Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.mft
File:                     BK0S-65UbQGDxgR9T3XojgDgcFM.mft (raw, json)
Hash identifier:          0B8H95mrUuRopdhLRGQ5LDc894eAIYlXkGJb0/PX6UA=
Subject key identifier:   89:DD:EE:F0:FD:4E:AC:FD:35:6A:9A:95:32:E2:2E:B7:CD:25:C1:2D
Authority key identifier: 04:AD:12:FB:AE:54:6D:01:83:C6:04:7D:4F:75:E8:8E:00:E0:70:53
Certificate issuer:       /CN=04ad12fbae546d0183c6047d4f75e88e00e07053
Certificate serial:       01962DF3DC17D3CB98064337E320D15EA206
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BK0S-65UbQGDxgR9T3XojgDgcFM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.mft
Manifest number:          065A
Signing time:             Sun 13 Apr 2025 07:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:18 +0000
Files and hashes:         1: 03r9teGlIIoVxROODKNuga9dOzU.roa (hash: 9Wc2wvu85Dfe1ci9s6U+USNWMFZ0HiJGgzoBgF8mm3Q=)
                          2: BK0S-65UbQGDxgR9T3XojgDgcFM.crl (hash: mjXVqPijtUIFj1eB9kbevc1ugws+WX9zalrpuUFgGWw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:dc:17:d3:cb:98:06:43:37:e3:20:d1:5e:a2:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04ad12fbae546d0183c6047d4f75e88e00e07053
        Validity
            Not Before: Apr 13 07:01:18 2025 GMT
            Not After : Apr 14 07:01:18 2025 GMT
        Subject: CN=89ddeef0fd4eacfd356a9a9532e22eb7cd25c12d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3f:dc:05:57:1e:f2:59:8c:d0:50:37:06:46:
                    19:42:0e:16:a2:1f:ee:3a:1a:3f:f3:93:fa:98:23:
                    3e:61:c4:ca:26:f6:c5:85:d9:7a:ca:c7:06:8b:8c:
                    0d:72:52:32:3a:67:7f:cc:54:34:a5:37:1f:36:d5:
                    5b:b5:7d:9c:0a:be:cb:b2:ac:18:5d:cb:f8:db:10:
                    19:b4:28:06:c6:ce:6b:74:0c:b6:a2:ef:1b:19:5a:
                    c3:44:12:24:45:18:f0:1b:74:61:b6:b6:a5:9e:2e:
                    13:1c:84:46:4e:ea:d8:c7:06:4c:c4:43:45:95:36:
                    af:0d:17:b1:e5:74:a4:08:da:d6:c3:95:ea:fc:b1:
                    99:4f:12:a3:79:e0:9b:51:8f:8f:34:16:7f:b8:80:
                    bc:ce:3c:d0:c5:54:cf:56:2f:71:f0:5b:95:fb:34:
                    42:85:4e:f0:23:60:55:1e:93:05:84:66:34:67:ef:
                    5a:b8:e7:6d:9b:fa:80:54:b5:59:3e:f0:05:57:63:
                    33:08:58:67:30:b9:2a:96:72:01:30:8a:8e:ac:8b:
                    51:3e:e5:13:f6:6d:92:b6:5f:16:96:1f:28:2a:cf:
                    34:d5:34:11:c7:ba:f1:b1:d8:46:be:2c:34:29:52:
                    47:f7:cf:15:57:32:c0:68:07:73:37:b8:71:5f:b0:
                    52:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DD:EE:F0:FD:4E:AC:FD:35:6A:9A:95:32:E2:2E:B7:CD:25:C1:2D
            X509v3 Authority Key Identifier:
                keyid:04:AD:12:FB:AE:54:6D:01:83:C6:04:7D:4F:75:E8:8E:00:E0:70:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BK0S-65UbQGDxgR9T3XojgDgcFM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/5cd3e3-d843-4d6b-8136-6abfb8b90132/1/BK0S-65UbQGDxgR9T3XojgDgcFM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:60:b9:14:f1:78:32:78:ac:d0:5f:f6:0d:56:82:c0:5c:ce:
         d0:d2:f8:8c:d7:0d:9d:c6:e4:7c:12:85:9a:2f:63:96:8a:43:
         33:41:1d:1b:a7:c3:45:dd:46:43:b8:0c:2c:9e:f6:a9:d2:bf:
         d3:a1:2d:2e:1a:ea:94:45:c7:e8:1c:dd:21:8f:a0:80:f9:4c:
         2c:15:97:b2:e9:52:04:b8:1c:0d:5f:ef:0a:7d:f8:55:2d:8a:
         20:91:31:a2:41:87:6b:c9:ae:8f:8d:cf:4d:84:73:55:cb:84:
         a4:a3:0b:e6:0d:2f:af:04:d2:e0:55:1e:24:ff:b3:62:e2:a0:
         20:54:e9:69:f3:7b:f7:ca:42:31:5f:ad:61:6a:f5:e7:ee:02:
         ef:fc:01:28:5b:29:fe:36:55:ca:34:12:d6:3f:19:24:f3:57:
         1e:80:45:5a:c9:77:bc:34:b4:e5:53:31:bb:3d:1b:73:99:ff:
         01:6c:55:05:b6:6d:70:4a:87:43:fb:31:f0:2a:04:f1:78:56:
         5e:37:ca:b3:93:52:00:62:e4:f4:0f:1d:a0:77:40:46:50:53:
         94:d6:f8:1f:e2:3b:26:50:17:14:53:de:b1:3a:33:f3:ff:19:
         84:75:81:38:db:00:1f:6a:8d:00:8e:a6:29:12:b8:35:f5:18:
         5f:a4:68:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----