Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
File:                     BcgcgJdDfNF58xkYPAKC6mzRylE.mft (raw, json)
Hash identifier:          n7+TiJwsWvlrUOChZi0xexPErYyGlCWEiPvRTzSBp0w=
Subject key identifier:   14:FE:76:50:01:4A:07:0D:53:32:68:17:20:B2:1B:2B:9F:C1:E1:7F
Authority key identifier: 05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51
Certificate issuer:       /CN=05c81c8097437cd179f319183c0282ea6cd1ca51
Certificate serial:       01962F74A930B7AFD5BCC83617A23B847829
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft
Manifest number:          04A8
Signing time:             Sun 13 Apr 2025 14:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:36 +0000
Files and hashes:         1: 0eEbXaLT72xMShRX80ks6Q4d5oI.roa (hash: qA3gKPtC1PDR4pbDhy0QBVS9nz5AKV5Uc6LznPWBGvQ=)
                          2: BcgcgJdDfNF58xkYPAKC6mzRylE.crl (hash: okbHBWT1FzqNEn5YbjRqhzExnMh4e53twceY369Hlcw=)
                          3: z0nJV6Vj9yWOU_8BIeua9e3I6JE.roa (hash: YIrDiztONnsPy57n2ZnC2YoDiFkPGBFAHQe2Pe5+Gi0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:a9:30:b7:af:d5:bc:c8:36:17:a2:3b:84:78:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05c81c8097437cd179f319183c0282ea6cd1ca51
        Validity
            Not Before: Apr 13 14:01:36 2025 GMT
            Not After : Apr 14 14:01:36 2025 GMT
        Subject: CN=14fe7650014a070d5332681720b21b2b9fc1e17f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2b:a0:0f:96:a1:30:7a:7b:be:d1:65:43:a0:
                    b7:62:4e:e4:4a:4c:1c:02:0f:a1:21:0c:3a:90:36:
                    0f:7d:7b:0e:fb:24:5f:50:ac:55:88:d0:d5:78:5b:
                    ff:27:f9:85:b9:60:0b:87:3d:86:67:a9:f9:46:dd:
                    5b:90:6a:ea:34:81:6a:e1:58:77:db:cf:17:d4:a1:
                    52:a0:83:d8:26:93:e2:ed:69:00:59:f7:2f:04:b4:
                    3d:9a:5c:96:39:f2:ab:27:13:ac:3e:c5:49:f8:8e:
                    de:fa:65:7c:6a:16:06:bc:ce:44:41:08:a7:f3:ec:
                    0b:d5:ad:bc:71:d3:f7:d9:f2:07:27:fd:01:64:40:
                    f9:f2:c1:6a:42:26:2a:f5:09:07:5c:28:7f:fc:97:
                    35:00:b7:cb:86:a6:1d:f7:d1:f3:41:e1:8b:9e:5a:
                    d3:99:4b:9a:88:5b:ad:16:67:1c:88:ea:8b:fd:2b:
                    d5:9c:27:41:e1:44:a9:62:bf:23:23:74:7a:cc:06:
                    49:f4:01:91:85:8a:1b:07:6d:63:c5:69:c5:32:54:
                    52:a5:1b:c9:66:31:15:eb:28:f1:b1:4f:52:5a:32:
                    f3:95:8d:36:0c:e2:ed:a7:37:1b:8a:ad:8d:14:45:
                    5a:ed:31:3f:3e:75:bd:e8:0a:33:cd:fa:c3:3e:8d:
                    94:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:FE:76:50:01:4A:07:0D:53:32:68:17:20:B2:1B:2B:9F:C1:E1:7F
            X509v3 Authority Key Identifier:
                keyid:05:C8:1C:80:97:43:7C:D1:79:F3:19:18:3C:02:82:EA:6C:D1:CA:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcgcgJdDfNF58xkYPAKC6mzRylE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d93153-4609-4672-85b4-974fd239b0ed/1/BcgcgJdDfNF58xkYPAKC6mzRylE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:e5:98:a6:a3:9c:5a:f1:66:cc:7e:93:3d:1d:a4:43:1b:b9:
         43:03:2a:05:dd:ca:c8:46:29:0c:d8:79:d3:2d:09:c6:87:76:
         d8:48:b8:52:03:1d:0f:23:71:f3:12:9c:74:ec:fd:72:8f:82:
         75:d6:06:43:58:b4:6a:c2:c9:7b:e1:3c:ae:63:e7:e1:e8:5f:
         cc:d1:3d:d8:ea:63:de:cc:ff:f1:12:66:bf:5d:33:00:78:51:
         36:c3:f1:56:81:71:28:f7:83:a7:95:43:2e:11:22:f5:62:0d:
         46:46:32:c1:03:1a:97:6a:16:0b:e5:00:31:7b:da:7d:e6:51:
         38:51:69:94:4a:04:f6:7b:87:c7:0d:d4:6e:7e:c1:46:33:15:
         56:05:2c:c2:2b:12:84:51:f5:26:11:dd:8e:58:65:85:73:ca:
         a5:20:da:92:9c:d0:83:6e:ec:13:af:3a:42:a3:c1:52:8f:e9:
         10:59:09:36:3a:9a:d6:e3:9c:ac:b0:b7:6e:25:1c:de:4d:d3:
         0a:7e:a6:6a:00:a6:db:f7:e1:e4:d8:22:12:06:65:4c:f5:9f:
         89:67:c4:14:9c:9b:02:be:a4:7e:63:bd:b8:5d:e5:7b:36:a4:
         15:60:36:de:82:a1:b5:42:23:d3:74:6b:63:ec:1a:3d:6e:31:
         51:7b:7e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----