Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/bcdbdc-d53f-4dc9-8e56-44c39fbc8cb8/1/K6TqrKQTB9Lj0-2Tvob_6uvnWZo.mft
File:                     K6TqrKQTB9Lj0-2Tvob_6uvnWZo.mft (raw, json)
Hash identifier:          652qYatgxDDiDXmLfz3J2vPJa4LKdSjEtiSm+48HwJU=
Subject key identifier:   BF:85:02:BC:2B:AE:08:E7:89:30:26:F2:F0:B8:AB:B1:1A:7A:83:87
Authority key identifier: 2B:A4:EA:AC:A4:13:07:D2:E3:D3:ED:93:BE:86:FF:EA:EB:E7:59:9A
Certificate issuer:       /CN=2ba4eaaca41307d2e3d3ed93be86ffeaebe7599a
Certificate serial:       01962FAB37D8533A6EF34B5CAE6D084385F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K6TqrKQTB9Lj0-2Tvob_6uvnWZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/bcdbdc-d53f-4dc9-8e56-44c39fbc8cb8/1/K6TqrKQTB9Lj0-2Tvob_6uvnWZo.mft
Manifest number:          074E
Signing time:             Sun 13 Apr 2025 15:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:12 +0000
Files and hashes:         1: K6TqrKQTB9Lj0-2Tvob_6uvnWZo.crl (hash: ECs+ygrPrLfSgCr7fgUNAeImDnqpvho4wK5+nsMXOGI=)
                          2: Txker3NSt5jKhqHvbELRIg2COKU.roa (hash: HX2FmurfgaKXvW1pCzW3tE/3+GkeiYpJ/3qR0KzQKR4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:37:d8:53:3a:6e:f3:4b:5c:ae:6d:08:43:85:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ba4eaaca41307d2e3d3ed93be86ffeaebe7599a
        Validity
            Not Before: Apr 13 15:01:12 2025 GMT
            Not After : Apr 14 15:01:12 2025 GMT
        Subject: CN=bf8502bc2bae08e7893026f2f0b8abb11a7a8387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ab:dd:ca:3e:c4:40:fc:ed:ae:ae:bf:2c:cf:
                    3d:02:4c:82:c6:c8:ff:cf:83:ff:f4:e2:4c:69:45:
                    00:e0:f3:07:3e:5b:db:f3:ee:83:89:63:54:de:b7:
                    b6:8e:3f:84:bb:45:95:53:ba:07:f3:00:9a:c2:7b:
                    a7:18:f2:3f:a3:2b:40:b1:4e:9a:d4:66:a8:be:0f:
                    66:5d:22:3c:b1:e5:9c:b6:a2:7f:60:12:7c:32:b9:
                    ae:2c:82:80:f7:8c:dc:3a:e0:7f:93:cb:22:72:83:
                    82:af:2e:30:15:68:64:c9:e2:b4:7d:a1:a0:53:80:
                    6d:16:7a:8a:3e:d2:05:cb:84:f8:57:25:67:9d:d8:
                    ac:54:63:84:fc:fb:61:a5:72:48:90:78:b5:3c:54:
                    55:8c:6d:a4:95:7a:96:bc:1f:8f:ba:f8:cb:98:80:
                    34:c8:8e:28:ff:a6:3e:57:44:f0:a3:e5:61:bc:36:
                    b2:86:c8:21:75:04:5e:4d:7c:3a:d0:37:ab:32:03:
                    69:07:07:d7:f6:ba:84:b4:89:31:94:72:ea:67:66:
                    4b:04:62:1c:0d:19:bf:ef:ee:dc:81:73:87:5e:32:
                    84:01:9d:90:dd:80:73:4b:30:ad:39:b2:0d:b7:75:
                    1f:c1:e0:7f:9c:7b:5c:51:74:fb:eb:33:20:15:8e:
                    42:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:85:02:BC:2B:AE:08:E7:89:30:26:F2:F0:B8:AB:B1:1A:7A:83:87
            X509v3 Authority Key Identifier:
                keyid:2B:A4:EA:AC:A4:13:07:D2:E3:D3:ED:93:BE:86:FF:EA:EB:E7:59:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6TqrKQTB9Lj0-2Tvob_6uvnWZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bcdbdc-d53f-4dc9-8e56-44c39fbc8cb8/1/K6TqrKQTB9Lj0-2Tvob_6uvnWZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/bcdbdc-d53f-4dc9-8e56-44c39fbc8cb8/1/K6TqrKQTB9Lj0-2Tvob_6uvnWZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:f8:3f:7c:82:db:a9:1c:39:54:be:6f:9d:a2:1e:7b:59:7e:
         d8:20:d6:0d:74:53:19:28:f8:58:95:58:e8:94:2c:18:34:d9:
         9e:3b:41:f1:ad:17:b3:b5:4a:1e:52:17:7f:30:9f:74:f5:ce:
         62:84:75:a9:12:1f:71:4e:e5:e8:b5:82:7c:c4:58:48:ce:09:
         7a:16:58:07:fa:e7:b1:b1:73:df:e9:a8:05:88:aa:f0:e4:77:
         f0:85:e3:d6:07:68:06:67:a1:11:6f:35:a2:8e:20:45:09:3d:
         18:3a:86:dd:03:f9:69:39:05:d5:6b:12:d0:43:d4:9c:5e:fa:
         59:1f:00:bf:b2:21:2b:ca:b2:33:58:6c:9a:5e:49:76:d2:aa:
         65:11:f2:eb:95:29:7d:61:6e:8d:b8:7e:91:4b:94:90:7d:41:
         a9:ae:b6:39:6c:7b:e0:04:f5:30:93:2f:5d:f1:2f:98:09:a8:
         52:37:f1:c5:30:cb:e0:f0:d8:c7:c3:4f:ac:2c:50:21:af:f5:
         71:ca:8e:b5:b5:3b:fe:d0:46:ad:86:52:d7:46:46:9f:ef:20:
         53:28:4d:2f:06:ca:14:39:54:2d:a7:22:1e:17:86:d0:0f:3b:
         c8:1f:73:6c:4d:49:26:a3:c1:44:92:ed:8f:d7:90:62:80:fa:
         0c:b4:8a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----