Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
File:                     BUJK-kvO52VL3zq3kWVuREXC-Vo.mft (raw, json)
Hash identifier:          VLfCcv25YXK9R98w4ZwndNL4ShDWXOVkhJKh5g83ay0=
Subject key identifier:   A1:41:0B:F4:AD:3F:C4:40:B6:94:8A:1F:08:7F:CF:76:1F:06:C3:51
Authority key identifier: 05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A
Certificate issuer:       /CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
Certificate serial:       01962F3DEBBF243B127E70E75778FD0BC206
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft
Manifest number:          02FC
Signing time:             Sun 13 Apr 2025 13:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:49 +0000
Files and hashes:         1: BUJK-kvO52VL3zq3kWVuREXC-Vo.crl (hash: CPOiwyJiocTqQpZ3CB+qSgGsdQZlkoT8cHNtahOF4iE=)
                          2: IUMtGwo7cTFP42D9nrk7-OpkQvQ.roa (hash: c6c/rj/fNAeM/ZuHFO3HQMFeZ6ws+kGa19bAnjrXmhM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:eb:bf:24:3b:12:7e:70:e7:57:78:fd:0b:c2:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05424afa4bcee7654bdf3ab791656e4445c2f95a
        Validity
            Not Before: Apr 13 13:01:49 2025 GMT
            Not After : Apr 14 13:01:49 2025 GMT
        Subject: CN=a1410bf4ad3fc440b6948a1f087fcf761f06c351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:6b:38:b6:2e:b6:3e:fc:6f:75:85:b9:01:71:
                    f3:89:ef:14:66:4b:04:67:80:3f:92:61:27:04:88:
                    26:f4:51:58:7e:c7:b2:ec:00:1b:57:30:6e:a4:24:
                    23:6d:bb:1d:59:ee:3a:75:b2:d2:e8:7d:22:d8:49:
                    41:1d:e7:58:65:5d:a9:14:5e:96:af:3a:c7:37:23:
                    6c:c6:aa:96:b6:96:0b:bc:8c:87:c8:d4:6c:36:93:
                    be:b9:64:ae:20:ac:02:de:33:4f:e0:2e:0a:6a:5a:
                    fe:b9:ae:d4:6f:51:2a:aa:b8:16:38:eb:cc:d9:24:
                    9f:f9:6d:5d:88:98:1a:02:bc:17:84:e1:01:d8:12:
                    56:23:c1:6a:c9:6c:0b:79:a0:c7:a3:19:82:3b:24:
                    f7:9c:dd:97:09:76:dd:de:c4:0a:95:b7:c6:19:00:
                    7d:54:6c:75:a3:90:ce:e4:93:8b:24:d6:9f:fb:46:
                    62:6f:d9:20:28:f7:0f:57:d6:f3:57:4d:71:08:36:
                    b3:b5:e4:f9:03:f6:43:c9:65:64:dd:a4:2d:9e:18:
                    2d:42:67:f4:c6:a4:41:40:5a:b9:28:0d:d3:6e:ba:
                    49:2e:37:fa:de:ed:63:d1:c9:57:70:80:d1:ce:c3:
                    df:17:d3:e3:db:6f:50:ac:60:43:2c:af:88:26:3b:
                    08:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:41:0B:F4:AD:3F:C4:40:B6:94:8A:1F:08:7F:CF:76:1F:06:C3:51
            X509v3 Authority Key Identifier:
                keyid:05:42:4A:FA:4B:CE:E7:65:4B:DF:3A:B7:91:65:6E:44:45:C2:F9:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUJK-kvO52VL3zq3kWVuREXC-Vo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5116f3-f454-4d70-b9d4-081b179933c4/1/BUJK-kvO52VL3zq3kWVuREXC-Vo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ef:53:77:98:34:4d:a2:25:05:29:89:61:5f:3c:d1:83:6c:
         cb:e4:2e:81:ad:db:01:e3:57:bd:4d:0f:34:c0:d0:fb:1b:63:
         8b:4d:ae:e1:02:bd:d0:64:0c:de:1a:48:6a:ae:b0:89:6c:55:
         71:20:15:7a:90:82:63:93:39:9e:ef:13:9e:ae:77:df:d5:a0:
         e7:ec:fe:b1:c6:77:3f:b4:68:c5:d9:62:7c:8b:e0:49:3e:bc:
         9e:28:7c:e6:80:56:92:17:9c:d7:71:b5:61:22:63:2c:89:8f:
         12:2e:50:dd:1e:98:81:8f:92:0e:00:54:5c:2a:70:e1:35:84:
         ce:8a:3e:d1:ac:27:0b:8c:df:97:33:de:59:45:f3:79:c7:38:
         9a:e2:02:04:1e:0e:7c:c5:59:1d:aa:78:3c:c5:30:0f:22:e5:
         55:6b:54:66:69:22:ac:44:05:e5:80:cc:b9:6e:91:6e:99:bd:
         bd:ed:a4:36:3f:fb:23:1f:5e:93:d1:fd:9d:32:88:03:2f:32:
         a4:f7:c9:58:fe:6a:5f:67:ca:f2:09:7d:6f:27:4d:a5:aa:c7:
         cd:52:62:b9:90:e1:f6:e2:bd:37:02:72:56:0d:a6:52:25:13:
         1b:84:6a:fd:6b:80:ef:1b:b2:1e:a1:42:17:7d:d1:35:e4:17:
         4a:2a:9f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----