Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
File:                     BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft (raw, json)
Hash identifier:          AYpeJqlxQ1XCKZHDSPL23yYFeUlceGkTSaarowsOBUw=
Subject key identifier:   49:BA:57:64:7F:ED:AE:02:46:D5:96:64:0E:95:C1:72:CC:34:5B:4A
Authority key identifier: 04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE
Certificate issuer:       /CN=041359da0d0b7a829e420fd932cafc1e3c1572de
Certificate serial:       01962DF3DF6F23FA4352ADD473DFFEA40D24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft
Manifest number:          137F
Signing time:             Sun 13 Apr 2025 07:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:19 +0000
Files and hashes:         1: BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl (hash: 4PHj4LamyPL/av5vOtCUKpVX3lbxHbX/6bOJumP1/7I=)
                          2: Ce_BbdsEv4VTlTlF-8r2HuBLzBo.roa (hash: /gyLg2rJXSor3WmgIG5R+n0glFhKZzzzFuxvqnBqlTs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:df:6f:23:fa:43:52:ad:d4:73:df:fe:a4:0d:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041359da0d0b7a829e420fd932cafc1e3c1572de
        Validity
            Not Before: Apr 13 07:01:19 2025 GMT
            Not After : Apr 14 07:01:19 2025 GMT
        Subject: CN=49ba57647fedae0246d596640e95c172cc345b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b8:97:48:88:bc:58:9c:f4:1b:8b:a8:87:52:
                    35:56:da:ce:03:49:7d:8e:5f:e2:27:25:e3:c7:12:
                    3c:e7:70:1f:14:41:ef:24:ff:59:4d:0a:1b:14:fd:
                    da:73:72:61:07:f5:61:2c:7d:7a:0b:53:23:ab:68:
                    04:fd:ae:97:0a:da:af:a7:ac:eb:b8:5a:d6:18:ad:
                    82:3f:30:0d:d5:bb:ea:63:91:d8:d0:59:1b:d3:11:
                    41:c9:36:80:14:1b:52:86:a2:be:fd:b2:54:cf:6c:
                    f2:ee:67:09:55:75:46:04:41:2f:86:65:5a:38:75:
                    12:68:d2:76:97:1c:10:ec:66:e7:5a:59:18:61:6c:
                    fc:35:a4:3d:fb:92:86:55:a4:91:1d:6a:9d:00:2d:
                    73:69:22:ad:ab:ff:76:93:ab:74:c0:5f:cf:af:7f:
                    0c:9b:af:f7:c5:9a:26:50:7f:0c:90:03:dc:9b:fd:
                    45:9a:73:25:44:ac:d2:26:7a:be:a5:d1:70:39:5f:
                    75:cf:91:1b:ec:e1:15:92:2f:19:5b:db:6a:9c:40:
                    bf:bc:60:6e:a0:9d:41:cf:ac:8b:32:8f:e9:85:28:
                    b7:a7:c7:d5:7b:1a:c5:fd:77:12:23:3b:66:89:32:
                    77:a5:9d:c8:4d:fe:41:20:1a:4e:ba:bc:37:9e:46:
                    2c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:BA:57:64:7F:ED:AE:02:46:D5:96:64:0E:95:C1:72:CC:34:5B:4A
            X509v3 Authority Key Identifier:
                keyid:04:13:59:DA:0D:0B:7A:82:9E:42:0F:D9:32:CA:FC:1E:3C:15:72:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4dffb0-199a-4c5e-ac91-86fe36ca0b74/1/BBNZ2g0LeoKeQg_ZMsr8HjwVct4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:97:5b:c2:24:c1:27:84:46:4a:78:37:49:97:0f:d8:4d:19:
         b5:d0:8d:35:c8:fd:c4:fd:77:87:b9:df:84:65:71:2e:ff:ac:
         32:37:2d:fe:0d:c2:e6:d4:07:6c:9c:0f:57:15:f1:47:4c:a5:
         0f:38:63:c2:6d:96:bf:80:2d:bd:c8:94:88:b1:8b:c1:f1:b1:
         f1:92:3a:55:c2:0d:ae:7b:d6:c0:a2:f9:eb:57:f8:5e:5d:b8:
         da:41:f0:b7:da:db:3b:e6:5f:30:56:5b:78:cd:24:0e:8b:4d:
         27:90:71:ac:5f:6d:87:50:25:17:09:75:60:6d:8d:8d:65:5d:
         96:44:89:84:09:50:15:27:a0:3d:56:cd:a9:34:88:55:66:9e:
         c1:72:44:ce:78:d6:75:e5:ca:60:21:93:a6:67:0c:e6:56:79:
         71:69:77:63:ea:2e:b0:82:01:97:95:1b:08:e9:c2:c3:de:67:
         da:31:3f:d2:d3:91:ba:7c:e7:33:21:7a:7f:42:22:6c:d8:14:
         d8:17:d1:42:32:9c:4f:ce:53:d9:15:fa:b1:e3:27:63:28:cc:
         9b:5d:0b:77:6e:ab:5f:da:b4:39:08:2b:bf:8b:49:f0:40:bb:
         4a:de:f9:5a:55:30:d6:e4:7e:65:c5:46:81:78:7e:be:db:c5:
         a1:2a:f8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----