Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft
File:                     bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft (raw, json)
Hash identifier:          F3VmwevpgqQ6e4sz9sZCWagXM02OTftru2+VsP5b1L0=
Subject key identifier:   B3:0D:BC:42:B4:2F:11:C9:83:48:0D:63:C2:18:CF:2D:6F:4A:7A:92
Authority key identifier: 6C:B8:50:DE:B2:8B:DB:2F:65:5E:2F:1B:02:D3:7C:13:C6:D4:34:52
Certificate issuer:       /CN=6cb850deb28bdb2f655e2f1b02d37c13c6d43452
Certificate serial:       01962F3D64905D2B7DB96DA6BC128C5CDC91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft
Manifest number:          0277
Signing time:             Sun 13 Apr 2025 13:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:14 +0000
Files and hashes:         1: bLhQ3rKL2y9lXi8bAtN8E8bUNFI.crl (hash: Sn5JxtJYivfHt8EJ2q6jiZqMvloEToxLkO7FxG2m5Cc=)
                          2: xfuYQjKIwNsH8n8qNl-5nn5swlA.roa (hash: EURGAPm/xAIC/hIpJIK0VPaCfzGhmdAUIaI/It3KKIY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:64:90:5d:2b:7d:b9:6d:a6:bc:12:8c:5c:dc:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cb850deb28bdb2f655e2f1b02d37c13c6d43452
        Validity
            Not Before: Apr 13 13:01:14 2025 GMT
            Not After : Apr 14 13:01:14 2025 GMT
        Subject: CN=b30dbc42b42f11c983480d63c218cf2d6f4a7a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8d:90:6d:4c:7a:f3:55:30:48:10:05:23:69:
                    dd:53:85:7b:1b:12:5a:0c:ae:ad:9c:02:4e:b6:e4:
                    ea:5f:ef:99:16:c8:97:78:46:6a:2f:18:7e:a0:ab:
                    a9:5a:ef:c9:b0:d3:01:62:60:1e:e7:01:49:ad:b7:
                    db:74:f5:2c:66:b1:36:af:83:af:ca:f4:b8:f1:77:
                    92:e4:c9:de:f5:f3:1d:ac:b6:ff:5a:88:76:26:f3:
                    cf:71:65:b8:51:1b:3b:5b:5c:f7:49:0d:ea:95:24:
                    66:3c:70:28:5b:50:bd:41:f8:c6:88:e5:c4:4e:25:
                    b6:51:d4:b0:c4:8f:01:d0:6e:82:38:2d:d3:56:c0:
                    38:7f:7a:09:0a:0d:19:da:00:d9:f6:0e:99:d0:c8:
                    f0:b7:f3:46:57:da:37:4a:3d:ea:ff:db:7f:dd:2d:
                    f5:e8:c4:c6:fd:33:80:51:c8:51:fd:41:86:6e:59:
                    d5:b1:ba:04:5e:2c:71:23:8c:2b:7a:61:45:86:cc:
                    68:03:e1:87:a9:6d:66:b3:86:54:a6:06:8b:43:e4:
                    ee:be:3d:ba:93:5d:a0:88:36:c7:9c:92:d0:75:55:
                    34:b5:57:e4:c3:5d:ec:75:0c:77:40:29:df:06:7f:
                    ba:6f:41:21:15:36:b5:f3:db:66:5c:5b:5b:37:99:
                    d8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0D:BC:42:B4:2F:11:C9:83:48:0D:63:C2:18:CF:2D:6F:4A:7A:92
            X509v3 Authority Key Identifier:
                keyid:6C:B8:50:DE:B2:8B:DB:2F:65:5E:2F:1B:02:D3:7C:13:C6:D4:34:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b2d70d-4953-4d61-b8c9-88b2d2cf7c31/1/bLhQ3rKL2y9lXi8bAtN8E8bUNFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:d5:4b:22:a1:ed:1c:a8:25:6e:0c:ea:a3:0b:62:b6:bc:a6:
         58:c4:0f:b1:64:57:53:ac:73:c2:a8:c3:5c:44:71:31:35:8d:
         cf:b2:51:2e:79:6f:19:6e:ba:50:45:d0:9c:d0:0f:95:34:02:
         f7:63:0e:43:da:76:7c:30:d4:d9:9c:db:df:be:18:63:3e:81:
         41:09:b0:b8:79:72:78:69:62:65:d1:64:1e:2b:cd:05:db:57:
         7c:6f:23:24:7a:0f:42:4b:e8:01:fa:c8:91:24:eb:63:92:e9:
         1c:e2:73:b9:ab:ec:01:07:2a:59:8a:af:8e:fa:97:03:28:41:
         81:bf:68:8e:70:94:dd:d7:07:0a:b6:e4:55:56:02:d5:e8:6a:
         c2:bc:bf:b3:fa:17:31:af:53:a7:fc:14:68:c0:a4:ea:77:d3:
         d9:cd:e1:83:9c:e6:ef:fe:66:ea:1c:26:c1:62:c4:8b:15:1d:
         a8:53:4e:38:7a:7e:3b:c9:c0:68:38:5a:c7:e7:41:22:e8:58:
         f3:f0:26:a0:ae:d7:79:4b:85:21:4a:a2:b8:e9:db:cb:4d:ec:
         fe:59:02:2c:cd:6c:dd:90:76:f7:33:b5:2d:5d:99:e2:22:d5:
         fc:da:18:f1:2a:6b:78:34:4a:2d:db:ea:6f:7e:e9:e1:04:dc:
         72:f0:84:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----