Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
File:                     bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft (raw, json)
Hash identifier:          UHMVhyEWIoTVbEX6Whc4tvFJ3SvgjbWyNJCFULjsliM=
Subject key identifier:   4E:01:7A:1E:FF:AA:09:CA:6E:24:11:95:A1:F2:BA:44:08:E7:68:B1
Authority key identifier: 6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2
Certificate issuer:       /CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2
Certificate serial:       01962F3DA17D61AE6B9BDC46E1348BE78247
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft
Manifest number:          086E
Signing time:             Sun 13 Apr 2025 13:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:30 +0000
Files and hashes:         1: W0hh9fYP1wBw9ymd6jWUhZc3TSg.roa (hash: 9fnzXaQKbPD2tmB/4Jx1f8muC/i0JY7hK/AaC91lAgY=)
                          2: bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl (hash: w5CdyqUU8xa36PKz+KMGDlIz37kU63mfvAcCnB09LA0=)
                          3: f1Yqi8lvwcIpnbg2hTJqBii1euQ.roa (hash: thrb8BU441zB2iuhJJ9dbE9Q7lmEZNGWAp0dWfYSQoY=)
                          4: ojouXwxiA4Aunr-HY_Ha3X-nK8k.roa (hash: V3E89n28yhHgqS4vkCJ3f49fshGSQZ1NzPYfiDUP4Ew=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a1:7d:61:ae:6b:9b:dc:46:e1:34:8b:e7:82:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c1bec3f9358668a87d1a16c4722f41e3c2381e2
        Validity
            Not Before: Apr 13 13:01:30 2025 GMT
            Not After : Apr 14 13:01:30 2025 GMT
        Subject: CN=4e017a1effaa09ca6e241195a1f2ba4408e768b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:98:f0:bc:df:f9:b6:be:ac:82:b4:b9:fa:f0:
                    66:62:51:25:27:3d:f6:5a:9c:69:9b:37:b8:af:53:
                    f7:85:00:f5:1f:30:b1:47:03:52:37:9c:f5:79:57:
                    e1:f0:77:45:7c:41:5d:64:72:4d:01:e4:b1:5c:78:
                    01:cd:09:e4:69:fc:98:f8:71:a3:d6:12:d9:34:b8:
                    a0:e2:74:29:74:87:ad:94:5e:5d:a5:74:5f:95:25:
                    c7:19:56:2b:28:5e:f1:03:f3:ff:c1:c6:a6:4d:59:
                    91:49:ab:5b:b1:89:7e:7d:a7:8d:f6:ac:04:42:fd:
                    26:ce:ec:8a:7c:43:2c:a5:b2:41:ce:a1:68:f3:48:
                    32:ff:a2:e0:e7:c6:51:c2:a6:39:05:95:22:5d:59:
                    63:47:8b:26:50:a9:ba:22:79:c9:e5:20:5a:5f:67:
                    e4:35:eb:e3:f9:5c:f6:0d:41:5c:f9:83:64:19:f7:
                    e0:b3:49:d4:12:b6:f3:30:5b:00:28:1d:71:51:cd:
                    c0:0e:3d:a4:f0:93:a3:dc:8c:38:53:36:44:1a:af:
                    5c:f3:e1:bf:40:ad:d7:4b:f9:2b:a1:d4:9c:2c:26:
                    2c:b8:b8:b8:27:02:f5:b2:61:be:2c:c3:a5:4c:16:
                    37:01:1b:9a:fe:ea:62:b5:dc:98:64:92:8a:84:07:
                    de:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:01:7A:1E:FF:AA:09:CA:6E:24:11:95:A1:F2:BA:44:08:E7:68:B1
            X509v3 Authority Key Identifier:
                keyid:6C:1B:EC:3F:93:58:66:8A:87:D1:A1:6C:47:22:F4:1E:3C:23:81:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBvsP5NYZoqH0aFsRyL0HjwjgeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/8c0473-e7d0-4e43-a7f9-797f4cc4b500/1/bBvsP5NYZoqH0aFsRyL0HjwjgeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:79:d4:9d:8f:cc:96:cc:1d:46:cc:b7:0e:7b:0d:d3:6c:fa:
         72:36:9c:46:ed:9d:bf:98:59:3a:01:87:3f:a5:12:98:9d:6c:
         2a:02:81:c4:b1:96:88:ec:bb:d0:fa:ab:a5:fb:54:5f:50:10:
         9a:fd:a3:2f:10:91:47:56:89:98:cf:7e:aa:1a:4b:c0:62:91:
         40:3a:49:cc:89:b8:56:cc:db:c4:89:0b:fd:2d:ac:2a:26:ec:
         70:b5:23:73:89:b9:71:45:45:8d:d4:f3:ca:43:99:1a:d0:a1:
         92:bd:19:fe:f4:d9:84:c6:c0:eb:b3:2a:e0:ae:84:4f:70:1d:
         6f:9b:4b:78:f9:4f:09:45:56:90:bb:9b:4b:6a:33:d1:63:d7:
         1f:5b:8b:55:72:6b:2b:31:8d:59:8b:46:31:96:ce:fa:c3:c0:
         60:0a:e6:7a:10:39:47:c2:82:99:ea:a7:e1:e1:a5:04:3c:df:
         b1:c3:38:7b:8f:c9:99:0d:f4:5e:c2:0e:de:f6:7b:96:08:8d:
         a6:3f:6c:dd:1b:09:5c:31:ee:09:03:63:a4:db:f2:80:7f:0c:
         ff:fe:80:57:1a:d8:2b:f6:d5:17:ab:f8:55:ff:d0:fa:71:6c:
         2e:66:5e:c3:3c:d8:31:2d:1c:ef:08:10:df:a6:cf:c8:4f:24:
         fa:b2:32:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----