Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
File:                     bGbVyy-crT9IQ_cUpNxi1yE96-g.mft (raw, json)
Hash identifier:          C53DxqQub5XVpoIENJY1sIB1tv6iVevUCsb2dB/WLEw=
Subject key identifier:   84:5D:01:10:EA:0C:4C:B6:13:4D:8D:EE:3D:1E:2B:86:5C:35:C4:FD
Authority key identifier: 6C:66:D5:CB:2F:9C:AD:3F:48:43:F7:14:A4:DC:62:D7:21:3D:EB:E8
Certificate issuer:       /CN=6c66d5cb2f9cad3f4843f714a4dc62d7213debe8
Certificate serial:       01962ECFD844B31A2E962B508210F9DF99BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 11:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:35 +0000
Files and hashes:         1: JAwkYlt_gNZ54Td8tq5GWdme2ug.roa (hash: zUyQFLpVWmBaNa+EvYNx5U2/U4IK1mMjW0Y/zg4R97w=)
                          2: bGbVyy-crT9IQ_cUpNxi1yE96-g.crl (hash: kAjiBzun5LFQOlF0vD5xGLyMhQbxvdpB/f8lI8+K9q4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:d8:44:b3:1a:2e:96:2b:50:82:10:f9:df:99:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c66d5cb2f9cad3f4843f714a4dc62d7213debe8
        Validity
            Not Before: Apr 13 11:01:35 2025 GMT
            Not After : Apr 14 11:01:35 2025 GMT
        Subject: CN=845d0110ea0c4cb6134d8dee3d1e2b865c35c4fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:35:d1:ce:77:82:dd:bd:d6:f3:62:a2:b5:71:
                    ae:03:0d:ac:ae:45:02:69:3a:2a:de:c4:95:64:d5:
                    5f:72:ff:95:19:9e:08:01:cc:e3:11:90:21:6f:0a:
                    f9:54:6f:1d:59:7e:63:22:ca:68:aa:b3:b0:de:be:
                    ec:52:d4:cb:4c:2e:45:3f:fa:14:6a:60:28:2e:12:
                    92:b7:e9:93:f8:54:34:1a:b9:32:be:00:b3:ef:3a:
                    7a:1b:ce:07:4b:3d:dc:6c:b6:44:fb:9d:0c:75:60:
                    4a:13:b6:6c:27:74:b6:52:3e:2b:c4:23:0c:e1:58:
                    03:fb:c6:49:33:f8:1a:b3:9e:d3:e8:c1:53:d6:38:
                    b7:59:0b:1d:57:77:1d:04:85:75:11:37:2f:19:28:
                    16:14:b3:44:77:8e:02:08:96:fd:92:89:a9:12:f7:
                    f9:24:ce:76:f0:b2:b2:d1:bb:b1:b2:80:f7:09:e0:
                    c2:f0:5e:63:f1:45:3d:66:fb:c3:74:cc:1e:c6:5d:
                    d3:b5:6b:a3:42:23:c7:db:e6:5e:50:02:a5:40:b0:
                    0f:56:54:55:cd:59:8a:0c:0f:e6:4f:c7:7e:08:a1:
                    cc:ee:57:c3:09:02:5f:42:9b:5d:bf:34:ce:4a:87:
                    29:91:1a:68:be:52:f9:44:cf:e4:f5:e9:53:7e:d7:
                    19:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5D:01:10:EA:0C:4C:B6:13:4D:8D:EE:3D:1E:2B:86:5C:35:C4:FD
            X509v3 Authority Key Identifier:
                keyid:6C:66:D5:CB:2F:9C:AD:3F:48:43:F7:14:A4:DC:62:D7:21:3D:EB:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:39:1e:9c:8b:d2:a4:19:a0:9a:51:c4:2b:54:04:0d:54:7b:
         5a:ff:f7:93:d2:b2:6e:55:ce:47:14:94:26:36:e9:76:48:8b:
         a5:a1:f4:d5:ae:01:4e:70:64:27:85:40:bb:aa:fb:a2:8d:0d:
         9a:52:16:33:9c:9a:5f:d0:4d:d8:1e:77:67:33:6b:54:84:8f:
         7f:4a:bf:02:7e:a1:de:b2:63:9b:1e:0d:82:32:e4:20:91:87:
         8a:df:a8:71:8a:b8:4d:d9:21:38:e3:51:f9:93:bc:1c:06:2d:
         b8:8e:9a:8a:48:0b:8d:34:5c:8c:6f:36:30:8f:3f:a0:91:27:
         cc:94:a5:59:5f:2e:60:5c:c1:9f:fd:e0:49:31:5b:d6:ef:c1:
         44:6b:99:ce:2e:5a:21:25:49:1d:c4:a3:de:fa:c3:55:14:bd:
         9b:7b:9b:74:5b:a4:04:d2:16:b6:9a:a8:d3:b5:a7:7f:b7:fe:
         55:2c:22:8d:72:e9:26:67:0c:0d:14:b7:6d:ea:63:d7:9f:cd:
         68:70:38:28:b1:1a:a7:54:01:a6:a2:8a:14:0a:eb:6e:39:19:
         c5:ba:e0:bc:ce:e7:48:4e:be:b8:75:21:97:8a:63:c2:21:10:
         d6:bf:00:08:89:3a:b8:65:28:8a:31:2c:29:68:fe:f0:91:96:
         bf:64:4f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----