Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft
File:                     x_BLeLLu35mO3VzB6IZxyNEPGGU.mft (raw, json)
Hash identifier:          I+3O91iVCsbhNT6OVRrMn5xjEUbKXqrt6HBpOk3TrHM=
Subject key identifier:   B9:FF:5B:62:19:E3:34:BC:30:40:CA:12:CC:04:1E:6E:1E:A2:A1:6A
Authority key identifier: C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65
Certificate issuer:       /CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
Certificate serial:       01962ECF707545AA1A34C00A4517D0758D03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft
Manifest number:          0D8B
Signing time:             Sun 13 Apr 2025 11:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:08 +0000
Files and hashes:         1: 1XXADw1Gi3IFHlfT4TGbyZ0Lb48.roa (hash: wqsUGKMXa3a0bqJDEXOb2Eoz6FNnYl15/F+MOCWnVUU=)
                          2: cztvIRkmsCPXq2-H_4GpkaNyzII.roa (hash: wGz2hIDGmVI+VZFGQswcvNseSHozmizv0NMUMTJqa4c=)
                          3: pw4ID0JvUCs01Bso4I7b8aQC3Kk.roa (hash: 4UmrNvYonno/HoHy5PiUXCmAjmZg7PWwKoiEqb2kwD0=)
                          4: x_BLeLLu35mO3VzB6IZxyNEPGGU.crl (hash: ke2JoJlEjFLALiZM1wYLADmHXxGKaWPxhtCWE5yqFm4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:70:75:45:aa:1a:34:c0:0a:45:17:d0:75:8d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
        Validity
            Not Before: Apr 13 11:01:08 2025 GMT
            Not After : Apr 14 11:01:08 2025 GMT
        Subject: CN=b9ff5b6219e334bc3040ca12cc041e6e1ea2a16a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:38:b8:d8:83:94:5d:da:6c:46:5a:1f:a7:bd:
                    66:82:32:9c:81:6a:86:de:8a:8a:62:5c:58:c4:b5:
                    8d:1a:60:d4:5e:01:65:d7:4a:36:16:a4:34:4e:78:
                    01:e4:87:17:13:7a:a7:67:8d:2e:62:d1:6b:9f:00:
                    a2:0f:33:a3:b6:81:7f:fc:f3:62:16:ff:9c:21:df:
                    52:08:25:e8:4d:9b:14:24:4a:5c:86:57:cd:4f:44:
                    fb:50:3c:1e:25:6f:20:35:2f:26:a6:2a:c6:7c:4c:
                    62:4d:1f:61:77:43:3f:39:63:7a:46:34:94:c7:af:
                    3b:1b:e9:6e:2d:cc:c8:fe:d5:94:a9:f7:71:ae:bd:
                    66:c5:1a:23:e0:00:2f:7d:e3:89:5c:60:ea:70:7d:
                    eb:ce:07:73:37:cd:c3:86:fa:93:ca:4c:d5:10:a1:
                    0e:a5:31:86:62:b6:45:10:1c:a8:d6:92:c8:04:2e:
                    f8:3d:66:19:ac:14:f5:38:56:54:d5:cb:d7:e5:8b:
                    d4:ba:66:73:98:f6:a5:15:4e:74:8d:84:0a:12:d5:
                    10:87:be:92:73:2e:ed:1f:36:55:db:ad:e3:73:ea:
                    2b:df:fc:66:54:21:a7:28:cc:35:82:ed:c5:ad:ed:
                    a0:ed:2f:06:b3:98:0c:12:e5:32:b4:0b:fe:f7:44:
                    6f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FF:5B:62:19:E3:34:BC:30:40:CA:12:CC:04:1E:6E:1E:A2:A1:6A
            X509v3 Authority Key Identifier:
                keyid:C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:9a:78:97:d7:a0:a9:67:6a:ad:39:f1:eb:83:f9:97:b2:1f:
         ef:50:32:38:06:2a:f6:ab:74:44:64:a3:a5:49:48:14:85:87:
         cf:e8:87:2f:d0:6d:2c:6f:a4:73:59:6b:2a:0e:aa:b1:0c:c8:
         41:7e:d3:72:e2:8a:15:3a:b1:88:64:26:a2:4c:7f:3f:8f:f3:
         60:dc:4c:d9:fe:ec:89:a6:b1:3b:6f:df:81:bd:9b:61:ee:01:
         d6:30:5b:09:6b:72:1b:56:3b:fa:91:d2:de:93:b2:a4:45:53:
         da:62:ab:e8:8f:f1:79:01:ab:e4:4f:c8:ff:c3:a0:96:00:b6:
         ba:a5:c4:dc:3f:45:28:a4:1a:5b:42:f8:f9:5a:d5:35:4b:cf:
         5e:8f:57:6f:b6:28:d8:1c:e1:84:3e:eb:81:c8:dc:6b:8a:ee:
         a2:11:ab:9b:79:35:b6:07:ad:01:c5:1f:4c:ed:f9:26:11:9c:
         c7:7d:48:41:eb:7a:04:c2:14:0e:cb:26:c8:3a:f5:8b:f9:50:
         fe:d6:36:97:04:3b:eb:d9:12:79:e3:d7:00:2d:b5:26:75:84:
         16:46:c4:05:3f:79:0a:42:2c:47:05:54:56:97:9c:54:ec:2b:
         51:4c:36:d6:03:2d:d4:15:43:61:87:e8:03:f3:93:8d:d5:a8:
         ad:78:a6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----