Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
File:                     v60IrIYttq4LsLiArsBV7by7gvw.mft (raw, json)
Hash identifier:          z8MoXh8swd7NUoIsb+6hLzecP6lA5BUJJ/f0Rz7rlzo=
Subject key identifier:   37:78:C7:10:AA:FF:DD:CD:FA:84:84:31:EE:9C:8C:CC:8B:D8:C1:80
Authority key identifier: BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC
Certificate issuer:       /CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc
Certificate serial:       01962E9927DDC21A78E6BF116B7A494CDFC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft
Manifest number:          0CC4
Signing time:             Sun 13 Apr 2025 10:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:51 +0000
Files and hashes:         1: CZZ5ipuaAOE-Yr5zJDMCRrkyVSA.roa (hash: iFc83ywiMJmrxS1NXOM6QWOY3OsVmvxahP4mNSEaMZM=)
                          2: v60IrIYttq4LsLiArsBV7by7gvw.crl (hash: dwacTjvsFXoiuO3o5HcJm4mdby3wTMSRBrHZxQraPnU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:27:dd:c2:1a:78:e6:bf:11:6b:7a:49:4c:df:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfad08ac862db6ae0bb0b880aec055edbcbb82fc
        Validity
            Not Before: Apr 13 10:01:51 2025 GMT
            Not After : Apr 14 10:01:51 2025 GMT
        Subject: CN=3778c710aaffddcdfa848431ee9c8ccc8bd8c180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:aa:aa:83:a1:6b:36:f5:81:df:df:8d:a8:b2:
                    ed:31:f1:df:5f:5e:85:f3:17:72:aa:41:fb:36:b3:
                    e8:ef:c1:a2:4c:1d:38:f5:05:44:de:5a:9b:6d:7e:
                    e9:9c:4d:87:9c:78:45:16:c9:75:e2:b1:f1:69:7d:
                    82:84:f0:66:38:a6:66:3d:7d:09:b7:6b:74:54:70:
                    f8:8a:a0:7f:83:83:b3:8b:9b:da:2a:8f:87:52:d3:
                    19:aa:e2:44:d1:a9:44:23:82:76:e8:e8:f0:0d:a1:
                    7f:3e:5a:31:01:e1:41:54:c7:fe:d6:71:76:b3:11:
                    bf:b0:00:21:e7:a5:40:7d:fd:7a:1f:9b:9d:90:b3:
                    8a:19:0e:74:e9:ff:b0:9d:78:c2:c2:03:9d:57:f8:
                    54:ad:9e:b4:b8:59:93:fa:04:14:a6:c2:1e:77:80:
                    ce:50:31:a0:4c:93:07:57:e0:ea:a3:82:f5:2b:2a:
                    c0:56:70:10:2c:cb:8b:aa:dd:00:06:b3:8a:29:f9:
                    2c:54:b8:4d:fe:01:f2:a2:a2:fa:2b:66:a8:06:db:
                    37:79:b6:c0:53:f6:c1:40:f4:af:ce:40:32:7d:1a:
                    c3:07:09:fd:89:f4:60:5e:25:54:04:94:34:92:2e:
                    99:61:df:bb:8a:36:73:38:b4:2f:12:58:86:0d:9b:
                    cc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:78:C7:10:AA:FF:DD:CD:FA:84:84:31:EE:9C:8C:CC:8B:D8:C1:80
            X509v3 Authority Key Identifier:
                keyid:BF:AD:08:AC:86:2D:B6:AE:0B:B0:B8:80:AE:C0:55:ED:BC:BB:82:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v60IrIYttq4LsLiArsBV7by7gvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d5dc61-882b-4636-aff1-1fb3f817608f/1/v60IrIYttq4LsLiArsBV7by7gvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:fa:2f:f5:9e:7c:fb:05:3a:b2:d8:78:5a:9f:70:bc:8c:b0:
         e8:6e:9d:4b:2d:a2:7d:3b:2b:86:cf:bb:cb:9e:db:7e:96:b5:
         b0:8b:00:0f:4f:d9:ac:85:ab:eb:91:d8:c9:6b:f2:3f:c0:9e:
         3a:e5:e1:53:97:24:d4:ce:bf:c1:44:59:b3:c7:47:d1:f5:af:
         f8:da:5c:73:c4:53:7d:5e:87:e8:c3:9b:fb:73:ac:55:85:3d:
         95:ec:62:f4:30:91:59:d6:3f:e3:92:d0:c1:a6:54:3f:c4:9c:
         ee:9d:a0:a7:17:09:ef:ff:b1:47:fd:ff:1d:ee:49:11:6b:3b:
         c6:30:af:d7:ee:71:1c:37:a8:4c:f7:e1:b3:f7:f3:81:cc:3e:
         4c:f1:30:0c:0a:65:ba:04:ce:0d:ba:fc:cf:9d:ae:53:2a:5b:
         f3:3d:37:ee:48:fa:aa:7a:1f:08:44:e6:76:2e:06:1e:63:33:
         f6:d4:5b:b1:d8:67:a7:7f:b4:57:6c:31:71:98:74:f8:00:f6:
         79:5d:ef:c7:c7:a0:06:fb:4b:0c:2d:87:0a:2c:c6:10:5f:6a:
         31:1a:9e:0d:81:7e:6f:d5:dc:17:c1:c4:9f:0c:b2:ce:ca:5b:
         54:e7:52:0f:af:34:a3:4b:32:ca:a8:bc:4a:72:92:5c:90:79:
         ea:c2:76:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----