Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
File:                     BSawPHFxhMNoCBflXiRV-F1zpBM.mft (raw, json)
Hash identifier:          tCaUXnH4MfglkHoAXkXoSU0bPDpoIO9BrBTWCyRru58=
Subject key identifier:   04:98:12:16:83:BC:A6:FE:06:1B:06:17:3A:CA:B0:85:88:74:FE:1F
Authority key identifier: 05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13
Certificate issuer:       /CN=0526b03c717184c3680817e55e2455f85d73a413
Certificate serial:       01962F071D088B48C7224FF1088BD61D0809
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft
Manifest number:          0F1D
Signing time:             Sun 13 Apr 2025 12:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:57 +0000
Files and hashes:         1: 8c89w0Wi8wMsoXrghW5qP2-hNS0.roa (hash: D8vS3w3ktRdTzyzGgvoFRLHLzAmdAx/fg6SYcr4tnA0=)
                          2: BSawPHFxhMNoCBflXiRV-F1zpBM.crl (hash: o5aXw0UiGH03Ccghx0F7cH+3ouJGSfOryBPQMlb/3Z4=)
                          3: LBR7RpZCmjGvt1v9tbRFpwkQMaw.roa (hash: AoRhTxCocworcFcJEn7HIkWysaUCbOeg9SCDarPfLio=)
                          4: fCmxjuxg2kiGhVLozWEWvXwEU4U.roa (hash: M5qgc4FTv7281YHawHS2pyFS7vA+gmBBWWyMQstn7/0=)
                          5: on4gpGJOHGq7wUfeYCtHexguWtQ.roa (hash: 5ZJxuvDtIu1nJoOPrpG6riUENx+x7kLEuXrvV0lgwlc=)
                          6: vLG1v7q_yT3zlBQ7WH3CyQIXXV8.roa (hash: EbYzsGOVGjKsicwaZR2OeGri00bCsiOsnw3ngd6fMJU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:1d:08:8b:48:c7:22:4f:f1:08:8b:d6:1d:08:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0526b03c717184c3680817e55e2455f85d73a413
        Validity
            Not Before: Apr 13 12:01:57 2025 GMT
            Not After : Apr 14 12:01:57 2025 GMT
        Subject: CN=0498121683bca6fe061b06173acab0858874fe1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:48:41:31:c4:97:81:5c:1f:ac:5d:43:a8:6d:
                    1f:c2:9e:21:96:95:16:be:61:f4:bb:05:72:05:68:
                    fd:49:24:a0:9a:41:28:66:fe:0b:3f:1c:65:77:fa:
                    8f:29:a6:4e:37:e8:1c:5d:f5:17:c7:0e:f6:4a:15:
                    4c:3a:67:69:3e:da:85:62:1e:6d:b3:25:8a:6c:06:
                    d9:30:b9:ef:65:46:06:56:24:a5:0e:b3:74:2d:8a:
                    0a:64:06:15:67:28:88:42:f0:b6:db:97:73:3c:4b:
                    20:5f:be:64:d0:bf:be:e9:7e:f5:60:90:d5:d6:9e:
                    d1:29:93:3a:c3:40:32:94:67:13:d1:0d:af:de:d2:
                    ec:2c:a5:2c:33:d5:67:32:36:f0:8b:06:7f:a5:24:
                    f7:ad:4a:76:a7:6d:28:97:46:79:9e:46:50:2b:57:
                    d0:02:7f:e0:19:99:e5:6a:3d:75:fa:87:5e:1e:bf:
                    c3:83:81:bd:c2:c9:c0:bc:6b:43:47:e0:02:c8:3c:
                    37:c4:93:71:73:32:e0:7e:c9:06:81:52:76:34:c7:
                    39:ae:39:86:1a:de:94:a9:1b:64:df:e0:aa:0c:d2:
                    a8:34:15:f4:07:68:c2:3b:51:a6:bf:4b:a8:09:51:
                    d4:90:4b:8c:81:41:16:7b:21:a9:47:b6:12:b5:08:
                    1f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:98:12:16:83:BC:A6:FE:06:1B:06:17:3A:CA:B0:85:88:74:FE:1F
            X509v3 Authority Key Identifier:
                keyid:05:26:B0:3C:71:71:84:C3:68:08:17:E5:5E:24:55:F8:5D:73:A4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSawPHFxhMNoCBflXiRV-F1zpBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/a3383a-04eb-43f8-a953-3bf04a2a93d8/1/BSawPHFxhMNoCBflXiRV-F1zpBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:56:53:02:7e:89:16:fd:b5:df:0c:5c:46:6b:e0:2a:ec:8b:
         89:36:9b:dd:04:a6:4e:95:54:93:9b:5b:0f:db:58:b0:54:09:
         ae:fe:ad:50:f7:7a:25:58:61:d3:f9:bb:12:12:e4:da:ec:1d:
         49:33:8e:b9:46:06:b0:ea:ae:26:a9:25:77:8b:af:5b:20:3d:
         b6:44:09:24:dc:51:ee:a4:2c:9b:9b:2d:1b:32:b3:68:89:46:
         68:73:93:40:63:fd:b3:11:df:5d:10:7d:31:77:4b:9c:0c:fe:
         05:f4:e7:87:e8:3e:95:10:12:b1:c0:bb:72:36:95:63:87:42:
         3a:19:99:d1:ce:f1:d7:a6:44:f5:8d:51:0e:97:3c:d7:10:33:
         3d:86:68:6a:5d:7d:e8:32:f4:6e:0d:04:31:71:96:83:d5:f9:
         99:8f:ef:9a:81:f0:0a:1e:ce:7b:ce:c6:72:2b:f7:4b:66:e0:
         ec:dc:47:36:4a:14:15:c0:e6:1c:58:9d:51:b1:86:b5:df:a7:
         fe:82:8b:dd:68:e5:01:eb:34:99:09:6f:7a:a0:11:f6:91:f8:
         a0:39:3a:20:ec:41:0f:b8:05:3a:bb:0f:2e:03:43:7a:d6:92:
         a7:45:82:45:a6:69:e6:57:3b:0c:69:b7:a4:c4:31:7c:ab:a9:
         fc:9e:ee:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----