Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
File:                     BsL3NfcUX3DScCYC7oyBVknrLkU.mft (raw, json)
Hash identifier:          MV3tmRpCakp626LcCliLbw3gPcwkV2GnfEOuIjeBDT8=
Subject key identifier:   99:98:61:F1:69:B0:92:80:9F:4E:F5:CD:37:25:34:EB:4C:BA:72:2B
Authority key identifier: 06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45
Certificate issuer:       /CN=06c2f735f7145f70d2702602ee8c815649eb2e45
Certificate serial:       01962E99AADBBEB74A165502CF71FA3773D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft
Manifest number:          0F1E
Signing time:             Sun 13 Apr 2025 10:02:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:24 +0000
Files and hashes:         1: BsL3NfcUX3DScCYC7oyBVknrLkU.crl (hash: SZT7qmEzsrHy+oj0+8iTBwigbGLdKz3G7sqnHoeL9Aw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:aa:db:be:b7:4a:16:55:02:cf:71:fa:37:73:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06c2f735f7145f70d2702602ee8c815649eb2e45
        Validity
            Not Before: Apr 13 10:02:24 2025 GMT
            Not After : Apr 14 10:02:24 2025 GMT
        Subject: CN=999861f169b092809f4ef5cd372534eb4cba722b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4d:d0:25:5b:1e:a8:87:81:b2:c3:9e:fc:ff:
                    5f:9a:a9:5f:d4:fa:fe:8e:16:03:d5:d4:a6:9f:f2:
                    ab:c5:ac:7d:41:5d:8b:9a:06:dd:5c:99:27:a6:ea:
                    3d:5f:10:e4:8a:fd:3c:6a:a4:ea:ff:e2:b7:cc:3f:
                    0f:5d:f4:b5:c8:9f:bc:56:94:e0:cc:cc:6e:6b:5a:
                    5c:b1:46:73:4a:2e:b9:64:ed:b0:ae:18:61:b0:e3:
                    cd:b9:e6:cb:31:dd:f8:5f:54:53:a0:14:e8:fd:53:
                    1d:fd:63:d2:b5:38:bf:78:a7:52:fe:07:11:c1:5e:
                    70:15:fe:42:e5:f3:7a:5b:13:3d:b7:39:85:32:cf:
                    8b:c6:63:8f:2e:6e:f8:bb:83:98:fc:25:3f:96:b3:
                    9d:ec:3e:5f:8c:ba:29:35:e9:35:53:1b:8f:83:83:
                    11:44:4b:5c:89:64:ad:af:4f:d0:ad:4d:9a:67:83:
                    2b:ed:99:ef:a9:0c:e5:0e:50:f5:9d:c4:69:e9:cb:
                    9b:e0:63:6f:2e:8d:c2:71:35:7d:e5:47:31:84:40:
                    ad:35:6f:77:24:e8:19:5b:b7:87:2f:51:a1:c7:01:
                    07:38:87:83:ba:69:00:1c:0e:5c:9e:a3:c1:83:4d:
                    ef:1c:c8:be:3a:0f:96:32:f8:f2:69:f8:a4:cf:85:
                    5f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:98:61:F1:69:B0:92:80:9F:4E:F5:CD:37:25:34:EB:4C:BA:72:2B
            X509v3 Authority Key Identifier:
                keyid:06:C2:F7:35:F7:14:5F:70:D2:70:26:02:EE:8C:81:56:49:EB:2E:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsL3NfcUX3DScCYC7oyBVknrLkU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a57328-77c6-4ca3-8b6d-1ff630c350ff/1/BsL3NfcUX3DScCYC7oyBVknrLkU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:b2:1c:51:87:22:1a:52:0c:78:84:1d:3f:f8:09:d8:28:03:
         d3:c3:81:a0:f9:4d:11:1a:d6:b6:b4:98:18:cc:8d:cc:3b:b2:
         e7:26:e8:be:94:ec:07:12:0b:37:ca:09:dd:19:14:71:bd:d3:
         0b:3d:5c:d8:bc:e7:2d:33:d1:17:5a:af:dd:07:11:29:6a:33:
         26:f0:7b:18:0f:82:d1:60:6c:8d:77:a4:39:ce:cb:8a:fe:b7:
         80:a9:9f:1a:17:87:96:3f:73:26:fb:67:a9:b4:b1:07:bb:14:
         e1:80:35:8f:e5:02:d3:8b:f2:5b:10:e0:2e:97:53:1a:80:03:
         e0:a8:7d:e9:f9:b1:e4:8a:ae:7b:ae:b6:95:40:53:58:77:db:
         d6:a2:d4:f3:19:18:e1:de:b1:52:e4:3d:f5:97:92:1a:08:f4:
         0c:24:4c:81:17:b9:e7:55:5d:67:42:1c:2e:ee:5d:59:c3:5c:
         0a:d6:10:9d:a8:28:83:cb:d7:a8:dd:10:44:83:f8:a5:85:6e:
         e7:87:f4:c6:a2:d4:df:af:44:07:c0:99:b0:7e:10:c2:63:57:
         ce:44:37:7a:d2:a0:2a:32:7d:e7:1a:76:ee:ea:45:9a:c3:55:
         ab:89:26:fe:af:b6:78:60:95:20:5b:14:de:e4:89:27:9e:7c:
         01:21:00:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----