Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
File:                     bkBn13v-qZ3yXOXgipIT0RKAFM8.mft (raw, json)
Hash identifier:          YpV96X0kv24L33JXrRvr2Gn05NQsRsgkjM0nLpDVy08=
Subject key identifier:   C2:83:48:12:D6:25:1B:14:2A:31:EF:77:EE:AD:2A:85:4A:A4:B7:EF
Authority key identifier: 6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF
Certificate issuer:       /CN=6e4067d77bfea99df25ce5e08a9213d1128014cf
Certificate serial:       01962DF41134472A13A91A9828EDD1BE58DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 07:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:31 +0000
Files and hashes:         1: adNDLvUmYkNZRHIO-8EvQkOny3U.roa (hash: JFJ+lodVDeHLySNvitcsYBxq8cfuImJHPxEA0H+DjjY=)
                          2: bkBn13v-qZ3yXOXgipIT0RKAFM8.crl (hash: DW5RQqcCNx6YtoQoOyP5mhEgKY88URSu+d4hjBpwdsY=)
                          3: iktdBTw9X8o6AOOEkLAyuZNK_gg.roa (hash: 2nzjnmBtk5vklJiWyvmO30xEFTmYF5gvtQ11fyrTZUE=)
                          4: mQ9zePbKKPrER63rktmN5-Z8AoQ.roa (hash: qfFxiv4hVcYLNON7vIi9UIknKo4icjwq21EoSvpzScg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:11:34:47:2a:13:a9:1a:98:28:ed:d1:be:58:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e4067d77bfea99df25ce5e08a9213d1128014cf
        Validity
            Not Before: Apr 13 07:01:31 2025 GMT
            Not After : Apr 14 07:01:31 2025 GMT
        Subject: CN=c2834812d6251b142a31ef77eead2a854aa4b7ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cf:19:df:7e:ba:8a:be:c5:4f:0f:d5:62:ac:
                    a4:43:48:7d:f9:dc:0b:90:42:1a:99:4a:c8:bf:46:
                    fe:e2:c2:9d:32:c1:e1:59:c6:22:97:03:90:3c:30:
                    45:7a:9c:5b:9e:cc:22:39:04:95:39:2a:e3:c0:13:
                    31:b1:57:80:83:86:db:e5:69:60:78:f2:75:b3:62:
                    0f:33:eb:a1:07:01:ab:88:e8:58:db:e0:fc:fd:c3:
                    54:75:90:7a:e6:6f:d4:d9:76:6e:03:41:ad:0e:cc:
                    de:93:92:99:c9:3d:5d:72:f6:8a:40:c1:23:93:44:
                    6c:b3:9f:37:8d:24:e7:78:7b:7b:37:44:10:b1:07:
                    96:f5:5e:4e:b4:73:61:c9:fa:47:77:05:a3:24:91:
                    a5:07:8a:2d:ca:82:cf:3f:67:4a:6d:10:fb:e0:8d:
                    e9:68:39:ec:33:0a:2f:5d:e2:bd:86:8f:da:dd:c7:
                    2e:f2:5d:3c:97:89:96:31:70:d0:4f:b0:17:fe:33:
                    19:35:4c:92:bd:a1:3c:b6:13:ae:f8:ac:e5:95:a3:
                    07:1f:5a:82:62:a7:b5:90:db:c4:b4:7a:ec:01:43:
                    91:a6:c2:23:4f:1f:a9:89:5c:79:0c:0a:e0:42:9e:
                    25:aa:8e:92:b5:b6:5a:f0:39:ac:e2:27:09:c4:1c:
                    49:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:83:48:12:D6:25:1B:14:2A:31:EF:77:EE:AD:2A:85:4A:A4:B7:EF
            X509v3 Authority Key Identifier:
                keyid:6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:cd:79:6a:f8:fc:ce:b6:6e:13:f6:54:35:f7:43:68:15:c3:
         18:83:c4:be:53:34:6b:e4:3a:a0:ef:2f:a4:bb:d0:37:1d:ef:
         cd:d3:c9:e1:70:2f:63:5f:2b:c9:a7:fb:fe:00:b7:38:72:ca:
         af:90:6d:02:c6:dc:18:da:01:ed:a4:b9:9b:aa:5f:fc:e0:f4:
         d6:25:bd:c5:1d:1d:6c:8a:b7:11:a7:29:d4:0e:4d:dd:9e:1a:
         24:fc:20:bf:d3:9a:59:61:50:a0:6e:cb:09:3f:5c:69:67:4b:
         d9:b8:eb:0b:7d:a7:1f:20:78:b8:31:5a:c8:67:5f:21:e6:72:
         b8:44:e2:d0:74:79:9f:1b:23:19:50:88:1d:ee:68:13:d5:f9:
         86:8c:82:23:77:22:a3:ba:87:31:b2:7f:1b:6e:f5:ec:18:1c:
         dd:7c:c1:9d:7c:08:08:85:87:11:de:73:74:d7:35:d9:d9:f7:
         8c:a6:f6:33:29:7a:ae:96:98:f2:a0:ea:34:a8:f2:04:59:80:
         a6:6e:92:43:27:76:7a:ef:32:ab:3b:0b:15:77:a7:df:20:c0:
         16:7f:2d:f7:c3:a9:13:66:ca:16:bd:43:b2:b0:bd:93:3c:7d:
         0c:21:ce:bd:2e:38:60:e8:19:78:f9:2f:db:cd:1f:0e:67:64:
         fb:a6:02:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----