Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
File:                     BfWa7cKCluKRck95N954jichZAg.mft (raw, json)
Hash identifier:          aC1Xs/sylz0N9GoEqWP5YzuuCnhk5pDgD3rJMGBHRiE=
Subject key identifier:   EC:77:4E:DF:30:24:21:42:0A:E3:B1:DA:71:99:6C:A6:2D:7A:FC:E8
Authority key identifier: 05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
Certificate issuer:       /CN=05f59aedc28296e291724f7937de788e27216408
Certificate serial:       01962E98D5CC83494F7AA66515B9458B9975
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
Manifest number:          1407
Signing time:             Sun 13 Apr 2025 10:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:30 +0000
Files and hashes:         1: BfWa7cKCluKRck95N954jichZAg.crl (hash: amCYF7251Q9pE+STPMJI7HngClicgypBrgcJR+GrHGs=)
                          2: u4-8TJgeQH4fa-D9xZl4ZB3jNoQ.roa (hash: tT+Wu4e7mtchTUuSJdCNjA8Yykw8lNY7Bv1xK7SFPsU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d5:cc:83:49:4f:7a:a6:65:15:b9:45:8b:99:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05f59aedc28296e291724f7937de788e27216408
        Validity
            Not Before: Apr 13 10:01:30 2025 GMT
            Not After : Apr 14 10:01:30 2025 GMT
        Subject: CN=ec774edf302421420ae3b1da71996ca62d7afce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e6:dd:ac:ba:6e:6e:7d:48:42:73:49:cd:0c:
                    c3:a3:cc:de:21:76:ea:7e:ab:96:d1:e4:23:cd:ff:
                    cf:82:4a:dc:2a:2b:68:56:4f:8f:0a:3c:4a:c4:5d:
                    73:df:5e:5e:af:f0:92:9e:68:fa:d4:68:14:e7:bb:
                    ac:38:eb:0c:99:16:de:9f:2e:8a:e9:84:1a:fb:ce:
                    f1:f0:6f:a8:5e:06:30:39:96:fa:58:c1:aa:51:07:
                    32:81:34:8a:7b:6c:be:8c:54:94:6d:d5:ea:6b:ec:
                    22:3d:1c:5b:91:46:84:e7:85:02:13:d5:23:bb:10:
                    bd:87:2d:c4:ed:53:a8:5c:14:dc:d0:aa:04:38:e7:
                    92:f2:8a:d2:61:69:51:4c:68:57:c3:40:b9:54:16:
                    5f:74:2a:da:47:8b:50:a0:2e:ce:23:4b:bc:83:48:
                    34:ed:81:e9:ae:24:0b:61:be:e2:13:2b:1b:ed:ac:
                    3e:57:69:20:08:81:d7:f0:6a:fa:15:c5:11:e1:ac:
                    34:d2:c2:44:05:cd:a3:83:de:1e:20:b1:5e:2b:28:
                    2b:fa:46:bd:c3:16:9c:57:be:30:35:62:bf:75:56:
                    ca:2b:25:fa:15:c3:5c:80:09:e0:b7:71:d3:1d:9e:
                    0e:76:15:79:ab:d4:98:ab:b1:5c:ad:64:21:cd:7a:
                    4e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:77:4E:DF:30:24:21:42:0A:E3:B1:DA:71:99:6C:A6:2D:7A:FC:E8
            X509v3 Authority Key Identifier:
                keyid:05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:eb:cc:88:e5:2f:c9:29:1c:55:85:f8:69:87:6b:08:ff:16:
         e9:4a:f9:7a:0f:be:b8:2e:02:de:a1:8e:97:e9:63:9c:13:e1:
         42:89:97:47:13:4d:65:e1:85:88:93:af:66:47:06:8c:cf:54:
         52:70:d1:9e:1c:e5:d9:bf:04:44:3b:e7:ba:a8:fc:86:ae:54:
         ee:af:f3:7d:39:9d:57:7c:c9:8d:9d:fc:ec:ec:35:4e:50:90:
         e4:4d:cb:89:df:81:62:10:7b:51:c6:41:bf:e1:28:e9:27:e3:
         6f:79:42:6c:52:00:ac:4e:41:b7:d2:f5:5a:a1:56:3b:58:ea:
         ec:7d:bd:bd:db:70:1d:58:13:b1:ea:7c:aa:85:07:b8:90:88:
         f4:26:a5:bd:93:2d:a0:73:12:56:3a:47:76:79:03:b2:ad:e0:
         cf:eb:2b:23:df:b7:2d:49:df:b3:7f:4c:ac:b8:99:71:d1:c4:
         6b:2e:7f:79:a6:30:88:3e:f4:f3:3b:d2:92:41:c9:be:b9:61:
         76:ec:c3:cb:b6:21:d6:4c:79:f3:55:0f:7a:af:75:24:6b:34:
         a4:b2:4a:64:9e:6b:ac:94:b5:ee:8a:73:78:0b:60:24:f3:6c:
         6c:99:31:f6:b5:ef:3a:4c:80:ea:08:6e:85:f6:fe:7d:06:4f:
         cf:ac:6a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----