Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
File:                     BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft (raw, json)
Hash identifier:          RZBFyguFZUktgwKxqDRK9Oy7CzenqIOJsIda3yS0mkU=
Subject key identifier:   31:3B:6F:07:6C:4D:7C:28:96:6A:2B:DC:60:77:DA:D7:A3:EE:34:6C
Authority key identifier: 05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
Certificate issuer:       /CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Certificate serial:       01962E2AFC462FD3A579D139FBA06C33D165
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
Manifest number:          11EC
Signing time:             Sun 13 Apr 2025 08:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:30 +0000
Files and hashes:         1: BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl (hash: mdsLte8lJijHyXuL2n2GGBxmmKopfyvvsOT1FQK4bEQ=)
                          2: Sj4J_mFP2lQkR8Pqu4-vUWhntlo.roa (hash: OyHUO8zUzkjWGYsEn0Hm1G4SAQZ+8DrBTjWOD/M90zc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:fc:46:2f:d3:a5:79:d1:39:fb:a0:6c:33:d1:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05712e88949d5a435a33e7040c9fb7e7a8244395
        Validity
            Not Before: Apr 13 08:01:30 2025 GMT
            Not After : Apr 14 08:01:30 2025 GMT
        Subject: CN=313b6f076c4d7c28966a2bdc6077dad7a3ee346c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:27:a3:04:a0:14:e6:4c:94:c2:9e:e7:13:2a:
                    0e:ca:79:ad:60:ae:ac:dc:bc:0d:c4:13:b9:0f:16:
                    0b:59:56:5a:c6:00:d5:e8:03:1d:e7:05:f0:db:32:
                    ac:dd:bb:8c:51:b6:b0:ef:a9:d3:75:94:eb:69:82:
                    36:60:4a:a4:47:94:08:bf:8a:28:bf:3d:7e:ae:08:
                    db:79:07:19:4e:06:58:44:ec:9a:ef:5d:ea:a9:64:
                    a1:2e:81:93:46:5f:d0:4b:b3:6e:04:5f:d7:7d:87:
                    dc:69:3e:bb:27:80:54:3b:a4:b8:28:d1:b2:dd:92:
                    6d:77:6a:31:ff:60:5d:47:49:49:08:97:e1:37:df:
                    24:7c:a4:f3:11:9f:92:fd:8f:92:d5:6c:54:a3:52:
                    f0:dc:07:d1:a1:33:18:ea:a6:a3:94:2e:d6:19:95:
                    52:64:05:e7:f8:9d:f5:8d:03:01:6f:b9:29:fd:99:
                    3a:0d:83:96:4d:fe:f2:f4:40:07:be:14:89:a8:27:
                    b3:34:73:3c:0e:c7:93:17:1c:c0:4b:d4:99:52:a5:
                    3c:ac:b0:04:39:8b:3e:c4:0b:d5:6c:03:c9:57:49:
                    28:2d:25:26:61:ed:9e:a8:dd:d4:26:6c:10:36:cf:
                    85:14:3b:fc:4e:37:6e:92:92:1c:71:46:fa:4f:4e:
                    59:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3B:6F:07:6C:4D:7C:28:96:6A:2B:DC:60:77:DA:D7:A3:EE:34:6C
            X509v3 Authority Key Identifier:
                keyid:05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:4e:fd:0d:50:d2:ab:61:c8:c9:41:a4:f6:cf:e4:ae:bb:c1:
         2c:1b:f4:22:e7:58:74:a7:df:5f:00:1c:1d:19:b2:cd:a9:69:
         6b:8f:f8:63:18:31:65:61:f9:b7:8a:52:5c:9b:2a:f7:44:dd:
         29:76:25:f1:bb:88:1e:70:e7:36:cf:d3:17:86:e1:b8:37:59:
         7f:85:be:79:af:ee:28:eb:99:8b:25:ad:2c:a7:19:77:86:31:
         79:4f:5f:78:73:8a:7c:4b:c3:1a:a0:b7:bf:15:1f:dc:f8:c2:
         d6:c0:e1:7a:fc:ae:04:df:4a:fd:b4:ab:86:aa:41:f9:bb:65:
         60:38:f1:2c:5b:ee:d4:24:4b:1e:ce:c8:94:83:f8:12:c2:e4:
         ef:12:33:eb:0b:82:f5:7a:9f:1a:18:97:f6:9b:d5:fc:ed:d2:
         0c:07:53:fb:41:3d:d3:45:10:3a:19:55:fb:51:84:6b:b2:9b:
         cf:bf:8a:f0:e8:64:9a:24:76:1a:cd:1a:3f:8e:91:eb:20:86:
         24:a7:33:c9:81:f4:a3:67:12:89:3f:c0:ad:21:10:fc:da:7d:
         b9:d4:a0:e4:9c:88:e5:1c:48:9c:0a:3f:45:f0:e5:35:a3:2b:
         b2:9a:67:54:63:cc:ed:ce:38:e8:77:7d:34:1d:50:99:92:9e:
         62:34:ab:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----