Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
File:                     bHO9JP2DCIa_otKWFBbSGF3jN3I.mft (raw, json)
Hash identifier:          mAjYpv+rilhaS17KFkbn5Dxhy4u7rrJbBr8TQsNVick=
Subject key identifier:   17:29:3C:51:6E:93:89:2A:3A:A2:CB:54:72:82:B3:4D:34:DB:E5:AE
Authority key identifier: 6C:73:BD:24:FD:83:08:86:BF:A2:D2:96:14:16:D2:18:5D:E3:37:72
Certificate issuer:       /CN=6c73bd24fd830886bfa2d2961416d2185de33772
Certificate serial:       01962E9970F933BC60B73C192EBC9A1506BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft
Manifest number:          0836
Signing time:             Sun 13 Apr 2025 10:02:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:09 +0000
Files and hashes:         1: bHO9JP2DCIa_otKWFBbSGF3jN3I.crl (hash: +eXTIz9DKv4qvlSBOSBIvChCZoQ20qBJxNVeVvck1BQ=)
                          2: qHEAWZ6N3iBzcK7IIzIjqot58Rk.roa (hash: n8u6jtIG9RsDk/UjBbBpLB8puiC2i8ky96Vt7ctj0eY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:70:f9:33:bc:60:b7:3c:19:2e:bc:9a:15:06:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c73bd24fd830886bfa2d2961416d2185de33772
        Validity
            Not Before: Apr 13 10:02:09 2025 GMT
            Not After : Apr 14 10:02:09 2025 GMT
        Subject: CN=17293c516e93892a3aa2cb547282b34d34dbe5ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9f:a1:cc:7c:45:13:8b:11:f2:9e:06:74:8c:
                    88:f8:4a:ed:4f:f9:c1:59:5c:03:b6:59:f6:e1:bf:
                    14:60:f2:ae:c8:38:fd:0e:9b:8b:b2:a1:64:02:7f:
                    be:df:a6:eb:a2:64:03:ae:c4:f4:42:ac:f0:ad:e2:
                    af:22:fb:09:4d:0e:26:3d:47:b4:61:4f:20:05:3e:
                    f5:0a:a1:b3:fe:db:bd:4f:79:6e:98:1a:e2:90:db:
                    64:4e:50:e6:a8:d7:c3:60:0c:54:34:2a:08:0d:97:
                    f4:0a:50:99:f8:70:f9:0e:95:53:6b:85:f2:8d:49:
                    83:16:ac:19:b1:52:8c:0f:31:15:11:74:4b:0e:89:
                    79:8a:e5:9e:bd:cc:a5:9d:29:90:71:77:34:f8:8a:
                    76:2c:a8:e3:1a:00:7f:a2:e1:75:74:12:42:7f:dc:
                    28:1f:e7:3d:28:ef:7d:c0:b3:3c:e0:fb:54:33:f1:
                    1a:9f:04:6d:df:9b:68:2a:a9:4b:df:12:b5:f0:ed:
                    d3:c9:cb:30:b3:9c:79:a0:e0:e1:54:05:93:55:56:
                    d6:cd:c6:7d:bb:6d:b7:b1:4b:b4:32:40:cf:d1:99:
                    cf:35:67:d7:30:2c:ca:8e:5c:1c:fc:e8:ad:da:6b:
                    01:7b:2f:0b:b9:29:bd:f2:b4:93:52:9b:da:35:2d:
                    04:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:29:3C:51:6E:93:89:2A:3A:A2:CB:54:72:82:B3:4D:34:DB:E5:AE
            X509v3 Authority Key Identifier:
                keyid:6C:73:BD:24:FD:83:08:86:BF:A2:D2:96:14:16:D2:18:5D:E3:37:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:55:c5:c0:27:4e:9a:ea:f3:35:28:53:be:d6:da:ca:55:d9:
         0b:f6:87:a8:ed:7b:16:91:02:0d:89:b8:56:a3:81:14:fa:e3:
         e9:e0:a7:b1:93:ac:06:de:63:90:ce:33:81:a4:c5:36:10:12:
         6d:a1:5a:30:dc:6b:94:bd:51:6e:17:6f:dd:d3:84:5f:98:83:
         a0:ad:82:45:96:71:4d:95:e8:8f:77:98:b3:18:cd:ef:61:2f:
         ca:78:c4:e9:10:75:68:40:64:17:38:2b:99:ad:7f:36:5f:52:
         cc:e5:a9:fb:e0:23:7d:d4:7b:57:cb:03:2b:cf:da:9c:ed:75:
         56:71:be:9a:76:cd:c1:67:81:79:36:59:8e:8b:27:13:78:c9:
         84:5e:aa:bc:40:a1:69:ff:4e:55:6d:fc:d5:db:b7:5a:b3:ef:
         16:10:a1:5f:3d:8c:09:4c:f2:77:77:91:6e:5c:96:38:aa:1c:
         4a:cf:c3:de:e7:77:62:11:37:2b:5d:ee:92:24:ed:ec:e6:0c:
         e2:68:59:9f:44:7f:25:31:82:8a:d4:83:2c:8c:e5:ee:15:b7:
         d0:18:38:3e:97:b4:4b:b4:95:34:57:78:4d:3a:1f:93:d3:80:
         46:c5:e5:95:98:89:69:9b:35:07:6e:a2:46:d4:b9:36:84:da:
         a5:b9:9c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----