Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/BKr_h_bcDTaZvCk3o03HF_lPAH4.mft
File:                     BKr_h_bcDTaZvCk3o03HF_lPAH4.mft (raw, json)
Hash identifier:          6tVDdxRc2yExsLlPXzHFb5kQe8DCfJOfnsHsUPoNfL0=
Subject key identifier:   DC:45:E7:54:E4:69:55:10:90:86:0F:04:6D:F9:47:2A:5E:6D:41:58
Authority key identifier: 04:AA:FF:87:F6:DC:0D:36:99:BC:29:37:A3:4D:C7:17:F9:4F:00:7E
Certificate issuer:       /CN=04aaff87f6dc0d3699bc2937a34dc717f94f007e
Certificate serial:       01962ECF7AD7E1BDC2856B9C2BC6CE37FC66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKr_h_bcDTaZvCk3o03HF_lPAH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/BKr_h_bcDTaZvCk3o03HF_lPAH4.mft
Manifest number:          0245
Signing time:             Sun 13 Apr 2025 11:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:11 +0000
Files and hashes:         1: 6_SorJ25G4u7YBwW2zeSokP08Hc.roa (hash: NlgmlGFa+T46F9+6RUbpmORo7iUI0GDNp4IaSTudvHk=)
                          2: BKr_h_bcDTaZvCk3o03HF_lPAH4.crl (hash: 51/HLQ5pGGamVRuiOeQ/zUjSXJgPDA6TbibLaFWv5QA=)
                          3: KF4rj8wK1krzl3OrFPy-CqSf5Rg.roa (hash: Uyam0YZMVbS8n8u951YwMNv1LEzQgAQ1BgazVuDTRGI=)
                          4: db7fxSfPWokvsgFjR8LqozSxxoI.roa (hash: RXgT32dAocul6iqlp3swvj1YXuL0zf8bKqkA+u0l2/c=)
                          5: leQX7MTTNCcwwRlk5GrnV6QHByo.roa (hash: wvDWAkjEaXNZoWRBbZ4c0JTlvo1BtLH5Z/mnwlr+NT8=)
                          6: ydZvpx-cTBNzEbeU_ZbQ-vbyUX4.roa (hash: SOlye525/7jdmPwxqBK22yTDvIFdXndznoUXlfhw4B4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7a:d7:e1:bd:c2:85:6b:9c:2b:c6:ce:37:fc:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04aaff87f6dc0d3699bc2937a34dc717f94f007e
        Validity
            Not Before: Apr 13 11:01:11 2025 GMT
            Not After : Apr 14 11:01:11 2025 GMT
        Subject: CN=dc45e754e469551090860f046df9472a5e6d4158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:49:28:0b:c8:dc:92:f1:63:a1:43:9b:0a:5e:
                    47:eb:5e:c7:80:16:dd:20:88:58:f7:1f:80:52:87:
                    b0:aa:22:d1:53:c2:49:7f:c8:af:a9:f9:6c:6b:6b:
                    81:74:56:1e:b6:b6:30:6c:76:6c:ce:f8:73:32:ba:
                    63:49:c5:45:4b:a9:63:6e:8c:e8:f5:26:1f:ee:34:
                    c6:12:b7:9b:0f:a4:17:7c:b8:2a:f1:2f:00:56:f1:
                    16:00:8d:2f:01:a9:65:07:34:a9:aa:82:41:dc:db:
                    c6:16:08:48:2e:81:d1:5c:7b:81:24:ef:52:33:95:
                    69:13:55:2a:2b:14:49:5a:dc:3a:1a:d7:0b:9a:2f:
                    9c:31:71:4e:d3:d9:6c:c2:96:6a:54:1f:8f:5f:c8:
                    5f:81:a4:9b:f8:f0:25:ab:ac:b1:1b:db:25:eb:6e:
                    a3:cf:2f:11:94:86:4e:ca:58:67:cc:c6:1d:66:3b:
                    3a:30:75:26:8f:ed:dc:95:ec:6d:7e:2d:b1:fe:e2:
                    89:00:ab:bc:b8:e5:3f:56:b1:eb:24:08:3d:5d:c3:
                    19:02:38:06:0d:a2:be:cd:89:63:42:7b:f0:f2:8a:
                    cd:3d:ba:4a:20:eb:45:fd:28:21:54:da:6e:e6:83:
                    35:25:a0:bd:a0:47:61:a3:0c:41:8d:f0:50:60:fd:
                    11:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:45:E7:54:E4:69:55:10:90:86:0F:04:6D:F9:47:2A:5E:6D:41:58
            X509v3 Authority Key Identifier:
                keyid:04:AA:FF:87:F6:DC:0D:36:99:BC:29:37:A3:4D:C7:17:F9:4F:00:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKr_h_bcDTaZvCk3o03HF_lPAH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/BKr_h_bcDTaZvCk3o03HF_lPAH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/BKr_h_bcDTaZvCk3o03HF_lPAH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:f7:21:bb:cf:7f:0a:ac:10:14:a9:ab:99:3a:00:81:6d:3d:
         5d:1a:a0:60:4e:86:f0:2d:ec:7f:9d:b7:5b:f4:f4:5c:71:3e:
         c4:a0:14:53:1b:fa:be:fe:92:7c:78:9c:35:0e:85:50:a3:a5:
         ad:80:4f:ea:31:c1:f1:e1:3a:42:73:41:be:55:22:e4:29:ba:
         6a:47:c9:e8:50:9f:1b:2b:df:98:87:72:5e:f3:11:30:63:d9:
         42:4d:e2:75:ab:04:97:d6:c7:25:4d:f8:53:22:91:69:51:98:
         ad:90:05:2b:bb:22:28:b9:36:66:a1:cb:5b:69:71:32:9b:ca:
         f4:6d:3a:e3:49:72:f1:f2:a5:c0:0f:94:d4:56:09:47:c4:bc:
         f5:61:d6:5f:79:cf:52:cc:79:56:c2:e0:a1:d3:2e:92:95:70:
         26:c3:02:65:10:ac:b0:27:a7:59:c1:b9:f4:6e:16:28:09:48:
         25:bc:01:55:7a:53:ba:32:00:2d:1c:d9:e8:37:d5:ea:7d:93:
         2a:8c:f0:9b:79:a2:f1:fe:21:bf:31:7d:15:9d:26:0a:35:8c:
         30:0a:8f:6c:00:ff:a6:5a:d1:2c:6d:a3:81:21:b6:7e:fd:09:
         1f:6c:1c:67:94:e5:46:64:d9:c8:2e:f1:94:13:df:b2:54:d3:
         8f:2f:f9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----