Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
File:                     v6bpb8p6J4PLlyHrti3htTbBY6k.mft (raw, json)
Hash identifier:          KfQJGAioKNQq4vUGgNZtOmn6Sulph9K+2WeRNcDH/MY=
Subject key identifier:   C0:DB:4E:FE:6C:84:AA:78:A3:C5:93:9D:0F:2E:3A:98:77:ED:EF:41
Authority key identifier: BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9
Certificate issuer:       /CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
Certificate serial:       01962E99AC09AA877B6FC89723E8C79EE2C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft
Manifest number:          0C9A
Signing time:             Sun 13 Apr 2025 10:02:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:25 +0000
Files and hashes:         1: UIZd9CI7aaVoCr978zA_tJuQwXc.roa (hash: gtKlay3p/m+1ysOhvty8fHbcgsJz5ALUFkSpQwwLWbI=)
                          2: v6bpb8p6J4PLlyHrti3htTbBY6k.crl (hash: WJt2XyKHdP8XP0q9C9eafH1jHHkP7wlmATnWsMPuGw0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:ac:09:aa:87:7b:6f:c8:97:23:e8:c7:9e:e2:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
        Validity
            Not Before: Apr 13 10:02:25 2025 GMT
            Not After : Apr 14 10:02:25 2025 GMT
        Subject: CN=c0db4efe6c84aa78a3c5939d0f2e3a9877edef41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:73:6b:5d:71:ec:25:9c:6c:4e:55:c4:b8:a1:
                    5b:c2:0c:f3:ff:84:24:e1:3a:fc:34:dc:78:b6:18:
                    1f:57:fa:48:ed:26:60:5f:b0:74:2b:bf:f0:a4:31:
                    57:58:b1:7f:fa:b1:81:61:6c:77:ab:9c:3a:a6:0f:
                    ef:37:c5:7e:9c:1d:fd:7d:de:1b:cd:ec:c4:bb:35:
                    3c:64:05:8b:7e:1d:5e:c0:c0:59:14:a9:9e:9a:80:
                    fc:38:01:d2:93:a1:9c:58:b1:c9:b6:15:fa:3b:6a:
                    bb:e9:d4:db:5b:b8:e9:ba:bd:ea:87:c0:cf:95:aa:
                    1d:0d:76:9e:48:6c:af:ca:64:4c:2f:70:af:8e:01:
                    91:bb:51:14:6c:6e:6f:61:38:73:9e:76:59:2e:f0:
                    04:57:89:7d:11:49:b7:89:ee:23:ad:15:3a:4b:f9:
                    3a:d0:a7:b2:89:80:54:7e:96:85:ae:f4:3e:a3:ff:
                    76:ab:02:73:a7:ab:a8:d0:c4:30:8c:c6:56:73:49:
                    63:04:8b:26:86:da:1d:fc:e1:2f:f8:bf:da:34:47:
                    ff:f0:3f:85:79:df:9b:d9:bf:6d:4a:8c:23:d2:08:
                    ed:be:fd:c8:9f:98:42:8d:3d:05:4f:20:54:8c:75:
                    89:c0:d9:3f:d1:9b:52:ef:8c:64:12:e8:94:ea:f5:
                    57:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DB:4E:FE:6C:84:AA:78:A3:C5:93:9D:0F:2E:3A:98:77:ED:EF:41
            X509v3 Authority Key Identifier:
                keyid:BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:04:77:9f:cf:35:49:5e:73:3b:a6:a1:d5:2a:fa:f9:22:5a:
         0f:8a:67:7a:52:e7:96:ba:97:82:5c:46:bb:fd:79:37:a5:2e:
         f5:a0:a6:fc:73:22:ce:95:5e:83:4b:a4:47:ca:49:44:b7:ff:
         67:d3:68:f3:5d:37:aa:23:db:69:6e:a0:d7:a3:34:b0:9c:ee:
         50:1e:28:98:6c:4c:6b:fa:b3:44:b9:e8:8e:ad:59:52:85:28:
         7b:8d:bd:a4:be:70:6e:00:89:ad:a8:60:24:12:2c:7c:e9:e0:
         9d:a3:ec:46:e7:9f:1b:e5:63:ff:f8:c7:7b:43:e9:87:36:63:
         af:19:3d:22:c1:57:c4:38:b7:15:12:f3:c0:92:37:91:ac:d3:
         2f:95:9c:13:1c:d4:5c:fc:b4:90:b5:e5:d3:33:57:51:90:4e:
         d3:aa:9c:df:11:da:89:5c:3d:a6:e2:cc:e1:3d:4d:94:ff:47:
         00:94:58:64:b9:24:7a:59:30:3c:cd:6a:12:7b:eb:e7:f7:46:
         82:a9:01:b6:d4:98:9f:ad:81:5d:5e:43:45:7f:d1:ba:33:47:
         c9:96:6c:bc:16:aa:8a:ef:5f:6e:b6:4d:48:b0:21:d9:70:98:
         47:52:b0:2b:94:4d:92:ff:ac:8e:5e:42:42:69:de:5d:c2:15:
         ed:6c:c1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----