Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
File:                     BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft (raw, json)
Hash identifier:          k2Syi1DEOL/zR4ifuROKnlt1g7SHDnAV3lCaQ7zFczY=
Subject key identifier:   11:1D:80:5B:81:51:71:8A:C8:23:C5:2B:09:57:52:9B:B2:DC:4D:C3
Authority key identifier: 04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
Certificate issuer:       /CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Certificate serial:       01962F74731503B1BE18C707ABD107304BA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
Manifest number:          03CB
Signing time:             Sun 13 Apr 2025 14:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:22 +0000
Files and hashes:         1: 8NoTu3q8IjcyFeSIedZ4Ihj-NDU.roa (hash: /wW2Zq1BGMLL48zxl/CKfKIe0NCGNYrdHYCS8/4pGYw=)
                          2: BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl (hash: hQM7oL/PAITDBz+DmiJfxq6uNi7JN6qY1yVXnyP8vEc=)
                          3: BvrFfgaOvktjClmF1Y8fP67Mecs.roa (hash: PbuxkncSrl/Kd/73WRwH/QoM5pPO6VdbbF0JBm0KcQM=)
                          4: IlEGs3swTEykFsR9k5C7RdaE6C0.roa (hash: zQZ2kqcVA7iLm2FpONrymzqVeMVyWeuFsep/95FwbMQ=)
                          5: c4e4vqwgZd2ZJ6wIw-pjuHwTcAg.roa (hash: oVdR7HS3XKDpou60JLgnb0pDBzK522Os/r6Pbt/GzeA=)
                          6: ckrq-xWy9dmxHUCFMOdOt359xMc.roa (hash: Rrj1A3kTGmZ6GPx6N9soo7FlfXOroReQlh35Wi3wkRU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:73:15:03:b1:be:18:c7:07:ab:d1:07:30:4b:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
        Validity
            Not Before: Apr 13 14:01:22 2025 GMT
            Not After : Apr 14 14:01:22 2025 GMT
        Subject: CN=111d805b8151718ac823c52b0957529bb2dc4dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4b:ca:ba:bc:fa:00:c9:e8:aa:be:e1:9e:97:
                    af:cf:2c:b9:79:cb:4e:a4:6e:30:bb:51:02:82:ee:
                    22:f7:50:cb:53:b8:1c:73:d4:0a:f1:e2:0c:d2:00:
                    07:15:21:f6:d5:41:61:15:3f:f9:f1:43:5f:b7:a6:
                    b6:e6:05:5b:3d:78:d0:44:b2:17:53:97:f2:de:2c:
                    bc:58:63:f0:0c:69:e4:1a:5d:14:c3:de:6e:66:43:
                    d4:c7:51:33:41:25:5b:0d:d4:8c:89:d3:89:20:6a:
                    85:17:28:74:c1:29:f8:a3:3f:9d:7c:73:93:e3:3a:
                    72:03:a7:c2:6c:09:5c:6f:5f:85:26:2e:34:24:ee:
                    80:16:d9:a3:98:e2:88:03:3a:e7:01:63:6e:f1:17:
                    00:db:70:70:b9:1e:ee:e0:e9:f1:fb:c9:93:39:09:
                    2b:9e:d5:a9:ea:19:75:f7:29:54:ca:4d:1b:70:77:
                    08:b7:33:b1:6c:e8:8e:ec:aa:86:b5:47:a0:7e:45:
                    f9:4d:4b:2b:6c:94:dc:36:99:e6:79:70:79:93:ea:
                    b3:8b:54:15:45:db:87:5e:84:95:ff:aa:97:34:0b:
                    3d:b4:f5:7c:f8:82:ce:7d:e7:ce:da:db:32:c4:55:
                    51:34:d9:05:dd:11:0d:b9:ff:8e:69:fe:bd:63:fe:
                    6e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:1D:80:5B:81:51:71:8A:C8:23:C5:2B:09:57:52:9B:B2:DC:4D:C3
            X509v3 Authority Key Identifier:
                keyid:04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:73:1f:cb:22:21:02:5b:ca:10:c5:c9:6f:46:2b:12:4e:a8:
         19:45:b7:a7:03:a4:3e:6b:2c:88:bc:f9:bc:62:6a:b6:4f:17:
         49:e0:f5:20:6a:e4:13:da:63:10:57:69:d6:98:79:ba:0f:37:
         2f:50:3c:fa:49:dd:9e:bb:b1:17:26:34:16:75:88:a7:56:73:
         50:4d:00:dd:c6:b1:9b:5c:ce:f2:f0:f2:1d:c3:aa:5b:82:9a:
         2c:b4:e4:b4:aa:25:7b:61:23:01:4f:68:31:06:07:6d:d2:6a:
         59:88:6c:72:95:13:f1:44:82:20:2b:8f:84:b7:e8:c8:1e:21:
         31:cd:fa:84:5a:f3:bb:05:1d:33:dc:55:49:b1:49:b5:33:9b:
         5e:eb:fe:f1:27:61:4c:24:77:9b:ae:92:80:9f:0f:eb:e7:cc:
         80:c9:00:1c:17:3f:33:03:64:1e:82:65:9b:d6:28:8d:7c:ae:
         d4:7c:f3:e6:b5:13:7a:44:3a:e4:d8:c7:69:e9:c6:5d:f9:69:
         7e:9f:1a:16:a1:1d:d5:99:8b:fb:d6:4e:cb:74:69:72:60:7e:
         04:e6:6c:49:77:88:6a:85:29:57:88:c9:d5:a7:64:3e:21:2a:
         ca:96:84:10:5b:8b:70:ce:a6:e9:ec:fc:cc:32:fe:d5:dc:41:
         27:69:c6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----