Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
File:                     bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft (raw, json)
Hash identifier:          eSqj88TKjaeYZ+G0++5rqeU2tFuDAVqdfY4PPWjIVDU=
Subject key identifier:   B3:68:5D:DE:BC:F2:51:B1:F7:93:64:92:C2:38:3F:83:CF:73:43:99
Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
Certificate issuer:       /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Certificate serial:       01962F74C1619C6AC7093D672956CCCB1ED2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
Manifest number:          12CF
Signing time:             Sun 13 Apr 2025 14:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:42 +0000
Files and hashes:         1: 4fkynkxl95431dIe-ABsA7v5RCg.roa (hash: EGfFvZoQzCGUyDaxbnd+O3QTAMwiWmSgrk3gdk+vKlc=)
                          2: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl (hash: 5KBwZE17xylot3wBl2MtdEdIUsu9aCSLdW13AJs/xpI=)
                          3: lgA3OzlgN5mO-phBlXIn8VKgG_E.roa (hash: FrDJm2Vh5IZpvHu6Ip1jtuiPOr7jqRjxluv8XgGr48o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c1:61:9c:6a:c7:09:3d:67:29:56:cc:cb:1e:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
        Validity
            Not Before: Apr 13 14:01:42 2025 GMT
            Not After : Apr 14 14:01:42 2025 GMT
        Subject: CN=b3685ddebcf251b1f7936492c2383f83cf734399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:aa:61:9c:d6:09:c6:da:07:15:95:15:be:79:
                    72:85:38:3f:5d:21:0d:e9:5c:36:c8:c0:45:c5:9b:
                    ad:ed:6e:fc:a4:36:f1:8f:87:69:92:b7:2f:14:85:
                    27:26:7c:db:6f:52:ca:da:b2:9a:31:fc:aa:ef:f5:
                    91:64:cc:42:5b:3f:d5:ed:af:48:ba:8a:6f:60:52:
                    07:18:4b:12:4a:4b:1e:2d:16:f5:02:c5:1d:5a:33:
                    d0:99:2d:b9:c2:f4:45:c3:00:f0:83:18:4f:11:59:
                    60:11:07:41:4f:10:fd:42:28:a6:3e:84:7a:3b:b5:
                    47:d6:17:70:eb:22:fe:0e:7b:55:fd:5c:64:7c:83:
                    da:9e:2b:b5:67:18:b6:aa:80:1c:ea:66:43:13:73:
                    b0:11:54:c8:86:16:14:ea:93:bd:5e:e3:06:50:ca:
                    40:89:13:80:9f:d2:db:cd:ea:62:55:9a:fb:ed:7f:
                    87:05:41:bd:5a:2e:69:0e:30:bf:02:2b:19:7d:98:
                    93:f2:b3:fc:9d:47:d0:27:c1:0c:a9:de:66:49:7e:
                    26:53:04:56:6d:d9:52:f9:4f:a0:cf:ee:ed:9a:d6:
                    6a:e9:24:8d:6a:36:9b:3c:32:40:c5:1d:2e:f1:ed:
                    37:98:d4:fa:d5:00:e7:8d:d5:7a:8b:5b:78:c5:70:
                    d5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:68:5D:DE:BC:F2:51:B1:F7:93:64:92:C2:38:3F:83:CF:73:43:99
            X509v3 Authority Key Identifier:
                keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:5c:8a:1f:3a:45:5d:a0:f2:8d:50:40:19:40:d1:61:79:ab:
         e3:38:1a:39:28:9d:50:40:16:84:15:ca:36:a0:19:ed:c2:1e:
         85:45:e0:45:5e:d1:99:8c:a5:d9:ac:c6:af:26:75:4b:53:07:
         30:05:f7:15:8e:f0:c7:9b:22:09:8d:e9:43:d2:e8:33:cd:ed:
         59:92:79:cf:d4:ae:26:bc:b9:17:e3:ce:c4:69:2a:ec:45:a7:
         b5:7c:70:9d:12:77:6b:59:fb:4c:58:0f:ed:fb:1a:e2:a1:2d:
         b6:7e:62:38:8d:a9:52:9c:91:50:bd:57:0c:e3:b5:10:cd:ca:
         48:41:de:3f:b0:2f:9e:e6:d0:6d:db:0a:30:8d:5d:7e:3d:95:
         d6:02:7e:d6:3a:da:73:e8:02:2f:5a:31:67:4f:0b:ec:cc:dd:
         ad:d7:a8:8f:81:83:03:7e:d5:1b:b7:30:c9:56:39:17:a6:d4:
         93:10:df:66:74:b0:67:39:5a:8a:33:ce:62:6d:da:92:28:ea:
         87:fe:a0:cc:94:7f:f1:09:01:67:cd:13:dd:6d:78:84:5f:fe:
         26:1f:e0:0d:30:a5:b7:6d:ae:a9:3c:1d:b2:9f:45:76:80:ec:
         b6:a3:89:0a:b5:d6:09:81:57:be:05:d2:49:6c:21:a4:ef:5d:
         ba:8c:7a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----