Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
File:                     BmcU0ZkHp0vpXLsXN54Mihtag8o.mft (raw, json)
Hash identifier:          1OuHcOeJGctsGF8ay9DrdtqEkSk8S6KTOg/aKibqhMk=
Subject key identifier:   19:58:A0:4E:1A:B9:51:70:0F:C6:FF:05:7E:60:65:1E:2A:2D:20:41
Authority key identifier: 06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA
Certificate issuer:       /CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
Certificate serial:       01962F74A042ACBF5E305CEF9ED962A78F8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft
Manifest number:          046E
Signing time:             Sun 13 Apr 2025 14:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:34 +0000
Files and hashes:         1: BmcU0ZkHp0vpXLsXN54Mihtag8o.crl (hash: NzvLCMr+ES/BpmafQxWNvd4PhbmicGFc0V6XUGOnvoY=)
                          2: whgLIqQCCtaIFPGvrV-g35mBN8g.roa (hash: /96dk6CmGs9V0nPouKCLYMlqNQg4LfFeUQg3VaKiMzo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a0:42:ac:bf:5e:30:5c:ef:9e:d9:62:a7:8f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=066714d19907a74be95cbb17379e0c8a1b5a83ca
        Validity
            Not Before: Apr 13 14:01:34 2025 GMT
            Not After : Apr 14 14:01:34 2025 GMT
        Subject: CN=1958a04e1ab951700fc6ff057e60651e2a2d2041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bf:f4:6a:54:83:7a:8f:fe:b9:9d:b0:c2:75:
                    2e:af:52:18:0d:db:c2:c1:18:aa:20:89:7b:c0:b0:
                    f1:32:e0:0b:b8:62:c3:ee:a3:bc:7c:6f:26:92:d8:
                    d4:90:24:5b:9d:30:8c:de:84:f6:60:44:eb:ab:4f:
                    74:64:a4:b3:0f:5c:b2:4a:f9:01:56:2e:47:6e:16:
                    55:75:bd:65:7c:f1:4f:f9:0b:ff:68:7c:98:fe:9e:
                    2e:53:62:16:b3:75:18:d9:42:e9:35:38:06:36:2d:
                    44:00:60:9c:ae:fd:5a:03:f2:e1:c4:da:cc:b0:2d:
                    1d:17:d2:8b:c0:5b:db:78:14:27:26:91:91:1c:fe:
                    4d:53:f1:43:61:a5:96:70:44:7f:cf:06:2d:34:29:
                    b3:a5:1e:95:2f:47:2b:1f:4b:8c:53:4c:24:7f:30:
                    52:71:53:46:1f:87:9d:9f:6a:04:e9:25:ff:40:d5:
                    c5:46:17:fb:b3:83:8a:8f:60:fd:b4:5c:d4:c1:63:
                    54:a8:e3:47:96:ef:89:b8:c9:9a:18:df:36:1b:de:
                    29:bf:dc:5e:56:ec:68:de:d1:30:04:69:06:10:33:
                    e7:83:d2:7d:7d:a4:33:9e:ac:24:9a:22:89:24:ea:
                    3e:b1:fa:14:8a:8e:54:c4:fd:3e:25:38:ec:a2:fe:
                    c7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:58:A0:4E:1A:B9:51:70:0F:C6:FF:05:7E:60:65:1E:2A:2D:20:41
            X509v3 Authority Key Identifier:
                keyid:06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:e2:d7:3c:0c:7c:0e:5c:6a:36:32:ce:ef:16:08:9d:8e:db:
         82:29:f7:f2:97:8b:e9:37:dd:e1:b3:39:58:f3:76:7e:90:93:
         4d:ad:9d:9c:f6:56:f7:9a:75:f7:0a:29:6e:80:f3:9d:cd:25:
         e4:84:9b:0e:51:dd:cf:ae:f6:48:0b:c3:a7:27:56:69:c6:57:
         b8:44:e6:40:69:d6:93:d4:80:1b:e1:f0:81:e3:91:1a:55:04:
         81:a7:e0:d7:8b:e4:ca:15:ba:07:52:26:fc:d2:76:0a:bd:ba:
         70:2a:d0:56:58:6d:e6:6a:6a:54:56:63:ac:88:10:f5:6e:27:
         9f:28:a1:a4:f8:c5:46:fb:66:0f:19:3d:25:f6:c0:d9:ab:7c:
         bd:75:9d:d0:3f:62:d0:59:fd:02:f6:46:b2:b7:6a:91:69:35:
         61:48:fd:8b:27:07:77:39:1c:64:c1:d8:b8:3b:57:8d:da:3f:
         b5:69:12:d3:0c:c0:1a:37:03:95:b1:9b:b4:22:8f:cc:db:f8:
         80:1e:36:dc:ce:7f:6a:eb:53:8e:1f:d2:0d:31:57:55:9a:87:
         ee:49:84:76:4e:6f:15:55:96:da:32:ed:85:6d:4e:44:b4:2c:
         62:ff:28:23:42:15:9a:b9:af:1d:20:5c:97:43:12:4f:5d:b7:
         30:f3:a9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----