Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.mft
File:                     bO30FYremPFFfOyFiVVibxYdKu8.mft (raw, json)
Hash identifier:          sNJc5iReA+oXnJRxRiHke1siclca1dAunklzSwXZJqg=
Subject key identifier:   8C:7E:10:A4:07:86:0C:94:32:DD:8B:CF:0D:34:9F:31:B0:E0:30:33
Authority key identifier: 6C:ED:F4:15:8A:DE:98:F1:45:7C:EC:85:89:55:62:6F:16:1D:2A:EF
Certificate issuer:       /CN=6cedf4158ade98f1457cec858955626f161d2aef
Certificate serial:       01962E994766B6096ABA60F3F26D127014A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bO30FYremPFFfOyFiVVibxYdKu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.mft
Manifest number:          14F1
Signing time:             Sun 13 Apr 2025 10:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:59 +0000
Files and hashes:         1: Flwvhhtmnugnw0Jq8XM4728h_tc.roa (hash: mMPxIGgY2ZdP2DRf7AHcBe/zEjvkKGfWdlZtEbsX1hw=)
                          2: bO30FYremPFFfOyFiVVibxYdKu8.crl (hash: rGzID9ZBOi7UABqzI2yw1kvrPPG/dWeKxeYI/1mGoZc=)
                          3: nfbw8nkOWLMFYeRpQFZBC2lYZWg.roa (hash: uMfkd4wLt8gDn0VUwsQBSdryskjaJgQtls/Bs/4236o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:47:66:b6:09:6a:ba:60:f3:f2:6d:12:70:14:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cedf4158ade98f1457cec858955626f161d2aef
        Validity
            Not Before: Apr 13 10:01:59 2025 GMT
            Not After : Apr 14 10:01:59 2025 GMT
        Subject: CN=8c7e10a407860c9432dd8bcf0d349f31b0e03033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:51:aa:53:31:87:46:6d:c7:7d:f6:7c:2b:3d:
                    82:72:c3:78:e7:cc:80:ec:cd:4a:a0:eb:eb:77:d8:
                    a7:65:f0:b5:f5:82:b1:38:d8:9c:b3:5d:96:b6:ad:
                    c1:ca:e1:10:e3:fa:cc:a1:f9:17:d3:2d:0f:5b:52:
                    f2:5e:56:21:8c:a5:3c:2f:bb:49:7c:e1:53:a6:71:
                    7e:b4:29:20:c5:65:71:91:f9:b8:a1:b3:bf:a2:bf:
                    5d:fc:22:9e:59:20:79:b0:97:1a:f5:e0:c9:01:01:
                    1b:fd:4f:55:a4:57:e5:15:81:ca:ad:0e:4e:2d:d4:
                    6a:0f:95:61:71:59:5e:0f:d4:07:07:22:d0:60:47:
                    a1:44:a7:b2:22:7a:d4:f3:40:a6:af:28:c5:88:6e:
                    98:04:fb:04:98:15:2a:9e:4e:65:78:84:b1:36:be:
                    a3:0d:f0:80:a8:ee:4a:1e:de:ba:93:fa:16:59:28:
                    4c:cf:9a:20:76:96:ec:79:c6:39:75:c2:5f:31:f2:
                    9c:55:3d:92:12:85:3a:58:40:45:96:7b:27:c9:4f:
                    cd:cf:7c:99:0e:90:b8:98:80:6e:4d:9a:f7:ce:06:
                    fa:67:46:38:53:7d:5d:13:ab:4b:fc:b4:b0:62:24:
                    d0:1a:28:5e:1e:56:2d:38:ed:d6:85:6a:7b:1a:e1:
                    48:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:7E:10:A4:07:86:0C:94:32:DD:8B:CF:0D:34:9F:31:B0:E0:30:33
            X509v3 Authority Key Identifier:
                keyid:6C:ED:F4:15:8A:DE:98:F1:45:7C:EC:85:89:55:62:6F:16:1D:2A:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO30FYremPFFfOyFiVVibxYdKu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c4213d-0de0-4db4-a508-822d9f855984/1/bO30FYremPFFfOyFiVVibxYdKu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:16:8a:b1:c1:b0:1f:24:4d:75:5e:9f:5c:0e:49:a1:11:c3:
         f1:e0:70:23:58:94:06:08:21:db:94:2b:70:83:04:f8:b5:76:
         e1:50:2b:99:59:03:5e:54:5b:ad:54:82:4a:31:a5:39:77:1b:
         4e:ad:51:e4:67:36:f9:1b:b9:50:37:09:1b:87:4d:59:7a:29:
         50:f4:3d:ef:9f:5c:2e:bd:d8:27:4e:d6:d0:34:7d:08:a4:93:
         b7:65:a1:fc:a4:4f:b9:88:fb:ae:3d:2d:84:b2:70:45:c5:2b:
         9c:48:40:91:97:18:a7:22:ac:e9:6d:5b:47:76:b9:92:95:3d:
         46:73:e7:95:99:90:92:8b:bb:fa:1b:3a:3e:1d:56:15:be:a6:
         83:b0:08:39:c6:50:6e:b5:2c:5a:98:c9:8a:52:44:e6:1a:11:
         8b:50:d4:14:4e:95:c0:25:86:55:aa:9b:af:a3:e4:b7:59:1e:
         4c:69:ba:fc:46:26:d3:6f:e0:74:12:b1:d2:1d:19:16:38:b1:
         bd:39:d8:c1:a7:bf:27:8a:ad:ee:96:ec:30:9d:78:95:84:99:
         a2:e1:0a:3e:58:e1:c5:9a:50:40:04:88:f2:e3:2d:75:cc:ef:
         e8:57:64:b6:09:12:3e:d4:44:36:e3:be:0b:e3:dc:2c:53:cc:
         12:e9:5a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----