:c9:5c:50:
         41:56:76:0f:20:f8:ba:df:18:76:d0:62:e9:d0:f1:cd:2a:bc:
         51:a7:4f:81:91:6b:03:79:b9:16:54:a1:9e:75:55:dc:4f:ad:
         76:87:6d:9e:3c:f7:34:db:02:34:23:82:c7:a5:e4:cc:0e:e6:
         0e:2e:21:2e:8b:af:22:6a:44:4a:a3:ab:a8:07:3e:20:05:89:
         49:42:60:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----