Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
File:                     BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft (raw, json)
Hash identifier:          RyvUv9sj3JJoYDZvqT3cf0+pq76LZFsX49RBzPebHso=
Subject key identifier:   93:7C:B5:CC:DB:34:3A:8C:33:01:1D:0F:FB:18:2A:E6:71:09:0D:2B
Authority key identifier: 05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
Certificate issuer:       /CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Certificate serial:       01962F3D87A733685DD9577911DF90676E08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:23 +0000
Files and hashes:         1: BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl (hash: fD3JmXc7yZY8Yps8z4LsBZ/1O/XGS+8ym2JXvi90Ra8=)
                          2: ddJdWwJ-x_kxknxp8wqmg5-PURw.roa (hash: /8Ho4F9DZAAaxfNKmXvihlaELQ9Ew+7q5ew0DKDsGRY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:87:a7:33:68:5d:d9:57:79:11:df:90:67:6e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
        Validity
            Not Before: Apr 13 13:01:23 2025 GMT
            Not After : Apr 14 13:01:23 2025 GMT
        Subject: CN=937cb5ccdb343a8c33011d0ffb182ae671090d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:11:03:4f:82:50:15:44:81:74:28:73:9b:3b:
                    b2:ca:33:b1:d4:b4:24:8c:03:60:8f:bd:4d:92:de:
                    b6:4b:c9:bf:d0:42:5a:d1:40:2c:76:fe:e7:5b:ed:
                    e0:d3:45:ca:1d:91:cd:3b:c7:a7:62:a6:2a:2e:85:
                    8f:c5:da:9f:4b:dd:23:a8:44:c0:d0:1e:1d:7d:25:
                    28:74:81:74:af:a2:f9:89:d1:be:aa:a7:74:52:69:
                    44:f8:f6:af:06:37:6c:d2:cb:82:36:d2:a4:b4:ce:
                    e8:60:b0:a5:19:cb:40:a2:9f:0c:83:c7:79:e8:99:
                    47:18:66:15:4a:2f:9c:82:9d:0e:ec:5b:95:02:f1:
                    eb:75:86:e0:0c:7c:37:43:ec:49:03:6e:ae:c8:12:
                    88:f2:3d:09:5a:6d:92:57:4d:72:d4:11:81:6f:6e:
                    d1:2b:2e:37:be:3c:ef:f9:b7:68:d8:a2:b0:82:ac:
                    92:71:99:f9:b2:e7:39:3f:00:9b:89:e1:d6:60:2b:
                    d2:df:89:56:10:7a:08:69:62:df:78:e3:10:34:26:
                    bc:f5:8b:67:93:16:97:16:1b:12:c2:bd:fa:e0:ee:
                    04:6e:ff:3a:0f:3a:92:da:49:05:02:cb:a8:5f:bd:
                    2a:f4:9b:7d:40:bd:4a:15:0d:8a:e4:ad:ed:9e:30:
                    b1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:7C:B5:CC:DB:34:3A:8C:33:01:1D:0F:FB:18:2A:E6:71:09:0D:2B
            X509v3 Authority Key Identifier:
                keyid:05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:8c:5b:ab:4c:80:ea:16:5f:14:9d:0b:35:9a:86:57:e7:99:
         19:f9:56:42:0a:f2:58:ff:15:47:b0:86:54:a6:29:dd:54:c3:
         eb:37:93:72:06:8b:f1:ba:03:7d:37:c6:c6:26:cc:47:57:0e:
         2c:c1:ec:7b:2e:aa:42:b8:5c:bb:c5:3e:c5:d0:fa:72:94:ab:
         e7:40:43:b4:ae:70:33:72:c3:85:83:54:a5:eb:80:e7:0f:99:
         8a:d1:27:d3:55:79:91:98:60:a9:a9:31:0b:c0:7c:f4:b4:29:
         ae:b0:4b:88:95:72:6c:f8:b1:9d:58:bc:e6:4c:c9:db:e2:4a:
         9b:a0:31:f2:4f:53:65:e2:11:99:6a:eb:ef:9d:e4:de:23:0f:
         3b:b2:95:3f:bb:12:73:b4:cd:78:f0:98:f9:f9:a6:cb:6f:64:
         29:1f:f2:db:78:40:73:36:9d:9a:41:62:4d:37:74:8c:b6:af:
         c3:5a:1e:44:ca:b4:82:92:15:44:dd:49:d3:20:73:5a:43:34:
         1e:f6:40:9d:ae:ae:89:78:03:9d:75:24:c8:a8:11:dd:08:ed:
         69:70:01:76:56:90:b1:61:aa:aa:fb:a8:13:56:72:18:91:81:
         7d:04:3c:92:e0:ad:f1:b9:2c:c0:d8:02:cc:b9:cc:5a:14:16:
         25:ac:96:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----