Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
File:                     bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft (raw, json)
Hash identifier:          xst/xe3Cn+UzXt7dulTI/XU4mas8dhL3xshzOcfcMBg=
Subject key identifier:   80:26:41:02:CF:F9:72:7A:8E:31:3D:DF:01:5E:5B:ED:F7:1F:65:F2
Authority key identifier: 6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5
Certificate issuer:       /CN=6e60883aae491e5fb773a9264019ff4f888d5ca5
Certificate serial:       01962E98D4C45FA640DA734B5CE5D91D809C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
Manifest number:          0A04
Signing time:             Sun 13 Apr 2025 10:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:29 +0000
Files and hashes:         1: 8F98rTSwPOpZS4Rzfg71Kw6oATI.roa (hash: QtxPboJkw4rOLdUx7QH5EP5ZvFcFd0VJLxIZUYnjoyU=)
                          2: bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl (hash: FmxtSIEc1xj38v5FqJ4tOIY6yyP/GfM8nKQPJ/Oks0E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d4:c4:5f:a6:40:da:73:4b:5c:e5:d9:1d:80:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e60883aae491e5fb773a9264019ff4f888d5ca5
        Validity
            Not Before: Apr 13 10:01:29 2025 GMT
            Not After : Apr 14 10:01:29 2025 GMT
        Subject: CN=80264102cff9727a8e313ddf015e5bedf71f65f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ed:58:1f:0e:b9:ec:66:48:a3:4a:2b:f9:70:
                    8e:58:6c:0d:38:94:38:ac:8c:da:25:90:09:59:b1:
                    f4:49:0f:36:89:76:86:cf:dd:96:73:f9:56:09:8f:
                    5b:37:71:44:65:bd:63:63:4e:93:a9:ca:02:19:0d:
                    b4:8e:ad:74:db:3b:95:d4:12:ac:77:5f:b8:15:7a:
                    be:3a:e6:e9:3b:31:67:d0:fc:de:b0:84:6d:5d:3e:
                    53:e9:16:ab:6c:e0:4c:79:84:48:17:1f:6c:53:29:
                    57:da:79:12:83:a9:7d:2e:74:a4:ea:dd:65:78:db:
                    c4:ce:09:60:c8:18:ca:86:5a:ae:a7:71:f1:c4:d7:
                    e9:b2:09:d2:2c:66:99:02:07:9e:3c:88:18:d8:a0:
                    8c:b1:55:c0:2d:66:ce:35:2f:cb:57:23:08:d6:46:
                    90:b5:92:ae:cc:a8:37:8b:a0:1d:41:a4:3a:fc:ab:
                    e1:45:48:99:28:d8:e3:a5:5c:cb:09:9a:fb:5c:0d:
                    36:eb:bc:d6:2b:39:fd:85:e2:9f:d7:37:03:3c:06:
                    6c:a4:a3:6c:5a:c1:a3:57:0b:c2:d8:92:aa:5e:f5:
                    c3:5f:4c:cc:74:17:33:71:b0:f6:dc:3f:33:de:a1:
                    32:17:d4:2a:b4:1a:34:a5:a8:92:02:16:10:5f:3f:
                    d7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:26:41:02:CF:F9:72:7A:8E:31:3D:DF:01:5E:5B:ED:F7:1F:65:F2
            X509v3 Authority Key Identifier:
                keyid:6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:66:21:4b:73:f3:f2:b9:c2:a7:d5:d5:72:d3:ca:d0:23:2e:
         cf:24:30:b6:59:dd:54:09:ed:b0:07:39:19:59:1d:4f:15:f9:
         d7:38:dd:89:e0:03:7c:0a:a1:b0:ee:e3:7c:a3:e9:b1:00:ff:
         00:ac:38:d1:55:dc:cb:69:e5:82:92:fe:be:17:b6:81:22:e8:
         b3:fd:40:35:d1:ee:00:9b:08:75:ed:9b:ce:58:2b:0d:9a:84:
         15:73:15:26:7a:07:9f:28:ad:b9:86:04:86:17:6a:c2:57:0c:
         4f:74:db:8a:dc:bc:c2:9c:2c:ff:35:46:48:2e:c3:66:b6:b2:
         f3:7b:0a:01:c4:b4:48:36:96:fc:67:5d:98:84:92:fc:4b:d8:
         f2:5c:a4:92:43:c3:1e:e4:ee:3f:e4:3a:28:8a:ed:0e:fd:e7:
         e2:86:e9:0a:3c:ee:5c:87:7e:f3:99:ad:a6:d9:d5:37:d9:4a:
         e8:5d:74:ab:7d:d4:4f:fb:cb:82:e0:d6:bd:9c:98:4f:30:a6:
         74:63:5b:ef:4c:2d:1d:59:5e:70:d6:4b:ad:19:ac:67:95:49:
         29:4a:a6:04:2b:6f:b2:94:b6:6a:c0:11:fc:c6:0d:11:14:24:
         9f:99:d8:4f:06:f9:4b:7d:3b:72:86:2d:9b:96:08:7a:b6:1f:
         30:b1:74:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----