Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
File:                     BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft (raw, json)
Hash identifier:          t+c56eV31+RbK2Rb5P3vD2mgPGvpxxY4EPsliIcj3Ic=
Subject key identifier:   97:49:03:FA:6A:64:89:1B:4C:F3:E9:BC:86:81:6D:22:06:71:14:C4
Authority key identifier: 05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91
Certificate issuer:       /CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
Certificate serial:       01962FAB1721251EC6D93BA1C7C1D1A0D340
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:03 +0000
Files and hashes:         1: BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl (hash: 48SDTLJZU6O9nM9q/H8Bm72SW8ATWBhP9ibl4MJGhkM=)
                          2: g7zSuu1Y2LgUEEcASbCxWIihuvc.roa (hash: DxpZr9EOZTA5swhTGy2g3jLwTeS/IoD0WJP5uBxOYhA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:17:21:25:1e:c6:d9:3b:a1:c7:c1:d1:a0:d3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050e3b7dfbd59910fe527cc7e29af64d53806c91
        Validity
            Not Before: Apr 13 15:01:03 2025 GMT
            Not After : Apr 14 15:01:03 2025 GMT
        Subject: CN=974903fa6a64891b4cf3e9bc86816d22067114c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:33:7c:bd:a0:4d:ac:e1:b4:67:80:9e:6b:a2:
                    ab:fc:d0:33:1f:dd:c5:39:aa:e3:b2:e3:c9:09:0a:
                    db:a8:a2:d8:74:d6:7c:49:85:bd:fb:c1:0d:7d:0d:
                    8c:85:67:3e:ed:66:3d:0a:6e:24:ac:93:19:3c:d7:
                    4d:b0:7d:e0:e5:e7:ff:eb:54:b1:22:8c:f7:46:fd:
                    43:cb:34:0d:c7:5c:5f:75:2f:a0:4c:12:bd:ad:0c:
                    6b:b1:e5:55:36:3d:39:12:7d:0c:4a:75:39:85:a6:
                    66:55:71:c5:a2:a7:10:8c:a0:07:2f:9d:09:3f:48:
                    31:b3:12:8c:30:44:55:7a:cd:59:36:b0:9c:21:d8:
                    7a:2e:29:18:9b:a4:1f:18:ee:a3:3b:13:ec:9d:9c:
                    25:08:2a:2b:90:2c:4f:bc:0a:4e:a4:79:3b:30:45:
                    fe:28:bc:5f:59:fc:d1:a7:e5:5d:37:55:66:77:98:
                    3b:4b:76:3c:8c:0c:66:1d:20:ef:ee:c7:4c:51:3c:
                    41:02:88:1a:8f:6b:13:23:0d:e8:1a:48:9f:a4:c8:
                    03:ed:fe:ff:8d:b5:30:ca:d5:63:d8:b7:74:91:47:
                    0e:cd:b0:6f:69:0f:7a:86:2e:09:c9:6a:53:10:9a:
                    9b:b7:84:4a:00:48:fe:49:9b:f3:75:1b:a5:66:74:
                    57:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:49:03:FA:6A:64:89:1B:4C:F3:E9:BC:86:81:6D:22:06:71:14:C4
            X509v3 Authority Key Identifier:
                keyid:05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:d6:91:a7:4d:d4:30:aa:3f:29:6c:08:47:b3:f6:79:f7:42:
         13:53:3b:b0:52:46:0d:ce:a4:75:a3:be:7f:a5:ab:fb:b4:74:
         5c:1e:15:22:d7:b2:91:f5:46:0f:67:90:7d:ad:35:b6:65:66:
         09:6b:5d:d5:c0:39:4c:69:60:49:6b:78:d5:54:92:d5:ad:a5:
         02:7b:8d:dd:c9:45:20:e5:fb:2c:c5:c5:09:6d:3b:36:31:d6:
         47:46:48:b1:51:96:14:78:1c:d6:da:71:5d:e1:83:3e:53:c4:
         9e:6b:5a:a3:9a:06:f2:e0:4f:d9:61:61:d6:55:7c:e0:10:b3:
         da:df:fe:d1:ac:5b:9a:70:5b:3a:9d:b4:8e:59:24:bc:e2:3a:
         6c:d7:e4:d4:b7:e7:34:f9:f9:54:c8:4f:14:e2:08:ea:b2:7d:
         77:09:9c:2b:b4:4d:e8:44:ac:30:8f:b5:a3:e2:b6:3f:b9:7d:
         d2:dd:18:4f:4b:52:1e:6c:29:42:53:3d:a6:04:0c:0c:ce:1b:
         ca:5b:34:ea:8b:83:0a:f1:c5:e3:7b:62:d5:39:5f:0d:9d:62:
         68:4e:9e:ed:d5:c8:09:cf:5d:28:27:17:fd:7c:be:5c:d1:48:
         fc:66:ac:12:72:85:9c:04:40:a5:2d:59:ed:17:86:ed:2e:41:
         8f:ee:6a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----