Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
File:                     Bgit6Gocz3pIO0wpYgRduNDvgm0.mft (raw, json)
Hash identifier:          Z+uqBQJ6b/uxBoWKiJSoGZeOYb8ZqD2bRidhAvWxg2E=
Subject key identifier:   13:D9:49:AC:64:2B:E2:26:87:25:74:A6:C9:8B:99:BA:F6:25:B7:3A
Authority key identifier: 06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D
Certificate issuer:       /CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
Certificate serial:       01962E99B79087ABB82E6FEB2D1D807BBCCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:02:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:27 +0000
Files and hashes:         1: Bgit6Gocz3pIO0wpYgRduNDvgm0.crl (hash: 2mNbytnjwDNrMqpIKLus+JXO/KbdT+7DfRTJvGlY3oI=)
                          2: GqvJxk6cmO7Tb_I2mDvjscrokEE.roa (hash: yepd+YPVUD07Z1nRvo/cI6UMDSXFFH47vweszFDmLW0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b7:90:87:ab:b8:2e:6f:eb:2d:1d:80:7b:bc:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0608ade86a1ccf7a483b4c2962045db8d0ef826d
        Validity
            Not Before: Apr 13 10:02:27 2025 GMT
            Not After : Apr 14 10:02:27 2025 GMT
        Subject: CN=13d949ac642be226872574a6c98b99baf625b73a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:22:9d:da:24:7f:94:00:11:34:d3:0b:de:ff:
                    13:2e:36:34:f9:16:08:a3:a6:fd:8f:c4:b3:20:1c:
                    71:fd:ec:c5:02:3e:63:0b:00:76:cc:23:f2:e1:f0:
                    63:be:78:16:e6:21:d4:1a:db:6d:d7:3e:a7:83:2b:
                    b9:85:b8:f4:fa:15:92:49:0a:00:7d:49:dd:76:f7:
                    c1:13:8f:0f:64:fc:5b:c9:a6:c0:33:78:a8:dd:60:
                    9f:b0:ad:f7:eb:71:d7:f0:e9:a5:91:77:76:38:b7:
                    3c:dc:9d:bb:57:bb:3a:e1:0e:eb:6c:a8:db:77:39:
                    b2:97:84:35:a2:02:c5:dd:62:c5:cc:07:71:88:d0:
                    4b:c9:f5:b6:75:d5:6c:35:dc:28:1a:86:90:4e:23:
                    c8:fe:31:d3:27:61:2a:78:73:9b:ef:09:f0:5e:da:
                    19:4f:1f:bb:1a:c4:4f:fb:71:89:a6:cb:38:70:66:
                    ff:4f:13:24:7e:a4:c8:0f:97:06:d4:51:4b:10:b0:
                    f7:03:bd:28:85:3e:08:73:13:99:f2:f9:7a:57:82:
                    d6:f3:55:0d:ed:63:a1:2f:c1:00:de:6d:0d:0a:06:
                    7f:66:84:6c:e9:46:d8:d3:0f:69:a9:55:a2:9c:1c:
                    f3:a4:91:a6:b6:30:2c:09:b1:64:59:67:cb:cc:a0:
                    7b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D9:49:AC:64:2B:E2:26:87:25:74:A6:C9:8B:99:BA:F6:25:B7:3A
            X509v3 Authority Key Identifier:
                keyid:06:08:AD:E8:6A:1C:CF:7A:48:3B:4C:29:62:04:5D:B8:D0:EF:82:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgit6Gocz3pIO0wpYgRduNDvgm0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a98fb-e670-4cf4-81a4-4219022350fa/1/Bgit6Gocz3pIO0wpYgRduNDvgm0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:b9:d6:38:18:1b:5c:03:85:20:73:f5:91:31:a2:ce:cf:c0:
         44:d1:00:56:df:88:36:3b:5e:00:6c:f8:25:93:ee:1d:ea:34:
         aa:4c:68:8f:08:88:9e:76:fb:6b:3f:50:a3:8d:04:bb:cd:a6:
         0e:42:48:7b:b3:6a:00:36:b0:55:e6:58:60:42:31:04:fa:f6:
         e2:bc:33:01:2b:d9:ad:11:7b:74:ef:18:52:4e:34:f6:39:f8:
         4b:80:87:23:4f:7e:f3:61:19:34:c9:1c:fa:7b:dc:2b:6e:55:
         b0:d2:08:c3:e1:15:7d:85:83:03:38:4a:a9:cb:58:fa:ac:f0:
         69:53:f4:b9:93:ac:80:c2:3f:d8:99:65:bd:0b:04:37:da:c9:
         c0:0b:3f:ae:46:90:98:c7:47:32:c7:6b:ec:26:60:87:bb:e3:
         fe:05:eb:c9:66:14:00:c6:a9:b7:09:09:9a:df:cf:6f:c4:46:
         a2:aa:7f:28:d0:e2:95:8f:96:c4:03:e8:95:d8:65:45:18:4f:
         a2:3e:1b:c5:8b:b8:62:36:b5:ca:4a:8d:03:e5:df:06:9d:7d:
         aa:13:cf:1d:ce:56:a0:d0:cc:dd:9a:4c:22:45:a3:de:aa:db:
         d8:35:f7:da:57:cf:70:55:47:5a:f4:44:20:41:79:34:58:94:
         a6:db:eb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----