Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft
File:                     mXFUBuche_wTgSpHBMYq4JnnyP8.mft (raw, json)
Hash identifier:          pEPOXyOweCxBQswVH63Q77Q2Lm3U7TpwAYekLODp0D8=
Subject key identifier:   BC:4C:7D:6F:A1:9E:93:60:67:7D:D1:69:09:CF:42:43:42:10:DD:99
Authority key identifier: 99:71:54:06:E7:21:7B:FC:13:81:2A:47:04:C6:2A:E0:99:E7:C8:FF
Certificate issuer:       /CN=99715406e7217bfc13812a4704c62ae099e7c8ff
Certificate serial:       01962DF44E508F3F26A7A77FD43F98CA98AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mXFUBuche_wTgSpHBMYq4JnnyP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft
Manifest number:          0205
Signing time:             Sun 13 Apr 2025 07:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:47 +0000
Files and hashes:         1: mXFUBuche_wTgSpHBMYq4JnnyP8.crl (hash: nzqaQxeDmEzFeoJIbfrkCNxpgiTDZVYl3JzbQCnAdhQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:4e:50:8f:3f:26:a7:a7:7f:d4:3f:98:ca:98:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99715406e7217bfc13812a4704c62ae099e7c8ff
        Validity
            Not Before: Apr 13 07:01:47 2025 GMT
            Not After : Apr 14 07:01:47 2025 GMT
        Subject: CN=bc4c7d6fa19e9360677dd16909cf42434210dd99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c1:a2:24:72:a2:c0:08:ae:f9:c3:97:74:10:
                    51:db:84:0a:e9:38:31:04:06:a8:5f:27:27:a4:f3:
                    95:c4:5a:14:c0:cf:c0:4b:f0:81:d0:b3:44:8f:0a:
                    bc:1e:55:27:01:03:7f:4b:9c:3e:ab:10:94:52:54:
                    b1:57:1b:35:df:bb:48:0b:77:08:49:08:04:f4:cb:
                    04:ef:e1:ed:32:07:37:de:97:3e:19:d1:9a:b9:8e:
                    3d:f3:a3:22:08:d6:3d:e4:fa:09:e3:88:53:cf:0c:
                    d5:14:a7:e1:2c:b1:92:f5:e7:a3:87:75:bc:25:fc:
                    bd:cd:81:c8:b5:7f:68:38:86:8d:14:0f:4a:1c:58:
                    b6:d5:f4:5c:49:45:9f:88:da:78:d7:4e:24:17:61:
                    13:6d:90:b5:41:10:91:99:18:ca:f3:62:e3:03:bd:
                    bf:3c:17:6d:cc:73:40:cf:d1:8b:11:92:85:5f:34:
                    0c:63:96:62:9f:05:5d:6f:3f:ca:fa:6f:e9:bf:f4:
                    98:22:d2:3a:4c:e5:95:11:17:66:97:b5:2f:ab:42:
                    01:36:86:c9:87:b5:09:11:03:de:be:77:4c:41:7c:
                    4e:8f:bd:ac:2c:3c:20:cb:fa:42:7a:64:b8:23:88:
                    0f:fe:21:4d:2d:62:3b:c2:88:b1:7c:81:54:b5:86:
                    d5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4C:7D:6F:A1:9E:93:60:67:7D:D1:69:09:CF:42:43:42:10:DD:99
            X509v3 Authority Key Identifier:
                keyid:99:71:54:06:E7:21:7B:FC:13:81:2A:47:04:C6:2A:E0:99:E7:C8:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXFUBuche_wTgSpHBMYq4JnnyP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4e9e37-6e66-41b1-aa99-1516b6d82e2d/1/mXFUBuche_wTgSpHBMYq4JnnyP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:0e:04:45:60:38:9d:66:12:28:be:a4:41:c3:16:ce:b8:80:
         10:f3:67:39:79:06:01:4c:69:29:e2:41:b6:0c:a8:e5:12:53:
         e7:d9:38:2a:8f:d1:eb:4c:10:3e:d6:43:a2:91:b1:fc:24:aa:
         f4:08:26:00:b7:80:6d:e1:0e:fa:3e:16:f8:a3:fb:e6:4d:24:
         ad:73:c6:60:fc:4a:75:77:98:ce:08:e8:10:32:a0:a3:8c:f1:
         40:9e:30:30:d3:6f:a7:13:5b:29:f7:b1:44:f4:4b:b9:df:72:
         f6:e2:15:7d:96:18:6c:ac:44:4a:43:fd:37:3f:66:99:fc:14:
         be:a0:6c:76:47:c7:de:7e:fb:b4:9b:d2:5d:f3:00:56:a1:7c:
         a9:97:52:5a:22:92:be:c0:05:40:d5:7b:9b:1e:1c:80:22:8b:
         4d:c1:49:b8:fe:bd:1c:ae:67:13:25:ad:b9:42:3e:68:2f:11:
         a0:70:ea:eb:5f:09:27:6d:e8:1c:90:4d:2c:4c:83:64:05:ad:
         c0:95:e5:57:be:b6:97:65:bb:d4:bd:53:a3:f3:91:2a:8c:d2:
         04:74:b7:0c:59:b8:91:07:ef:5f:60:32:e9:29:df:c5:c3:32:
         10:9d:6f:c9:2b:e4:70:63:d4:02:d2:9f:59:f1:86:b2:b8:7a:
         60:b7:08:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----