Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
File:                     BLw664svC0huXIwMec6djWixj5Y.mft (raw, json)
Hash identifier:          GHhu5z/qgqpxYTj+s7fozBLS4N+/PHcMUa5pAWKE4h8=
Subject key identifier:   C1:9F:FA:E8:3F:48:BF:8C:BC:E3:C7:92:C8:6C:C9:1E:DD:B3:C8:7F
Authority key identifier: 04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96
Certificate issuer:       /CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
Certificate serial:       01962ECFBAD9CC9390A9500791CD03AFC046
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft
Manifest number:          0495
Signing time:             Sun 13 Apr 2025 11:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:27 +0000
Files and hashes:         1: BLw664svC0huXIwMec6djWixj5Y.crl (hash: 8uKDU7gKFtjM4uWWsddy6DsCPSZPl8D1fZmOvMB0SGE=)
                          2: RLDEvA5lT3OJsuLbbmV0pyamz6M.roa (hash: 08l04RNVeM6otYs3DB4mk2Ka+Bd48a32zNdlW+piPQY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:ba:d9:cc:93:90:a9:50:07:91:cd:03:af:c0:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04bc3aeb8b2f0b486e5c8c0c79ce9d8d68b18f96
        Validity
            Not Before: Apr 13 11:01:27 2025 GMT
            Not After : Apr 14 11:01:27 2025 GMT
        Subject: CN=c19ffae83f48bf8cbce3c792c86cc91eddb3c87f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:22:1e:9d:31:26:19:70:14:75:a3:91:d1:e4:
                    9b:5a:73:3a:3b:31:e1:41:76:46:e8:9c:01:b7:3c:
                    76:fa:b9:a4:f2:7e:9d:11:f2:e6:67:b1:bb:9c:72:
                    aa:c4:d0:26:24:34:96:25:0d:11:f8:11:d1:b0:31:
                    3b:57:53:cb:b1:bf:1d:cb:a0:ff:71:f3:a1:e3:a7:
                    b9:f0:87:0a:1e:ac:0f:b2:2a:4e:f1:88:4a:66:6b:
                    54:f5:64:ba:db:a3:c5:ed:63:94:8b:52:b3:50:02:
                    fe:62:b1:1d:63:2b:41:c0:55:bd:2c:48:6b:71:2a:
                    61:4b:19:9f:39:b4:03:36:55:96:8b:eb:99:a0:18:
                    39:54:bf:f3:e0:1b:e7:27:c0:04:17:1d:73:0f:5f:
                    b0:8e:73:01:2a:bf:00:4b:c8:54:69:e5:98:c4:f7:
                    1c:11:9d:ca:33:ca:9e:e3:d4:0c:14:b9:c3:93:c5:
                    70:4e:0d:50:04:13:dc:4e:85:b6:ae:0f:f1:af:f0:
                    62:83:25:69:f6:cd:69:4b:d3:fa:e7:a4:1d:f7:c0:
                    08:f6:f5:ed:4f:13:80:6d:c8:64:17:e5:04:54:2b:
                    67:ad:69:1e:4e:c4:82:7a:41:67:d7:3d:d8:f8:ac:
                    52:ba:dc:a5:24:cb:24:cb:a1:eb:1b:be:ca:2c:58:
                    65:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9F:FA:E8:3F:48:BF:8C:BC:E3:C7:92:C8:6C:C9:1E:DD:B3:C8:7F
            X509v3 Authority Key Identifier:
                keyid:04:BC:3A:EB:8B:2F:0B:48:6E:5C:8C:0C:79:CE:9D:8D:68:B1:8F:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BLw664svC0huXIwMec6djWixj5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b2bdd0-f383-4a5f-b65a-ff227e4993f7/1/BLw664svC0huXIwMec6djWixj5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:66:c0:ff:73:cf:a3:8b:d3:6b:6e:e4:ab:fd:e4:87:9d:3e:
         e0:77:c2:4a:a4:ca:19:66:00:75:32:7a:1f:58:f6:7d:ff:20:
         7a:70:ad:c3:54:a2:ed:bd:c0:52:be:19:d5:39:4c:90:c6:fe:
         42:70:06:26:52:bc:90:d4:c0:23:9b:83:c0:17:44:e7:92:2a:
         43:12:58:11:42:30:18:48:25:6b:63:a7:d8:ed:09:a6:f8:9b:
         41:0d:ad:80:81:b5:80:bd:31:80:30:cb:33:78:5f:95:03:d2:
         c2:c9:0e:5f:4e:c3:8e:1a:ce:ee:a7:3b:61:9a:70:ad:af:31:
         fa:d2:d9:db:77:84:07:30:38:58:2c:4f:3b:6a:28:3c:82:00:
         ad:ac:61:59:52:56:17:e0:4b:d8:35:eb:06:40:73:01:1f:25:
         fd:76:8e:80:de:79:43:6c:18:e1:63:69:bb:b2:65:c7:7c:fa:
         0c:5d:e5:9c:d7:22:11:95:72:c2:2d:83:bd:a9:c0:9b:66:3e:
         4c:1c:47:0b:f2:c0:e0:32:1d:93:40:50:9f:97:05:f9:fb:2c:
         da:01:58:3b:2e:92:e7:3e:6c:e1:94:22:f6:0c:ec:be:d1:70:
         c1:f7:35:0f:b5:f1:6b:d3:ea:d4:78:31:ba:d4:96:e1:ed:26:
         7c:bd:9c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----