Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
File:                     bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft (raw, json)
Hash identifier:          Eh4yTdmil3FTUjVpxEKGbAFH6RRhuANbP2/FrU870ZA=
Subject key identifier:   13:F3:14:94:5B:80:F8:88:8A:72:66:C6:2F:A5:3C:CD:AF:27:4B:05
Authority key identifier: 6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
Certificate issuer:       /CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Certificate serial:       01962F74D94EFE89AD28D80D51C75F3BA315
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
Manifest number:          0C5F
Signing time:             Sun 13 Apr 2025 14:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:48 +0000
Files and hashes:         1: bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl (hash: EFi6taxHO9x1N8dUmaTQE9Ne2qK9ijSZ7kLnFKGk91Q=)
                          2: mf0dhA7BgjaM7eDjfmF7DxTSVfY.roa (hash: 1vX40l9RdR1damElfdrSUBtrrLE1iQPxYSNwcaRMl0Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d9:4e:fe:89:ad:28:d8:0d:51:c7:5f:3b:a3:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
        Validity
            Not Before: Apr 13 14:01:48 2025 GMT
            Not After : Apr 14 14:01:48 2025 GMT
        Subject: CN=13f314945b80f8888a7266c62fa53ccdaf274b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c6:10:76:53:50:b7:f0:b3:6f:2c:bf:07:66:
                    52:fb:8e:4a:12:48:87:cc:be:f1:04:e5:69:8b:3a:
                    8a:7e:85:3f:7a:30:d3:a3:8a:0d:d5:f5:2f:de:19:
                    db:90:86:87:a6:c6:86:f5:72:8a:8e:39:6e:bb:67:
                    f6:c8:46:7b:2a:1e:bc:38:4f:58:41:7e:a3:76:b6:
                    f1:19:d4:81:1b:c6:af:12:de:2e:a8:fa:48:5b:6c:
                    b2:f0:0a:d4:35:69:f4:2e:1b:19:0f:23:ad:77:c3:
                    e8:34:39:0e:3a:de:7d:8f:79:1f:04:a3:78:33:3e:
                    24:b6:c3:30:e8:25:ac:68:55:c7:05:fe:9e:fb:82:
                    f5:96:1a:56:bd:74:7a:bb:8b:69:01:92:77:3e:87:
                    4d:19:36:bd:a8:d9:99:80:8a:0c:99:53:ef:45:1a:
                    a1:db:ba:06:f9:12:aa:c8:1c:03:82:85:9e:ea:77:
                    15:41:33:89:45:11:6a:98:bf:fc:a6:2f:f4:6b:c9:
                    69:8a:f7:88:41:58:9e:f5:32:42:f5:db:c0:44:03:
                    5e:a3:3c:cc:39:5b:74:4b:de:98:93:3c:8b:7c:3a:
                    9a:f9:b2:bd:39:df:65:70:fd:27:8c:19:9a:b3:db:
                    a1:d2:5d:b9:7f:9d:9b:46:0f:cf:0e:db:55:b5:8e:
                    9d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F3:14:94:5B:80:F8:88:8A:72:66:C6:2F:A5:3C:CD:AF:27:4B:05
            X509v3 Authority Key Identifier:
                keyid:6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:e9:01:08:6b:d5:08:ed:aa:ec:bc:fe:7a:ab:f4:4d:a3:5c:
         f7:dc:4f:62:81:38:a6:30:ff:bd:7c:9f:2c:67:82:47:fd:f1:
         e2:30:6b:4f:3a:d7:00:eb:a9:f5:c6:0f:69:51:ca:0d:00:4f:
         98:0b:e1:7c:ec:73:1a:c2:6d:99:d9:28:a7:97:1a:a8:1e:84:
         89:37:c2:76:cd:80:4b:17:2a:f4:8e:69:cf:de:5c:42:be:e0:
         cf:ca:c1:83:b7:0c:69:11:1a:b2:8e:ba:66:5d:66:32:e3:85:
         e7:4b:35:09:ce:7a:d1:11:da:17:bf:18:82:9c:a1:e2:a0:4f:
         39:ca:83:f5:61:72:d4:01:2f:13:1d:c0:69:2c:6e:86:4c:57:
         12:af:61:86:ea:90:21:56:34:1b:12:b7:12:71:b2:0b:83:51:
         c8:ee:60:9e:0d:b1:89:b5:bb:8b:23:c6:64:4b:cd:c8:52:f8:
         a7:19:15:aa:d6:d1:d2:1e:52:b5:af:8a:ab:9e:b5:22:3b:4f:
         e7:98:4a:d1:e5:41:f3:99:20:b3:81:7c:31:3d:61:c4:c5:49:
         e3:d6:be:22:98:aa:38:bd:9d:d8:07:dc:5d:87:41:d1:1b:b9:
         45:c6:eb:bf:c0:a6:a9:ec:2d:07:02:d6:16:08:c4:93:7c:ba:
         46:87:fa:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----