Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
File:                     BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft (raw, json)
Hash identifier:          P5hAwvuj7I0ty0P3lLzda3mIoCOTWZ/tWZjrOeN1Zfk=
Subject key identifier:   3D:E2:28:F7:B5:AB:97:78:B5:77:E1:F8:C4:98:71:58:98:04:4A:B3
Authority key identifier: 04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3
Certificate issuer:       /CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
Certificate serial:       01962F7420ABEE2560DD02AA43E339ADA43B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 14:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:01 +0000
Files and hashes:         1: BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl (hash: xDvu26ZdeUEk5z/BzLUizxHKUMIO0dvVUv4ttDGgYQc=)
                          2: NmkuWisNNR7yCTNM4BUhyNRxVxo.roa (hash: qERY3AcVPARhb2r8P5F7KsbGo82n2f3qr7wO9B4TKno=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:20:ab:ee:25:60:dd:02:aa:43:e3:39:ad:a4:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044b22d249b6663f9fa34b1762d25ffd9fb3fed3
        Validity
            Not Before: Apr 13 14:01:01 2025 GMT
            Not After : Apr 14 14:01:01 2025 GMT
        Subject: CN=3de228f7b5ab9778b577e1f8c498715898044ab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f5:ea:8c:99:7a:88:f8:65:5a:ef:4e:be:81:
                    dd:21:f1:dd:02:7c:06:2c:b7:57:de:ce:c5:91:be:
                    90:ec:a1:73:66:2b:f7:3a:70:83:a2:60:1b:47:50:
                    2f:3a:e2:5d:8b:dc:f8:b9:85:7f:16:e3:b2:3c:7c:
                    81:4b:c1:5c:dc:1f:36:e0:7b:e7:91:51:06:00:87:
                    49:87:ac:85:9e:0b:97:5e:6a:ac:97:68:36:01:76:
                    cf:b4:d3:da:35:be:b2:1f:e8:9f:09:2a:d4:71:2d:
                    9a:7a:31:13:ee:e4:64:c4:98:fa:13:03:c2:92:9f:
                    37:15:d8:70:c0:71:cd:43:c0:44:81:4d:05:d2:ad:
                    9e:a2:44:f6:50:d6:c1:76:e6:a1:05:64:91:ba:bb:
                    42:03:12:bb:a0:27:56:c6:c3:66:48:d1:05:5f:74:
                    41:a4:5a:5b:05:ed:b9:69:a1:d7:27:78:ac:d6:f5:
                    5d:08:39:98:64:fc:03:76:fd:00:ef:82:51:59:af:
                    45:74:e3:eb:25:44:b3:74:cb:f1:4b:45:59:cb:db:
                    24:94:e9:b1:7a:95:fb:fe:ec:81:98:f1:85:3c:ae:
                    06:8a:c9:9e:ac:8b:b7:c3:ca:ca:90:02:40:34:75:
                    30:49:dc:ad:b2:13:c0:8f:46:12:b6:b6:5c:97:c5:
                    c1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E2:28:F7:B5:AB:97:78:B5:77:E1:F8:C4:98:71:58:98:04:4A:B3
            X509v3 Authority Key Identifier:
                keyid:04:4B:22:D2:49:B6:66:3F:9F:A3:4B:17:62:D2:5F:FD:9F:B3:FE:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2d0e9b-5020-49a6-a391-6373d36ceef6/1/BEsi0km2Zj-fo0sXYtJf_Z-z_tM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:48:15:4a:26:cf:55:8b:85:49:c0:b2:2f:40:c1:99:bd:70:
         39:3a:3d:18:2f:76:cb:b3:5f:5e:ec:05:50:1d:f9:2e:6e:10:
         16:77:58:4c:53:ed:27:ba:ab:5f:f7:e4:03:fc:f0:ea:55:d0:
         78:4d:77:c7:85:ab:a7:9c:d4:3e:32:17:77:01:f0:0a:87:2f:
         f5:f0:98:ae:7f:53:5c:f3:52:32:d8:83:4b:64:e7:9d:fe:c7:
         4c:e7:40:bb:c2:71:00:87:17:ac:5b:75:66:11:bf:39:f1:15:
         2d:82:20:21:82:42:dd:63:a6:ab:0f:31:7e:80:43:1e:28:c5:
         25:0e:e2:7c:d3:4c:d0:c4:13:13:16:eb:5a:8f:12:76:16:41:
         19:44:af:35:4d:05:8d:40:7d:e4:03:bd:22:a1:68:8c:ab:60:
         5d:c7:55:e3:7b:0e:75:d8:31:36:a0:af:26:66:f2:a7:19:be:
         a6:aa:00:2c:69:23:c6:78:1f:9e:ee:35:55:2c:20:0a:01:49:
         09:37:4c:83:52:00:7e:54:64:15:b8:a7:d9:0b:17:fc:2e:dc:
         59:57:04:a6:9e:42:67:90:0a:b5:b7:f1:c3:36:98:02:45:65:
         ff:e4:21:c0:d8:e1:0f:4c:b6:fa:7c:cf:7a:45:14:81:69:98:
         1b:ee:4c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----