Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
File:                     BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft (raw, json)
Hash identifier:          VqvN8zjUK7Y4Q+Kt8j6sCcMWcq6Q7aMM3r9V/XFOENw=
Subject key identifier:   74:73:02:12:BA:28:1C:0E:05:EF:DA:29:33:6C:38:57:50:BC:F9:B5
Authority key identifier: 04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47
Certificate issuer:       /CN=04e1831c9eef1b795437fcbd43e295705a1a0547
Certificate serial:       01962E9966FA7F5FACB1B63DDB7B1DC2963E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
Manifest number:          11D9
Signing time:             Sun 13 Apr 2025 10:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:07 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:07 +0000
Files and hashes:         1: BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl (hash: dmE6qVa5e45Kui0cNdBnaiCOV2y66cGg5kzcs6ZaNNE=)
                          2: Y8uuAfRYwx-prudgnWgSWZq97Sw.roa (hash: tQZOFDuCS8oLjLePLd8o7D+wQ3I3iTNhsHY9sfMRza8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:66:fa:7f:5f:ac:b1:b6:3d:db:7b:1d:c2:96:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e1831c9eef1b795437fcbd43e295705a1a0547
        Validity
            Not Before: Apr 13 10:02:07 2025 GMT
            Not After : Apr 14 10:02:07 2025 GMT
        Subject: CN=74730212ba281c0e05efda29336c385750bcf9b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b2:f9:cb:64:9a:4e:47:dd:95:09:0d:93:6f:
                    c5:c9:52:99:8d:c8:ea:1d:c6:93:1f:8a:75:33:46:
                    b1:54:74:a6:1d:58:04:19:8a:75:eb:8b:22:f1:47:
                    67:05:23:1d:de:a9:e8:e8:af:fe:d9:c9:00:40:8b:
                    f8:cb:03:d7:0a:7e:f5:a2:48:c2:3c:21:70:87:b1:
                    1a:b5:50:2c:9a:68:8d:78:f6:1d:ed:51:9e:80:52:
                    ef:23:af:fb:2f:e2:ac:de:a0:eb:8c:31:57:b0:66:
                    74:f1:3e:1a:8b:65:5a:02:59:4a:9f:c7:4f:13:85:
                    55:79:98:4d:b9:0c:93:5a:0e:9e:51:f3:2b:db:4a:
                    a6:05:1e:68:52:b4:79:03:b1:e8:66:58:1f:b1:6c:
                    99:ba:bd:4c:4a:37:18:27:f5:fd:ca:ba:18:f9:cb:
                    69:dc:4d:f6:12:1b:be:b6:20:78:46:43:3a:7a:5e:
                    9f:3c:fb:c9:68:56:c7:33:71:1c:ff:6f:16:c6:41:
                    8b:57:e7:de:b6:d2:c2:ae:d6:93:96:de:18:5b:8a:
                    fc:1e:a4:70:d6:25:45:06:a1:c0:bb:2b:2d:09:46:
                    3f:c8:0e:c5:81:bd:c2:ec:84:75:cf:a9:02:27:14:
                    a0:88:c5:2b:90:33:ec:b4:a3:a6:e4:f1:ae:1b:42:
                    bb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:73:02:12:BA:28:1C:0E:05:EF:DA:29:33:6C:38:57:50:BC:F9:B5
            X509v3 Authority Key Identifier:
                keyid:04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:c1:5b:b4:2e:05:70:42:fe:b1:7c:4f:65:8c:a4:27:ae:06:
         6d:24:a4:2d:a3:59:d1:52:e0:c0:9c:93:18:eb:19:1f:ac:e3:
         94:11:68:3e:0f:d3:a3:ef:81:e9:18:c9:86:b2:4b:8c:09:ba:
         0b:16:74:b3:1a:e2:c3:fb:29:c4:4f:1a:ee:6a:d9:7f:0a:4e:
         05:7c:ef:50:91:1a:23:37:84:21:68:ba:77:ca:81:a3:2d:ed:
         be:0a:5a:cc:09:f5:f7:1a:4b:08:6e:c7:17:f0:24:47:6d:fa:
         65:f2:9c:7e:a2:3a:79:28:f3:1f:b9:15:cf:a0:93:2a:84:28:
         d2:ae:64:91:d8:bc:97:ad:80:77:ac:08:b5:67:f9:2c:aa:d9:
         97:32:49:b9:0d:50:24:10:db:a9:35:bc:4d:03:3e:54:c5:81:
         4e:e2:67:ad:64:56:69:b0:fc:57:e7:66:77:e5:cd:58:9a:e1:
         82:4c:99:5f:48:e0:7f:72:aa:23:d2:8f:45:78:b7:60:1e:10:
         b8:9a:c3:0c:b5:d8:d3:99:84:d3:05:71:1c:2c:dc:2a:57:d2:
         eb:67:15:71:12:27:8a:a2:7f:2e:2f:97:ca:ab:1d:36:e7:14:
         4b:05:8d:e1:9b:84:a0:8e:78:69:79:22:0d:37:8b:23:64:96:
         21:9e:e5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----