Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
File:                     Bal_9ASAitNPmqglF2fRrsiQYB8.mft (raw, json)
Hash identifier:          DkJaENEqhX6Wzcp2hzc8FW0hm3FmUPFDHYlnpYeMDO8=
Subject key identifier:   95:F3:0C:D1:FD:4D:64:D3:BC:F1:45:C0:B1:12:9D:88:DE:3C:DE:15
Authority key identifier: 05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F
Certificate issuer:       /CN=05a97ff404808ad34f9aa8251767d1aec890601f
Certificate serial:       01962F3D869C678DB835342010FC50D17334
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft
Manifest number:          10F8
Signing time:             Sun 13 Apr 2025 13:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:23 +0000
Files and hashes:         1: Bal_9ASAitNPmqglF2fRrsiQYB8.crl (hash: /ONV2+Xt5UX1uROcVr514qMAnYK6BVZ4Q9FMTaT9Xdk=)
                          2: cCgDo2j_rR0KoDzIDjg9vwwac6w.roa (hash: 8aUHRkkuubS/+P8SwIeoY6mY8z0l8tBlBlzopVHWUyA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:86:9c:67:8d:b8:35:34:20:10:fc:50:d1:73:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a97ff404808ad34f9aa8251767d1aec890601f
        Validity
            Not Before: Apr 13 13:01:23 2025 GMT
            Not After : Apr 14 13:01:23 2025 GMT
        Subject: CN=95f30cd1fd4d64d3bcf145c0b1129d88de3cde15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:20:88:78:b4:df:49:ad:9c:67:39:08:99:72:
                    9f:3f:b2:03:ee:30:bc:61:97:e4:88:e8:dd:09:b2:
                    f0:8d:68:60:fa:95:5b:c4:ed:2e:21:47:b5:74:40:
                    81:88:aa:72:21:64:50:dc:31:d2:77:40:b9:9c:3f:
                    cf:45:ad:6b:cd:21:df:0a:2b:4d:02:fc:50:72:f1:
                    c8:a9:9f:64:6a:6c:b0:e0:07:52:cd:4a:27:70:10:
                    25:12:95:29:23:81:df:66:ff:19:fa:e2:41:e3:68:
                    1b:ae:1f:7b:d9:7a:23:9b:26:c5:28:94:11:8d:df:
                    c2:e9:d7:ab:45:17:40:42:ab:06:f2:6f:94:e2:5d:
                    12:48:10:72:10:84:f1:71:68:6f:3a:54:40:d3:76:
                    0d:e5:85:6b:15:9a:d2:b5:a7:8c:55:f6:fa:b8:8d:
                    3e:b8:2b:dc:0b:d8:55:e3:a2:73:10:47:99:8f:d0:
                    85:ac:b1:a8:de:56:63:35:fa:e4:ca:c9:0b:59:a2:
                    19:1a:4c:4a:00:1b:a0:51:49:62:a1:17:a7:e8:13:
                    b7:aa:a6:70:7e:5a:d0:c4:6e:cb:53:88:d4:2b:11:
                    d5:b1:a0:ea:e0:b3:8d:9f:97:de:42:c4:4b:29:c8:
                    54:11:b4:d6:65:b2:be:e7:ff:1d:5a:54:ca:89:6b:
                    63:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F3:0C:D1:FD:4D:64:D3:BC:F1:45:C0:B1:12:9D:88:DE:3C:DE:15
            X509v3 Authority Key Identifier:
                keyid:05:A9:7F:F4:04:80:8A:D3:4F:9A:A8:25:17:67:D1:AE:C8:90:60:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bal_9ASAitNPmqglF2fRrsiQYB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6c953b-0763-4b6d-bf1a-6ce444ebeaf0/1/Bal_9ASAitNPmqglF2fRrsiQYB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:da:a5:60:ce:df:05:1e:7f:12:8a:56:56:53:75:0d:61:d3:
         a4:24:ae:46:4a:95:cc:ce:ee:65:de:ab:5e:83:1f:e5:e2:17:
         52:6b:a0:ea:dc:83:7f:39:3f:63:9e:92:41:fc:7f:d3:c8:27:
         36:cc:be:77:e1:15:f5:ad:e0:11:71:40:b0:43:09:92:6a:26:
         3f:85:c0:9c:b5:6f:cb:ca:07:bd:45:b2:ae:14:79:02:e1:90:
         67:ab:7e:d3:83:c1:3f:80:4b:9c:ca:02:5a:95:28:72:79:cc:
         25:2a:d5:15:36:22:f1:c9:3a:22:6a:a3:87:5a:c7:82:c0:07:
         f3:ef:38:69:9d:0f:53:04:83:32:95:bc:cc:d1:56:fd:c4:e8:
         15:0f:bb:31:1e:d3:e0:52:e8:d2:23:d1:5a:25:67:49:1b:f9:
         98:d9:3e:b7:f4:a1:9f:2b:f0:b5:e8:04:09:32:c1:98:82:a7:
         7b:cb:df:40:19:d8:ac:c4:2c:dd:b3:71:63:70:e9:b1:fe:be:
         f8:44:ab:d7:76:1c:65:91:3a:a5:1b:02:f0:62:23:3c:8a:cc:
         a0:71:62:84:43:e0:ed:6f:d7:d7:fc:47:7d:09:d3:1f:be:52:
         27:0d:b4:53:c5:9b:e1:70:fd:24:87:a1:a0:76:e5:40:bc:59:
         3c:65:34:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----