Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
File:                     BbiAxaRcPUAbktW0JgjoVXUYWd4.mft (raw, json)
Hash identifier:          RL4iJtkoBYV8PizETuhyagxrb/Ys8+gjO4apdYbN8d8=
Subject key identifier:   2C:A1:5B:C7:17:23:41:86:3F:49:28:10:BF:2F:6F:AE:4D:14:BF:CE
Authority key identifier: 05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE
Certificate issuer:       /CN=05b880c5a45c3d401b92d5b42608e855751859de
Certificate serial:       01962E98ED0C71C65930EB8349CF8BA34D16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft
Manifest number:          0AD9
Signing time:             Sun 13 Apr 2025 10:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:36 +0000
Files and hashes:         1: BbiAxaRcPUAbktW0JgjoVXUYWd4.crl (hash: mH32S2Zl57hOs49nYke8909Br5CvUabC0l6kvxjwVJE=)
                          2: NcktUBROKSRRrilf-EwiFe-mED0.roa (hash: V7awTTrD/adCFto2LmbQBAS/YiiV5eKdc+8ANcqvdOA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:ed:0c:71:c6:59:30:eb:83:49:cf:8b:a3:4d:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05b880c5a45c3d401b92d5b42608e855751859de
        Validity
            Not Before: Apr 13 10:01:36 2025 GMT
            Not After : Apr 14 10:01:36 2025 GMT
        Subject: CN=2ca15bc7172341863f492810bf2f6fae4d14bfce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a0:3b:85:cd:72:61:70:8a:21:ed:de:35:4b:
                    b3:a3:78:77:b2:45:95:87:2e:7c:04:b5:0f:8c:97:
                    63:4a:66:a6:04:d8:91:9b:e7:cf:a5:5d:6b:06:e2:
                    42:ea:41:d7:10:70:24:e1:ef:fc:9c:aa:ea:98:58:
                    9a:4a:9c:57:ae:84:54:29:2a:af:02:4c:40:39:32:
                    b8:31:31:d1:1b:a1:76:a2:4a:dd:38:bb:16:fc:9f:
                    5b:8b:ed:32:f3:cf:58:9d:bb:9e:54:cf:43:31:e8:
                    b3:e7:98:06:2a:35:b6:c0:b1:43:98:cb:d8:e0:b7:
                    76:2d:e8:36:01:53:88:a7:94:2c:13:5c:b3:5e:e5:
                    92:81:c0:ef:8b:5d:e2:9e:9d:6f:a5:1c:a5:88:3c:
                    04:6b:77:a7:93:58:54:95:f5:cf:0c:da:f8:6d:1f:
                    99:ae:f4:b5:fb:51:58:6e:d4:3f:a6:c8:60:02:93:
                    6e:c8:03:15:19:4c:ad:ae:c3:a3:7b:df:05:04:8b:
                    69:3f:c6:4c:a1:43:3a:90:a7:c9:d9:a4:37:9e:e0:
                    bb:52:6c:9f:f7:97:cf:af:91:c1:67:6d:ce:75:69:
                    1e:28:6b:1f:49:8e:bd:fe:93:22:18:a5:88:81:e1:
                    9e:e9:ce:d2:9b:7b:35:c6:00:91:af:12:29:54:07:
                    2a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A1:5B:C7:17:23:41:86:3F:49:28:10:BF:2F:6F:AE:4D:14:BF:CE
            X509v3 Authority Key Identifier:
                keyid:05:B8:80:C5:A4:5C:3D:40:1B:92:D5:B4:26:08:E8:55:75:18:59:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbiAxaRcPUAbktW0JgjoVXUYWd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/4ac428-b078-4600-ab2e-c365794ceff7/1/BbiAxaRcPUAbktW0JgjoVXUYWd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:3a:76:38:f2:db:0f:95:58:96:31:aa:f5:32:58:fa:27:5e:
         cb:ed:b9:9d:0a:65:23:66:7c:4e:9c:df:6c:b6:d7:ef:d7:0c:
         1a:61:5c:1c:f9:4d:2d:ea:10:35:37:db:77:88:f8:da:0d:a8:
         9a:51:1a:06:1c:5d:c4:ba:aa:73:6c:a7:55:20:fd:28:c1:6a:
         f5:c4:b8:fb:7a:c6:2d:b5:16:cd:7f:91:0a:4e:85:1f:8a:c7:
         86:3e:36:18:e9:4e:9c:b7:b5:91:08:2e:0d:5c:20:b8:d2:88:
         be:9a:f6:70:ac:4c:a6:79:88:71:0c:b7:0e:96:f6:f8:fa:d1:
         1d:47:15:f5:80:45:cc:32:8a:54:98:4d:4b:3b:57:38:cb:cf:
         ba:14:89:34:9b:41:1a:01:80:b7:ba:98:c3:f4:bd:58:f2:5f:
         1d:0a:42:94:9c:d1:0b:be:1d:92:60:f4:63:8a:69:95:13:76:
         2c:f4:55:5f:b6:ed:05:61:e7:4e:3e:1b:55:0f:87:8d:ad:fa:
         3d:60:1d:42:6c:54:b6:f4:07:43:c1:96:59:f2:d2:29:c3:b6:
         d6:7a:5a:17:4e:98:cd:c6:09:5d:4f:9a:72:52:82:fd:2c:6a:
         31:ff:95:1b:b4:cd:c0:6f:de:f3:e1:fa:e4:47:dd:88:d6:a7:
         05:97:0a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----