Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
File:                     BKnP8kmB1yY9G31jd59dZz3ivbw.mft (raw, json)
Hash identifier:          FOrdOt8Dn42CrkyelO6e6fOOC/ZWnnbO5vagMxMpCeA=
Subject key identifier:   C5:36:DB:2C:9C:06:35:E4:5D:D3:0F:1C:39:42:02:58:10:C3:2C:BB
Authority key identifier: 04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
Certificate issuer:       /CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Certificate serial:       01962F06E7B252342CDAB50B540F92848718
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:43 +0000
Files and hashes:         1: BKnP8kmB1yY9G31jd59dZz3ivbw.crl (hash: Bw1sDRosS0in9nGlNbbsxenUWovFpZ3iLl5QLJsLAz8=)
                          2: zx1XMXhbE28ZMTwu9AxINedJc60.roa (hash: 4bo9B0lLSnpXpzHGQAUAoXEmUUE4IbZbuOepJknUA+w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e7:b2:52:34:2c:da:b5:0b:54:0f:92:84:87:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
        Validity
            Not Before: Apr 13 12:01:43 2025 GMT
            Not After : Apr 14 12:01:43 2025 GMT
        Subject: CN=c536db2c9c0635e45dd30f1c3942025810c32cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e7:e2:cc:d4:fe:76:86:97:a4:96:d1:2c:51:
                    8f:5c:b0:55:dc:68:9c:2a:d3:a6:ad:b7:b1:2e:f5:
                    6d:b5:f6:f2:32:a6:5f:c3:29:69:86:ad:fe:88:43:
                    a3:af:cd:50:20:cd:57:10:d9:e0:f6:c3:80:08:d5:
                    fe:4b:8e:00:7c:4b:9f:f6:df:fb:2b:e5:5c:10:6e:
                    d8:62:af:57:c1:2c:b1:5e:0e:1d:10:64:8a:ea:00:
                    18:9c:f3:e8:db:52:9d:b3:aa:95:68:71:84:60:c3:
                    eb:7f:53:85:25:98:73:9f:16:e6:24:41:9c:e5:b1:
                    a1:05:d5:ed:04:9b:0e:d3:cf:7a:c9:38:1d:d5:39:
                    27:c9:f4:8c:90:ff:41:8c:59:da:78:fb:c2:e9:b2:
                    47:ab:c6:7d:c1:21:7b:43:c5:1a:f9:b6:97:52:57:
                    be:cb:1c:e7:12:71:f6:5e:fc:1a:61:9f:f6:99:e7:
                    8f:22:9b:45:7e:02:f3:20:8e:76:bb:f5:21:8a:eb:
                    6a:cc:52:92:8d:ee:04:03:4e:95:3d:38:02:26:0a:
                    1a:60:cd:8d:53:9e:18:fa:9c:bf:96:03:af:0d:05:
                    e2:23:d8:a5:69:93:9e:0f:3a:21:51:c8:0a:49:9f:
                    65:dd:dc:f0:82:19:20:b3:fb:d8:7a:35:05:f8:5c:
                    a1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:36:DB:2C:9C:06:35:E4:5D:D3:0F:1C:39:42:02:58:10:C3:2C:BB
            X509v3 Authority Key Identifier:
                keyid:04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:8f:d7:61:28:1c:31:ff:66:9b:b5:e7:a6:ed:5c:7f:d6:11:
         56:7f:52:b4:d3:8d:9f:aa:2e:b4:89:e3:16:35:9d:b8:67:69:
         34:02:e7:fc:b1:44:0a:14:e5:bd:51:89:47:b6:f2:ca:a6:2d:
         7a:fd:91:a6:28:32:d4:84:81:e3:66:60:ad:54:8c:0d:5f:ad:
         0c:0c:0f:d5:33:c3:5d:08:f8:76:a1:d1:90:10:0c:c0:da:8f:
         8b:11:68:97:c7:fd:95:30:14:03:bc:52:8c:96:56:4c:0c:87:
         12:7d:7e:c6:78:cd:66:8d:53:74:0b:73:10:cd:c6:5f:5c:b9:
         c2:67:25:2c:2e:b5:6d:9d:92:07:cb:72:2e:f2:1d:97:13:54:
         40:f2:26:30:32:54:cf:52:9b:fa:e6:5e:f0:96:f1:35:ae:df:
         e4:6c:77:87:f5:a0:51:71:ed:55:76:06:25:fb:fa:75:d7:8c:
         37:5d:05:7f:14:5c:d8:30:85:09:f7:4e:95:24:23:1c:0a:08:
         50:51:df:ee:27:ca:71:7f:1c:90:04:2c:a5:b9:c5:56:43:70:
         d1:0e:33:66:cc:b9:91:cb:b1:9d:8e:b0:e9:4e:53:1e:e9:70:
         3f:90:ee:e6:b5:93:a9:f5:e3:9e:76:f6:21:0e:70:fd:00:3b:
         0c:da:bf:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----