Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
File:                     bjehCkoCc_QfrPdEDVnzmtXq9ks.mft (raw, json)
Hash identifier:          nfoDd7xnY1xExcoxqMgJtrU5/6jQea+qwsJSjq4sKKs=
Subject key identifier:   0C:67:90:C1:12:D3:C3:D5:F4:92:29:7A:8C:E8:57:1E:BF:9C:E7:8E
Authority key identifier: 6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B
Certificate issuer:       /CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
Certificate serial:       01962FAB78B117BA0D2FFE50262B9BF1F696
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft
Manifest number:          0696
Signing time:             Sun 13 Apr 2025 15:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:28 +0000
Files and hashes:         1: bjehCkoCc_QfrPdEDVnzmtXq9ks.crl (hash: oTV65UQJWSfGaXAPEskZPXTvaC3mOcgnlhyg6Yiwg0c=)
                          2: dCB4YZJSisBMGI9Gka6oZ1pddoY.roa (hash: xw6pibbp+5PMAJyrwS7VeHcyM1PCsmWnDTSaDLnPh9M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:78:b1:17:ba:0d:2f:fe:50:26:2b:9b:f1:f6:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e37a10a4a0273f41facf7440d59f39ad5eaf64b
        Validity
            Not Before: Apr 13 15:01:28 2025 GMT
            Not After : Apr 14 15:01:28 2025 GMT
        Subject: CN=0c6790c112d3c3d5f492297a8ce8571ebf9ce78e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f2:46:13:38:49:5a:85:1b:9e:f5:5d:9f:88:
                    22:da:7e:05:5c:56:ff:ad:9c:54:bb:bc:e8:56:7d:
                    98:c8:79:4b:f6:6a:ae:8f:8d:52:6c:0c:00:14:53:
                    af:d0:68:2c:16:f3:d8:c4:00:9f:1d:c3:11:88:42:
                    d8:c7:4f:d0:d9:09:65:d8:7b:b8:9e:07:1d:84:d2:
                    1f:44:f6:da:8c:b9:5b:0c:22:dd:27:be:1b:dd:72:
                    61:b6:38:e7:c4:23:f2:ff:96:6b:8b:e5:b2:0a:dc:
                    16:d3:bc:54:4e:a8:72:03:3b:e3:f2:b2:2e:0e:62:
                    41:0d:0a:d1:50:33:3b:bf:ca:01:99:c1:b6:95:11:
                    16:21:9d:18:ff:3c:81:18:1e:0e:64:92:9a:28:c8:
                    f5:7d:75:12:09:f7:02:6b:e7:81:be:4a:c4:82:b3:
                    4c:b2:f5:24:7f:6c:f6:f5:9d:c7:57:4e:4d:57:de:
                    66:57:fe:e7:7c:63:ed:71:67:f8:28:eb:9f:92:5e:
                    e5:85:04:db:b1:70:1e:5e:d5:c9:d3:e2:d4:1c:4a:
                    f8:29:2e:a9:89:39:1d:bb:37:46:88:ba:c9:a2:3d:
                    76:58:a8:8b:82:7f:52:54:78:58:31:86:9e:0d:87:
                    4d:c5:6d:32:d0:6e:5e:d4:12:1c:14:2c:e8:5d:0c:
                    c4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:67:90:C1:12:D3:C3:D5:F4:92:29:7A:8C:E8:57:1E:BF:9C:E7:8E
            X509v3 Authority Key Identifier:
                keyid:6E:37:A1:0A:4A:02:73:F4:1F:AC:F7:44:0D:59:F3:9A:D5:EA:F6:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjehCkoCc_QfrPdEDVnzmtXq9ks.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0aef3-263d-4f41-8853-18b7eb923a99/1/bjehCkoCc_QfrPdEDVnzmtXq9ks.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:b6:00:7a:b4:31:18:b4:8f:2b:d4:c7:4a:3b:e2:28:0d:0b:
         63:88:f9:0a:28:3c:31:13:79:ac:c5:44:9f:cf:e4:b1:3a:c3:
         2b:43:cb:e1:b7:6e:18:7b:96:b1:d5:a9:a4:6d:05:60:ca:51:
         ce:83:4b:a1:2c:0d:47:a0:27:ed:7a:ac:8c:7d:e8:46:f3:02:
         52:a4:2c:b3:e7:82:3d:e7:90:5c:da:96:e9:46:c9:54:32:2d:
         7c:c8:ca:23:c0:76:a1:7c:13:bf:b2:c9:2d:58:a8:2b:98:1c:
         8a:c2:9e:af:4b:c6:9d:3e:42:1d:2b:bf:a8:48:3f:b2:c2:6c:
         f2:8f:70:9f:79:c9:16:69:d4:6d:aa:f3:0d:21:c8:37:af:b8:
         ec:cc:9f:1d:1f:9d:8c:e2:2a:11:fb:58:71:48:8e:ce:4b:d4:
         e0:8b:87:b4:af:fd:94:1b:11:f3:74:f1:db:c6:53:f5:30:ad:
         40:1e:e5:97:fe:e8:10:e9:00:46:ce:87:7e:50:14:26:23:42:
         95:d0:a6:d1:c1:ed:bf:ac:db:aa:34:0d:c5:dc:93:de:35:a2:
         06:a3:14:ab:0c:96:2e:08:13:b7:98:48:32:43:9c:6b:9e:33:
         2e:22:88:b4:53:d7:f2:87:bf:de:56:10:cb:65:bf:49:bd:8e:
         c7:ed:50:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----