Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3ebd0c-2991-4583-bfec-7122feafc8c7/1/BcW97HMY-HHVPoZkgvQXM97wlCg.mft
File:                     BcW97HMY-HHVPoZkgvQXM97wlCg.mft (raw, json)
Hash identifier:          O1C105AkyicBcjEuf8EmcdMth7eGLXN76igkE6L2hqc=
Subject key identifier:   7C:CF:2D:FC:FE:B5:8F:08:22:8B:AB:3D:0C:56:5E:A9:58:2C:9B:05
Authority key identifier: 05:C5:BD:EC:73:18:F8:71:D5:3E:86:64:82:F4:17:33:DE:F0:94:28
Certificate issuer:       /CN=05c5bdec7318f871d53e866482f41733def09428
Certificate serial:       01962E99809BA38CFF83E292543A29F3E7FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BcW97HMY-HHVPoZkgvQXM97wlCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebd0c-2991-4583-bfec-7122feafc8c7/1/BcW97HMY-HHVPoZkgvQXM97wlCg.mft
Manifest number:          0C4A
Signing time:             Sun 13 Apr 2025 10:02:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:13 +0000
Files and hashes:         1: BcW97HMY-HHVPoZkgvQXM97wlCg.crl (hash: JbTMu5v3eZQlby+5N8SMQJ9HQNB+LuddIyhxL/7+rXs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:80:9b:a3:8c:ff:83:e2:92:54:3a:29:f3:e7:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05c5bdec7318f871d53e866482f41733def09428
        Validity
            Not Before: Apr 13 10:02:13 2025 GMT
            Not After : Apr 14 10:02:13 2025 GMT
        Subject: CN=7ccf2dfcfeb58f08228bab3d0c565ea9582c9b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2c:14:4c:19:ff:48:a1:15:14:51:cb:30:9a:
                    35:96:7b:e3:20:0c:c1:9d:c6:17:b3:60:b3:d4:0b:
                    a5:3a:81:3f:99:5b:94:68:48:ec:c9:c4:a4:0f:58:
                    ff:43:47:19:28:67:a6:4c:e4:26:06:6f:e5:32:2b:
                    fa:04:33:0c:a1:1c:52:0a:ef:45:cc:97:46:5a:26:
                    e8:b1:6b:54:b7:12:54:c1:c4:4a:41:49:e5:73:ed:
                    31:b1:ea:c6:38:8a:fa:95:4c:fb:ed:69:ca:9d:0b:
                    5e:51:50:05:ed:15:e0:b2:99:3a:1f:21:6b:78:03:
                    d0:b7:8f:51:75:f6:bf:1e:60:9c:1b:37:b1:55:46:
                    ad:25:e7:66:62:c4:85:8c:66:16:e9:47:f8:62:94:
                    20:c3:e6:79:af:d0:f5:50:57:64:b8:e0:d6:e8:e0:
                    09:15:e1:18:85:26:07:00:5b:62:d5:da:01:21:e8:
                    09:76:f9:7b:a8:05:cd:dc:43:ae:14:80:ae:d0:13:
                    b1:71:6d:57:99:19:be:2a:30:7c:68:43:84:cf:35:
                    40:9d:f2:a4:9f:af:79:2f:70:64:20:51:89:03:9c:
                    60:f4:59:a6:c8:d8:73:e9:86:ef:54:f0:af:12:8d:
                    76:3a:c5:fa:bf:6a:9d:e3:a2:de:9b:8b:d5:12:08:
                    28:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CF:2D:FC:FE:B5:8F:08:22:8B:AB:3D:0C:56:5E:A9:58:2C:9B:05
            X509v3 Authority Key Identifier:
                keyid:05:C5:BD:EC:73:18:F8:71:D5:3E:86:64:82:F4:17:33:DE:F0:94:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcW97HMY-HHVPoZkgvQXM97wlCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebd0c-2991-4583-bfec-7122feafc8c7/1/BcW97HMY-HHVPoZkgvQXM97wlCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3ebd0c-2991-4583-bfec-7122feafc8c7/1/BcW97HMY-HHVPoZkgvQXM97wlCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:25:33:c1:9c:4e:68:d7:68:1d:73:45:94:fc:82:80:ba:af:
         f6:65:ea:4c:fe:38:fd:0f:98:68:14:d0:da:10:7b:8a:19:2d:
         8c:72:7f:8f:22:e5:df:eb:27:ce:5d:69:09:5a:6d:97:ea:38:
         5c:40:ad:7d:58:15:a4:14:65:cf:59:49:88:18:eb:a9:55:a2:
         b5:58:d6:a4:44:e6:96:e6:29:d4:61:76:38:dd:03:52:a4:2c:
         91:4d:46:02:2c:bf:45:15:30:39:5b:27:7d:2a:e4:4d:e9:1d:
         1c:30:ab:ae:c4:5c:40:32:f2:bf:33:17:75:b9:0f:a0:59:ea:
         ba:ac:23:f7:b4:9b:b2:69:ea:87:e6:35:b7:eb:32:ce:d3:b2:
         2b:67:60:fb:5f:be:92:8f:0f:17:a8:7e:f3:3d:d0:0e:0d:e6:
         0f:03:85:9d:0f:c6:dc:71:70:13:a7:03:75:da:22:8a:84:0a:
         fc:5a:51:34:ec:e1:aa:d2:7f:0d:75:47:27:27:1c:d7:d5:c7:
         16:36:ce:71:a4:de:ba:20:07:a5:23:9d:13:33:44:39:e8:0e:
         47:41:62:59:71:95:c6:3f:02:0e:92:33:b1:8c:e3:d6:c0:5c:
         1d:77:cc:b8:2b:e8:bf:c6:91:bd:47:86:63:e6:1b:62:92:da:
         00:b3:6c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----