Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft
File:                     bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft (raw, json)
Hash identifier:          BJX3thLDgI0kZoVpc2k+j5QA0nDBYLXxgaVtwi9TrfM=
Subject key identifier:   CB:0E:FA:9C:3E:D4:E2:C8:9F:34:70:69:81:68:58:FF:9F:18:5C:C5
Authority key identifier: 6C:95:FD:CA:36:7B:CE:19:E2:F2:53:B7:8F:36:08:FF:34:14:28:C9
Certificate issuer:       /CN=6c95fdca367bce19e2f253b78f3608ff341428c9
Certificate serial:       01962F74FDF57F2E386AFEA96DDBDDE57188
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bJX9yjZ7zhni8lO3jzYI_zQUKMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft
Manifest number:          B5
Signing time:             Sun 13 Apr 2025 14:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:58 +0000
Files and hashes:         1: Lf1xzTXAc6SiNDJtIVl8iWMf5b4.roa (hash: Mlu5t33KkThbOioHblpilqA5fDGAJvYvW4onNzjvD5s=)
                          2: bJX9yjZ7zhni8lO3jzYI_zQUKMk.crl (hash: PYzJgW+OS84DzWmv9itzgWqa66K5emRChRtdvToQfMQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:fd:f5:7f:2e:38:6a:fe:a9:6d:db:dd:e5:71:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c95fdca367bce19e2f253b78f3608ff341428c9
        Validity
            Not Before: Apr 13 14:01:58 2025 GMT
            Not After : Apr 14 14:01:58 2025 GMT
        Subject: CN=cb0efa9c3ed4e2c89f347069816858ff9f185cc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b8:7c:b5:16:3f:ac:ef:c5:46:74:6e:07:95:
                    e4:59:bf:0c:30:d6:bb:77:34:10:44:9e:68:4d:e8:
                    0c:ff:97:ac:9c:96:66:47:f9:61:21:15:9b:3c:3d:
                    68:97:b4:e3:c0:79:fa:e9:41:44:39:1d:1a:70:09:
                    93:3b:91:14:06:c1:74:51:09:5f:9f:f0:f4:eb:17:
                    17:f8:08:f1:e4:95:17:93:85:a6:55:dd:09:03:43:
                    23:d4:bd:96:24:19:68:18:a2:ba:d4:cf:ac:9c:34:
                    3b:fa:65:d5:81:ec:74:ea:98:3f:4b:62:99:e4:98:
                    f8:72:40:78:d5:7c:75:e5:60:bb:47:ba:98:9f:ba:
                    ce:57:d8:e4:cb:7b:26:b0:d7:dd:77:56:54:83:ba:
                    26:54:9d:a8:da:09:c1:e8:42:22:3c:ab:37:87:37:
                    fa:04:a6:5e:c9:8f:13:50:a7:35:86:38:ff:50:4d:
                    19:ff:bc:b4:70:d0:2c:d8:e1:c0:7c:a6:a2:77:5d:
                    10:92:e9:5e:f8:c2:92:64:51:ba:c8:6b:0f:57:7f:
                    82:41:fb:61:25:53:86:8c:dd:7d:71:be:95:b8:9f:
                    2d:02:19:9d:67:03:00:c4:e9:6c:01:af:66:7f:a3:
                    c7:16:d7:70:0a:4e:27:89:1b:1c:d2:ab:a7:5a:9d:
                    30:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:0E:FA:9C:3E:D4:E2:C8:9F:34:70:69:81:68:58:FF:9F:18:5C:C5
            X509v3 Authority Key Identifier:
                keyid:6C:95:FD:CA:36:7B:CE:19:E2:F2:53:B7:8F:36:08:FF:34:14:28:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJX9yjZ7zhni8lO3jzYI_zQUKMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:e3:f2:4f:07:2a:16:f9:cb:e4:8a:24:bc:aa:80:ba:eb:92:
         67:08:f2:92:75:ea:0d:bf:aa:39:22:91:e9:ba:f6:57:b7:4d:
         f0:00:7f:51:31:53:28:70:cf:32:36:28:33:1c:7d:d6:7a:ca:
         f5:42:60:15:31:6c:e0:44:f3:c2:2a:27:ef:a8:32:c9:06:bd:
         cf:23:96:9f:8a:35:83:bd:69:83:56:4a:82:59:72:64:a8:6b:
         1c:2f:a8:9f:64:f0:4f:98:ea:d3:5b:9c:aa:dc:13:61:6f:31:
         d7:91:d1:ff:65:3f:d7:a2:a5:bf:14:45:3d:4a:9a:cc:db:0f:
         82:99:f8:83:f0:14:02:2e:39:f3:46:46:45:a0:9e:1e:f6:1e:
         63:e8:88:44:25:c5:00:f5:41:ed:34:9e:b4:fd:0c:53:d8:26:
         46:ef:fb:a6:b4:64:ef:2d:77:ed:e5:de:70:ec:84:af:0d:ac:
         52:16:a5:64:9c:cf:3d:42:d2:aa:e0:3c:6b:53:37:f6:c3:c7:
         d0:00:d2:46:5d:94:69:1a:e2:41:fd:48:a4:15:ae:75:4d:f3:
         af:68:0c:78:8a:1d:9a:c7:b9:a0:2b:73:b1:d6:32:04:60:e7:
         ab:f0:73:ac:43:cd:28:ef:ca:e9:19:2e:37:ac:d9:97:49:ef:
         39:d5:14:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----