Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
File:                     14BeHP_BOS59F2j48FVKHH9jRK0.mft (raw, json)
Hash identifier:          ohCGNPEmuYhsx9vMVYb0/b669uDA/K0BA7PBnLVLYsQ=
Subject key identifier:   0F:CE:DC:AA:DE:AB:58:63:12:17:7B:F8:CD:44:7E:B5:69:55:DB:84
Authority key identifier: D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD
Certificate issuer:       /CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad
Certificate serial:       01962F07264C497037239EFCE2987F0CF7E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft
Manifest number:          1222
Signing time:             Sun 13 Apr 2025 12:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:59 +0000
Files and hashes:         1: 14BeHP_BOS59F2j48FVKHH9jRK0.crl (hash: /Kwtd+FBBA9UmLq6tlEn5s2FFxqJd3Wf9wns3+Bqh/M=)
                          2: xcIstN59HOzGE1G9ty62N5JYD0o.roa (hash: BZxFBF1fX1zEMIn2hYmGhW7/ZSCk8wjGWMR8N700UvI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:26:4c:49:70:37:23:9e:fc:e2:98:7f:0c:f7:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7805e1cffc1392e7d1768f8f0554a1c7f6344ad
        Validity
            Not Before: Apr 13 12:01:59 2025 GMT
            Not After : Apr 14 12:01:59 2025 GMT
        Subject: CN=0fcedcaadeab586312177bf8cd447eb56955db84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3d:97:30:3b:d0:4f:37:bd:2c:68:06:5f:af:
                    be:e8:89:14:b4:98:66:5d:02:51:03:d7:66:69:d2:
                    70:00:48:cd:69:55:30:0b:9a:9b:7c:ad:b2:84:c8:
                    61:22:41:b6:cc:98:b0:37:dc:27:b5:3b:eb:5c:a2:
                    6d:07:11:62:d0:ac:bb:6b:07:d8:d1:0c:61:dd:09:
                    21:ca:fb:ab:94:0e:5c:aa:04:4a:70:7c:68:1e:5d:
                    ca:00:c2:39:fc:76:1a:f8:7b:37:65:a3:2f:d5:82:
                    c4:73:c9:36:4f:94:6b:b5:5e:22:4b:2a:47:71:fc:
                    03:eb:51:16:7e:e3:bd:04:96:e2:6b:9d:c5:41:83:
                    4e:9f:4f:c7:49:ed:17:76:fc:03:be:74:20:10:22:
                    a8:e2:7f:e7:aa:0a:7d:11:5b:4a:0a:18:67:8f:ff:
                    89:92:09:a8:ee:e6:4c:bf:f3:03:62:41:87:98:7f:
                    dc:0c:46:f5:0d:52:ee:b6:de:ea:47:43:03:c7:bc:
                    dd:c2:77:7d:b3:9c:ce:fb:89:d3:7f:95:f8:bc:e1:
                    f2:94:ba:7b:56:74:3d:7a:aa:37:31:8c:de:a4:3c:
                    79:6a:37:7f:ec:ed:cd:38:72:6d:9e:1a:21:72:68:
                    cf:c0:3b:90:58:d6:40:78:83:da:6c:90:b6:56:ee:
                    20:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:CE:DC:AA:DE:AB:58:63:12:17:7B:F8:CD:44:7E:B5:69:55:DB:84
            X509v3 Authority Key Identifier:
                keyid:D7:80:5E:1C:FF:C1:39:2E:7D:17:68:F8:F0:55:4A:1C:7F:63:44:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14BeHP_BOS59F2j48FVKHH9jRK0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4a3d8a-529d-4d91-9f25-2254bc2ca6c0/1/14BeHP_BOS59F2j48FVKHH9jRK0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ad:23:9b:5f:7f:1b:9f:31:da:a1:04:06:0d:0e:d9:5b:2c:
         cf:a6:28:12:d6:d2:6c:33:7c:72:73:78:06:f6:d3:99:58:8d:
         22:b1:9f:06:52:5e:0c:8e:c3:22:e8:b4:27:74:01:39:c3:c9:
         03:b6:8a:90:fe:95:7c:82:c6:95:32:63:d0:04:c5:1c:ce:a8:
         54:cd:5b:f4:26:8a:88:a9:70:b4:f6:97:cd:31:d5:fa:29:07:
         b9:c1:c4:c8:b8:a4:05:46:9c:1c:2b:d9:9d:67:5d:79:6a:f4:
         93:cd:b0:65:2a:76:7d:47:9b:56:a0:01:27:3b:d1:39:e1:be:
         fd:db:7d:f3:33:a5:c7:08:26:f7:92:6d:a6:10:85:c7:9c:78:
         8b:48:ef:bb:db:2c:e3:e7:81:50:d3:0b:da:67:87:41:e0:55:
         54:ad:fc:0e:1d:ee:1d:f5:79:75:13:ef:17:8a:7e:e5:dc:46:
         f8:97:1b:3c:0d:1e:8e:1c:99:dd:dd:cc:cf:32:49:5c:ff:34:
         aa:a0:b5:ce:25:6b:6d:30:19:78:cd:b6:22:99:85:6d:0f:d9:
         66:31:d6:d4:82:cc:a5:78:11:71:9e:53:8a:e7:50:ee:94:bf:
         36:a1:38:cc:d8:c6:83:55:1a:1a:2b:71:1b:d2:80:35:61:82:
         f8:56:05:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----