Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
File:                     bM82Dfmh9h4jMn2g0sCREuCpvWk.mft (raw, json)
Hash identifier:          JDpy5dirEBxoossMNe5QYC9YPWbgPT44dGgBty/finY=
Subject key identifier:   21:65:6F:BF:61:3E:0E:76:EB:9D:78:EA:D3:6C:B5:F9:DE:C3:61:F8
Authority key identifier: 6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
Certificate issuer:       /CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Certificate serial:       01962E98A0D99AB919F336A60998F13F3ECB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
Manifest number:          1450
Signing time:             Sun 13 Apr 2025 10:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:16 +0000
Files and hashes:         1: 3Q1VmGfeCFKvj2X0IlJ_cfpSuFg.roa (hash: JjwgsPIb16RE+EQ2ebpqagyCholGk7446OO7mOE3TPE=)
                          2: TiOnGSVAxjnW1xfYOuanwRUmLJM.roa (hash: 3xvtqoDbtk/9ZQerINt7CnIoQUKYTDb5i/O7RCY86lE=)
                          3: UZv1ymCovb-i08X3fkZv3jT2Y3I.roa (hash: Ngck0j9G5utiQaFVWOCDxHnx1F9yWaCjfOLfVg8Hhxk=)
                          4: bM82Dfmh9h4jMn2g0sCREuCpvWk.crl (hash: ReJSiudo+E7fFi+U9dxJylAAYVFDnMXb5wRNHNMaQjQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a0:d9:9a:b9:19:f3:36:a6:09:98:f1:3f:3e:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
        Validity
            Not Before: Apr 13 10:01:16 2025 GMT
            Not After : Apr 14 10:01:16 2025 GMT
        Subject: CN=21656fbf613e0e76eb9d78ead36cb5f9dec361f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f2:4b:e0:51:be:2e:fd:7b:7a:db:e0:67:5e:
                    7a:2a:85:97:07:62:2b:95:c5:be:54:55:9c:09:bd:
                    c9:91:12:c0:04:55:63:67:39:14:4f:db:9b:4a:8e:
                    4a:f7:00:70:b2:10:77:2b:57:1c:97:ca:e3:20:16:
                    33:46:b5:e4:b2:41:e9:55:72:7c:94:80:52:04:ce:
                    fe:f6:65:d7:bf:d2:18:03:f1:a4:c0:90:2e:9c:a6:
                    f2:df:ec:37:a7:19:d6:c7:d5:c7:a8:13:8d:13:04:
                    bd:c9:62:ef:2f:c7:1c:61:1c:a6:81:06:5f:77:62:
                    cc:e6:cc:ac:21:e4:6d:0a:7b:4e:9b:f9:4f:5f:db:
                    18:48:0c:e9:cc:19:06:85:19:63:66:4a:81:f3:9b:
                    04:09:26:25:60:a8:9f:d8:d5:25:3c:63:d2:1e:35:
                    48:9d:65:e4:c9:a9:77:e0:c0:c1:bd:da:aa:61:b3:
                    bf:46:d8:6d:59:63:fa:3f:aa:33:4d:86:96:bf:c5:
                    a8:c4:bf:f7:c0:cb:07:26:40:94:cd:47:8b:fa:4c:
                    44:6b:61:3c:7e:b7:d6:ec:25:a2:d0:04:16:dc:1c:
                    b2:57:c7:ae:6f:a0:bf:82:e0:ab:22:a6:7b:c1:aa:
                    59:88:01:ed:42:b0:5f:f5:fd:b4:b7:20:60:cc:c5:
                    c6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:65:6F:BF:61:3E:0E:76:EB:9D:78:EA:D3:6C:B5:F9:DE:C3:61:F8
            X509v3 Authority Key Identifier:
                keyid:6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:9a:ac:9b:6f:ed:79:22:36:29:a9:f8:fb:de:ba:8e:ab:b9:
         1a:79:4f:3a:99:65:41:c5:1f:cf:eb:67:c6:5d:c3:85:e9:77:
         80:29:ae:34:d4:cd:29:48:d3:0b:fa:07:16:e9:49:ad:3f:93:
         71:ac:6f:77:4c:a1:4a:c5:f9:7a:18:cf:f1:88:1b:df:5a:56:
         4d:94:dd:69:e8:ef:e4:15:47:00:98:73:73:8e:0a:3d:56:92:
         d5:50:da:36:41:a6:f0:c3:52:c0:f5:a7:c6:66:f0:16:a4:55:
         0c:28:f8:54:d2:d9:02:cc:a2:fe:54:47:65:95:e3:6b:ea:d4:
         e7:79:d8:90:03:5c:e7:4f:a6:88:dd:ff:d0:16:4f:51:34:1d:
         46:c3:8d:b7:b0:85:d6:dc:10:88:5b:73:6e:31:9e:cc:95:b3:
         36:0c:39:6e:88:18:a4:18:03:24:4e:72:89:31:a0:e4:75:c3:
         ec:f1:e5:27:19:33:15:1e:1e:f2:50:9c:6f:21:54:79:f6:4d:
         02:fb:1a:ea:42:2f:54:3c:04:72:e7:69:fb:6d:8f:5a:e4:d4:
         b5:bf:f1:dd:43:dc:50:7e:1d:af:65:92:d6:dc:af:6e:5f:60:
         4b:1a:54:16:fc:73:19:ea:79:69:c2:86:2d:79:7d:3b:36:14:
         bd:63:78:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----