Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
File:                     BpML6MTKaQDu2y8yYNXdeFBXASk.mft (raw, json)
Hash identifier:          QpyYYj80ibt5mXK9OeWTbD+rAtJeB8cbkajxy/ItKZE=
Subject key identifier:   82:55:E2:4C:7D:4C:DC:4E:65:F8:CF:68:69:27:CA:7D:52:9F:85:CF
Authority key identifier: 06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29
Certificate issuer:       /CN=06930be8c4ca6900eedb2f3260d5dd7850570129
Certificate serial:       01962E2B183F71D823382DCABF2DCC250D71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft
Manifest number:          0425
Signing time:             Sun 13 Apr 2025 08:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:38 +0000
Files and hashes:         1: 9v1danHKthvigEC35X1SKZS-6Og.roa (hash: lYoHFjCJjYXETX2ehKvjFug+lTMZ9V4bGWZKLE91KWo=)
                          2: BpML6MTKaQDu2y8yYNXdeFBXASk.crl (hash: +4U0bPuxEiRzzeAdvUfSeleO8LypfJUUl/dcmiPS+Yk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:18:3f:71:d8:23:38:2d:ca:bf:2d:cc:25:0d:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06930be8c4ca6900eedb2f3260d5dd7850570129
        Validity
            Not Before: Apr 13 08:01:38 2025 GMT
            Not After : Apr 14 08:01:38 2025 GMT
        Subject: CN=8255e24c7d4cdc4e65f8cf686927ca7d529f85cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:28:00:63:bf:5a:b3:0d:71:72:44:91:31:a3:
                    3b:d3:3d:6f:97:cc:57:fa:54:f5:5f:4b:e4:58:7c:
                    34:2b:7a:6e:27:c9:0e:7d:a6:27:b8:6d:d0:94:9a:
                    24:9d:be:a8:17:c5:2d:fe:7e:a6:c1:ec:da:d3:03:
                    ab:e4:66:86:ad:69:29:81:d6:a3:46:f1:a7:60:9d:
                    09:8b:5c:7a:b2:eb:16:57:07:10:eb:db:bc:53:15:
                    f9:52:62:29:5b:f0:aa:e1:d7:64:69:a8:ea:03:b1:
                    62:9d:4a:1d:fc:3d:50:3a:fd:79:f8:5e:ba:01:1b:
                    0f:69:44:cc:98:7a:51:09:7d:0b:1b:95:c8:f4:f2:
                    ac:6d:5f:9c:54:bf:08:96:60:e9:b8:5f:1c:ea:e0:
                    7b:8c:97:23:51:07:9a:9f:bd:83:e2:d6:71:a3:6f:
                    51:f1:60:11:a8:fc:f5:73:69:73:32:ad:e3:57:c3:
                    b8:d5:b1:9a:3c:c1:b3:1e:66:18:ee:bf:5b:26:e3:
                    dd:c4:1c:a4:63:03:cd:25:5b:49:45:9c:b8:cb:57:
                    2d:46:8b:4e:4f:6a:16:b9:6f:57:b7:d5:1b:0b:9b:
                    5a:99:b4:a3:a2:d2:78:76:44:cd:e9:f8:a7:98:e8:
                    3e:f9:84:58:df:6b:85:95:3c:31:0c:94:d0:42:c3:
                    b5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:55:E2:4C:7D:4C:DC:4E:65:F8:CF:68:69:27:CA:7D:52:9F:85:CF
            X509v3 Authority Key Identifier:
                keyid:06:93:0B:E8:C4:CA:69:00:EE:DB:2F:32:60:D5:DD:78:50:57:01:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpML6MTKaQDu2y8yYNXdeFBXASk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a68518-4295-4528-8ee6-fabae8d56fc6/1/BpML6MTKaQDu2y8yYNXdeFBXASk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:2d:d7:0c:49:89:9b:d8:a0:c4:10:92:2b:17:c1:11:34:a8:
         04:c8:f8:ea:9e:f7:13:d7:33:03:d1:4b:9a:b8:c9:2c:ec:c3:
         f5:a8:5c:7b:e3:23:e8:97:08:40:c1:fd:a4:3b:2c:c8:40:ed:
         08:cc:97:fa:72:83:1d:fc:be:b1:31:0f:ca:18:14:fa:95:60:
         53:df:94:bb:33:48:0f:69:c8:dd:87:d8:2b:a4:71:57:0b:e8:
         cf:63:a5:7c:43:58:fd:51:3d:0f:02:a9:67:91:37:1e:9e:c2:
         f5:85:09:af:4a:8f:04:a6:cb:72:2c:b5:99:25:05:a8:e0:c8:
         95:cf:6f:a8:b6:0a:d1:a8:3a:d9:df:16:26:6d:e1:41:a2:1c:
         c4:6d:d1:c0:14:8c:d5:b2:46:12:9c:8b:dd:8a:cb:5e:0e:01:
         99:19:fc:2a:7f:5b:94:fd:f5:56:5b:05:9e:3f:e1:da:6c:4f:
         82:25:f2:7a:27:2a:7e:02:7e:60:86:70:59:7e:94:8a:b0:8c:
         01:3d:45:57:a9:bc:71:82:47:00:69:2d:75:b1:66:2b:76:ab:
         9b:f0:b7:c8:44:8e:ee:f5:70:1f:bc:30:97:8b:ed:94:ae:11:
         26:f0:b4:c1:78:2d:33:87:90:26:6d:35:74:15:98:46:00:ed:
         e6:90:26:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----