Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
File:                     B1_bDeQFE0eiHpYorEFzZzTLTys.mft (raw, json)
Hash identifier:          4ElzpBQXVSWew5l8WVCbwkxBL+qrqkB/HeJANvjFxsI=
Subject key identifier:   AA:BA:04:63:9F:68:08:1E:5E:EF:A6:FD:55:4F:0D:CB:96:D8:1B:20
Authority key identifier: 07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
Certificate issuer:       /CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Certificate serial:       01962EB5AA4BD3F8D7F6B60B573E1529881D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
Manifest number:          082E
Signing time:             Sun 13 Apr 2025 10:32:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:32:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:32:59 +0000
Files and hashes:         1: B1_bDeQFE0eiHpYorEFzZzTLTys.crl (hash: 2JU85kzweSKueihSXLdXvKEeAGRFwxiue6Ihp0uFzM4=)
                          2: s5r9yap3tom_HtotpIwIYRM_tQI.roa (hash: nsesgmnToPnc+rmcM0u9Mw7MgCf2v2fzdAWiv7iq1Wc=)
                          3: y-daVj-enHGwMoAEp3dFw-2QKEo.roa (hash: 0URxQ+7I2C4N/tzneV2QeiIUIu31rOBP14ZL34RLUMU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:b5:aa:4b:d3:f8:d7:f6:b6:0b:57:3e:15:29:88:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=075fdb0de4051347a21e9628ac41736734cb4f2b
        Validity
            Not Before: Apr 13 10:32:59 2025 GMT
            Not After : Apr 14 10:32:59 2025 GMT
        Subject: CN=aaba04639f68081e5eefa6fd554f0dcb96d81b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:12:14:69:47:99:08:89:aa:5c:e0:76:64:ee:
                    1d:35:53:9b:6c:9c:60:d8:5b:22:ac:78:07:94:d0:
                    57:51:44:59:e0:0a:a8:36:b8:17:40:dc:d4:68:6c:
                    d3:a7:76:b8:88:38:2b:53:e2:d1:99:3e:f2:63:ce:
                    c5:87:27:29:1f:e4:ee:fa:0f:b6:c4:2f:b2:d3:7c:
                    f0:90:a9:8a:aa:d6:b7:0f:3c:b1:ba:fa:fb:de:05:
                    64:2b:ed:7f:69:b4:a7:24:53:3f:b0:65:3c:c9:61:
                    61:d6:e4:1b:6e:11:90:3a:42:dd:8d:c0:b6:5f:0e:
                    2e:23:32:21:73:43:fa:51:9b:b2:12:95:ab:bd:d0:
                    5e:b6:8d:82:0e:a0:1a:2b:fa:d5:a1:e5:42:84:8c:
                    7f:7d:2f:c6:8e:3a:cd:a5:a1:e6:8d:a7:c3:51:d3:
                    6c:c8:ff:03:cf:c1:b4:df:63:f8:13:67:d1:9d:2a:
                    bf:f9:d4:9e:0f:57:66:c2:42:b8:92:30:c9:8e:d1:
                    57:bb:b7:fb:b1:45:ae:e0:bb:c6:80:ed:36:ff:cb:
                    76:32:c5:b2:55:10:06:c8:99:be:43:20:8f:a6:a9:
                    eb:9b:d2:4a:10:39:59:45:1b:07:86:38:87:13:9f:
                    33:33:da:c9:db:69:b0:97:1c:96:f3:a7:c4:df:46:
                    bd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BA:04:63:9F:68:08:1E:5E:EF:A6:FD:55:4F:0D:CB:96:D8:1B:20
            X509v3 Authority Key Identifier:
                keyid:07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:99:83:67:70:ad:0b:b5:79:66:1e:8f:e4:ea:cf:8c:1b:99:
         20:7a:66:9c:bb:7d:04:37:b1:ac:ad:d0:f5:ee:90:98:d7:70:
         9c:44:c8:bc:75:73:51:2f:8b:b2:65:25:e6:ed:be:b8:22:99:
         d8:5c:25:ce:25:01:b3:d0:73:1e:32:34:53:87:88:2f:1d:88:
         06:70:24:94:92:52:6d:cd:16:42:3c:27:bb:64:29:7a:6f:9f:
         35:95:bc:08:93:72:39:7d:28:ce:36:e2:66:d9:76:67:17:8f:
         ab:a4:60:18:83:70:41:4e:15:42:2d:1a:b5:1c:6e:a7:f2:4b:
         27:f7:33:b6:4d:bb:cf:2d:87:82:15:e6:13:0f:94:01:2a:70:
         7a:b6:36:b1:8e:6b:c3:59:91:56:27:eb:c9:59:c8:6d:92:9f:
         29:3b:4f:a3:c3:a4:95:39:ad:9d:0a:e2:43:4b:e9:ad:92:f6:
         bd:aa:94:ad:27:ef:22:6b:ae:4c:c6:b9:d1:2e:bb:47:f3:1f:
         3a:b3:56:b4:30:54:6f:24:4e:71:71:db:fb:ca:e0:ee:0d:d9:
         50:36:f7:f3:47:96:d2:26:b0:a2:a3:3a:57:d8:ac:49:c1:f5:
         35:b9:41:3b:4a:1c:77:05:d0:a3:70:8a:db:87:a2:9b:ad:73:
         83:2d:a3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----