Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft
File:                     bMfzcUDRMXn5pckglknIDDfGpxM.mft (raw, json)
Hash identifier:          ij84DC1ZuoY4qxUucwGtpfH0oFHseCK//oUBCbqF2v4=
Subject key identifier:   19:6C:1E:F3:FA:E7:70:34:1F:DC:33:61:90:0B:AB:37:9C:41:10:C6
Authority key identifier: 6C:C7:F3:71:40:D1:31:79:F9:A5:C9:20:96:49:C8:0C:37:C6:A7:13
Certificate issuer:       /CN=6cc7f37140d13179f9a5c9209649c80c37c6a713
Certificate serial:       01962F0707A44D01198D3206E576F81DC724
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bMfzcUDRMXn5pckglknIDDfGpxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft
Manifest number:          1102
Signing time:             Sun 13 Apr 2025 12:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:51 +0000
Files and hashes:         1: bMfzcUDRMXn5pckglknIDDfGpxM.crl (hash: KK5vBkg/nVePWmsV3tPFZgrrjciGmw8Mj4P583NtyQQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:07:a4:4d:01:19:8d:32:06:e5:76:f8:1d:c7:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc7f37140d13179f9a5c9209649c80c37c6a713
        Validity
            Not Before: Apr 13 12:01:51 2025 GMT
            Not After : Apr 14 12:01:51 2025 GMT
        Subject: CN=196c1ef3fae770341fdc3361900bab379c4110c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3a:a6:80:34:a7:5d:77:7a:ff:6e:5e:32:c3:
                    fa:ca:a9:f4:bd:43:12:2f:ad:56:cf:42:f3:c2:cd:
                    a0:f8:b6:7b:25:fd:06:23:7a:57:a5:de:76:f1:e3:
                    db:17:39:06:b9:08:a4:ae:55:0a:dc:f8:26:13:49:
                    a6:a8:84:5e:de:9a:04:72:93:7c:cc:d6:da:8f:ee:
                    4a:66:f5:5b:96:45:8e:60:db:32:ff:46:4d:4a:82:
                    30:77:8c:3c:5b:49:5c:01:dd:6b:1f:28:d1:e1:06:
                    57:43:51:b6:fb:ab:72:62:d1:52:75:5f:ac:6f:5e:
                    1b:b1:04:c7:ff:2a:d3:06:00:73:02:e5:4c:8b:25:
                    ef:01:32:df:87:e8:0d:3f:f6:d5:c3:10:da:d4:4d:
                    9c:37:2a:80:a2:6a:88:b4:f5:fb:7d:99:f1:25:6e:
                    3c:16:b2:ee:bd:88:98:6a:c3:67:2f:4f:ee:a4:91:
                    6f:57:d3:f5:5e:78:31:85:77:b6:6c:52:15:7c:1b:
                    ff:dd:66:e1:56:22:81:63:f7:62:32:bc:e9:69:6e:
                    6d:f3:87:89:f7:7d:3b:6c:a0:40:5f:46:6d:18:35:
                    e4:e2:4c:64:1d:fc:46:d1:26:ed:96:de:95:bd:1d:
                    c6:7b:96:47:f7:0e:8d:58:da:72:8b:7c:22:8f:a4:
                    a7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:6C:1E:F3:FA:E7:70:34:1F:DC:33:61:90:0B:AB:37:9C:41:10:C6
            X509v3 Authority Key Identifier:
                keyid:6C:C7:F3:71:40:D1:31:79:F9:A5:C9:20:96:49:C8:0C:37:C6:A7:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMfzcUDRMXn5pckglknIDDfGpxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:e3:2b:fb:e8:7c:3b:4b:83:03:34:69:d7:1f:73:ba:28:7d:
         05:dc:c3:da:48:ac:9e:01:bd:4f:34:a5:d0:25:bc:af:51:20:
         b6:8f:3b:c6:a2:b1:35:6c:95:2c:76:b4:3f:23:fc:13:34:11:
         82:59:b2:b5:dd:76:f8:b6:2d:74:12:1b:34:cb:b7:e3:6c:25:
         13:52:fb:af:07:5e:ad:91:14:43:27:b1:36:74:a8:a6:e1:0a:
         9c:7b:35:7d:20:5f:00:37:c7:2a:99:4d:3b:13:bb:43:7b:40:
         a6:da:fc:bf:a1:31:d9:fe:1b:52:1d:36:45:d5:db:bf:a7:3f:
         c0:9b:f0:ad:8e:65:7b:c3:ad:72:4a:d9:61:40:24:82:a6:2a:
         da:43:d7:12:62:39:cd:a0:ea:65:65:13:e8:94:d3:88:7a:1e:
         74:fa:1b:9d:a2:a6:bf:9a:33:7a:41:81:6b:4d:b7:39:d9:92:
         7c:d3:f1:70:12:4f:18:90:3e:ac:b8:6b:b0:84:10:ac:39:8a:
         b0:22:85:7a:2e:23:ed:c3:a2:af:db:45:e9:c0:c3:29:27:c3:
         0f:d8:72:05:96:1e:3e:a6:cc:91:41:bb:2b:17:3c:1f:ac:d7:
         e9:3f:88:ed:9f:4f:ce:b2:40:00:fb:56:8a:ec:08:ad:6c:ba:
         dd:88:77:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----