Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
File:                     BhR0zs319QOtq2D8Ve5_eKDbqfI.mft (raw, json)
Hash identifier:          MEYzCmSUw6ojFxYKABAMArWrZlKCDeIJ/eOmk6SL8Sw=
Subject key identifier:   50:7C:AD:AE:2F:15:77:6C:39:1F:EA:79:3C:FE:AA:46:A4:C0:B0:D5
Authority key identifier: 06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2
Certificate issuer:       /CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
Certificate serial:       01962E2AE0F44AEB46D45FD5C7C9955AE354
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
Manifest number:          1488
Signing time:             Sun 13 Apr 2025 08:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:23 +0000
Files and hashes:         1: BhR0zs319QOtq2D8Ve5_eKDbqfI.crl (hash: SdbekJPNTWa5NxCqpYKlL77Hz7SKsLVxo0YBrGAC4kU=)
                          2: aBUgXPt-AuoP5xgLF4UGTkPYOmI.roa (hash: 1abPHA97s7oD1kkbcwUPa4QCZkFrwRi930sxcHARzWg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e0:f4:4a:eb:46:d4:5f:d5:c7:c9:95:5a:e3:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
        Validity
            Not Before: Apr 13 08:01:23 2025 GMT
            Not After : Apr 14 08:01:23 2025 GMT
        Subject: CN=507cadae2f15776c391fea793cfeaa46a4c0b0d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:19:23:9f:da:78:67:e9:41:e8:1c:95:f7:b0:
                    08:08:4d:f5:8b:d5:5b:f3:80:f2:b5:ba:cf:16:62:
                    0e:b3:a6:48:1c:73:d0:0f:33:57:ff:f5:33:e8:48:
                    18:ad:d7:24:e3:2f:55:50:35:7f:22:9b:8e:5c:2b:
                    56:21:ca:15:53:e1:71:15:a9:83:d3:d0:69:bf:54:
                    10:59:1e:3b:b2:c4:00:bb:cc:11:91:0d:e2:ed:f0:
                    f9:0d:eb:2b:cd:81:59:62:1c:6d:df:58:d0:3c:c4:
                    08:da:be:e0:7b:1c:6b:ab:9e:06:20:44:02:72:8e:
                    f8:c5:11:0d:5a:ad:fd:97:57:37:bc:f2:df:69:43:
                    d6:b8:b9:a3:a3:f2:ad:e4:24:54:24:d0:68:4b:c2:
                    7f:c3:1c:85:65:dd:19:cc:8d:3c:72:78:bb:bf:4b:
                    7f:3e:73:51:1f:a3:eb:2c:ac:0b:1e:9d:26:6c:95:
                    7a:9e:bb:ba:93:02:15:ab:1c:c7:32:01:44:62:34:
                    36:17:d1:6c:59:5b:64:fb:02:77:56:fd:73:0a:92:
                    f3:08:2d:e3:42:27:ac:b1:16:1c:34:14:e0:c7:b2:
                    95:59:c5:70:67:c0:f7:42:84:ab:a9:1c:66:6b:82:
                    43:c3:12:c2:ce:6d:c3:2f:f2:c2:2f:38:9b:46:bf:
                    d2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7C:AD:AE:2F:15:77:6C:39:1F:EA:79:3C:FE:AA:46:A4:C0:B0:D5
            X509v3 Authority Key Identifier:
                keyid:06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:59:2c:4b:13:df:38:f0:ef:f2:70:e1:7c:ab:16:a7:10:2b:
         28:43:8a:1f:28:f4:40:17:fb:22:c7:8e:f5:ab:1b:0c:2e:9c:
         5f:47:58:c4:1d:ff:aa:e2:08:b1:26:d6:a9:a6:ea:3a:e9:91:
         61:9e:0c:6d:16:94:3e:73:aa:94:e8:a8:3d:e3:d3:66:28:58:
         04:92:6d:09:d4:ed:78:58:8c:41:93:ac:0c:b0:77:0b:23:b8:
         32:ef:6e:e3:f4:44:48:c4:79:48:05:8c:06:2d:17:7b:3c:90:
         a2:e5:ad:c1:40:e0:c1:10:ea:0b:6d:5c:bc:02:c4:7c:b7:55:
         d4:e0:f4:09:18:19:d4:2c:29:e8:ca:cf:f2:0d:8b:70:88:8c:
         37:80:be:80:a9:ba:5d:21:6c:fa:a1:91:4b:3e:ad:8d:7e:0e:
         06:c3:1d:40:8b:78:31:fc:67:45:5c:54:c5:fe:76:2d:c1:79:
         b2:66:ff:97:48:3c:c6:25:01:4b:8b:3d:03:e1:4d:1f:cc:0e:
         71:72:8c:17:62:a8:56:16:ad:c2:87:31:8a:7a:1c:d7:3c:e1:
         f3:7a:6b:40:f2:79:3e:d6:e9:a2:67:ad:34:79:98:94:e1:28:
         dd:c4:66:5d:62:6a:b3:91:a1:f1:b8:3e:32:76:d7:f0:de:7d:
         91:71:18:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----