Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
File:                     bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft (raw, json)
Hash identifier:          dmrs/mrqCx+KrEbcQAji+BvUDd8yH7rAaEUJSNfWNTI=
Subject key identifier:   22:FA:7A:F8:4C:9B:55:0B:C6:0D:EB:D7:9D:40:5E:64:7C:92:AA:F1
Authority key identifier: 6E:1D:8D:D3:1A:E9:E0:3A:F4:D2:6E:9D:A6:E2:DD:86:A0:30:39:A4
Certificate issuer:       /CN=6e1d8dd31ae9e03af4d26e9da6e2dd86a03039a4
Certificate serial:       01962E98F1D399BFAF85E0C7E189EC7B413A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft
Manifest number:          8F
Signing time:             Sun 13 Apr 2025 10:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:37 +0000
Files and hashes:         1: bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl (hash: vGYiyDbgKlVm7iDtHfutGw20ye3HouC9MYa3YfoMNSc=)
                          2: t2642iJ0skzQi9E6AZEwytvf8m4.roa (hash: gIPPWO03VKLt/46PvA70+sFAjblnHQu9s1qgU/4Hidk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f1:d3:99:bf:af:85:e0:c7:e1:89:ec:7b:41:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e1d8dd31ae9e03af4d26e9da6e2dd86a03039a4
        Validity
            Not Before: Apr 13 10:01:37 2025 GMT
            Not After : Apr 14 10:01:37 2025 GMT
        Subject: CN=22fa7af84c9b550bc60debd79d405e647c92aaf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:de:c5:79:69:57:2d:04:5b:7d:f5:09:d9:21:
                    81:93:70:e8:ba:e9:a2:e6:e0:d4:d1:48:83:40:1a:
                    2e:ba:37:fd:7f:8c:76:24:a8:1e:be:26:aa:fe:38:
                    3d:ff:8b:ea:e0:7f:43:99:13:1d:34:01:5f:da:7f:
                    d2:92:fb:b9:2d:e2:8c:7d:e8:b8:d9:c1:d4:b0:06:
                    3b:54:90:bd:ed:f5:2e:ce:18:ed:b8:c2:86:d2:30:
                    fd:4d:4c:92:e7:76:71:7a:d4:dd:1b:73:f1:fc:f2:
                    3a:dd:a4:49:46:48:51:d7:21:ac:c1:56:72:86:18:
                    5f:cf:0d:52:a4:ef:f8:62:0c:9c:1b:d2:73:e1:92:
                    9b:3c:00:62:bd:dd:2d:11:8a:ea:45:ff:02:d8:7e:
                    cc:19:6c:05:a5:3e:2e:da:06:6d:f1:72:21:bb:45:
                    63:d3:74:dd:54:3d:ce:a4:dc:29:99:03:4e:be:8e:
                    0d:b9:93:89:e4:ec:66:eb:71:3c:1c:e5:a9:29:08:
                    30:3e:c8:e1:d5:84:0f:a6:83:6b:51:c8:ac:ca:8a:
                    3a:e7:ff:e5:87:70:6b:6e:08:31:7f:34:17:4e:44:
                    62:9c:94:29:63:84:26:7f:21:94:e1:68:6b:18:49:
                    ed:95:40:a3:c2:d6:ae:67:15:81:d8:28:08:b7:06:
                    d5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:FA:7A:F8:4C:9B:55:0B:C6:0D:EB:D7:9D:40:5E:64:7C:92:AA:F1
            X509v3 Authority Key Identifier:
                keyid:6E:1D:8D:D3:1A:E9:E0:3A:F4:D2:6E:9D:A6:E2:DD:86:A0:30:39:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a269aa-c9bf-42c1-ade3-ed85ce094a87/1/bh2N0xrp4Dr00m6dpuLdhqAwOaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:7d:f6:9f:42:82:18:59:30:ee:c8:3d:66:64:c4:d7:da:b7:
         e9:2c:02:00:94:f0:a2:98:41:c0:dd:d2:36:a4:f3:b6:10:76:
         12:33:61:7c:1a:42:85:a4:fb:e6:d8:c8:1d:49:39:e8:32:33:
         7e:0a:4c:04:66:69:19:1e:68:c2:bf:b0:5e:af:86:92:41:88:
         38:87:60:d3:36:8f:d8:10:3c:68:f7:53:ac:ba:a9:b5:cb:29:
         6c:e4:10:12:ee:f4:d8:7c:da:97:1a:17:60:df:be:fb:b1:d2:
         2e:e0:c3:ce:89:b4:97:0d:e2:d5:3f:53:46:fb:fa:09:f2:e8:
         f5:44:2a:c1:85:9d:a8:f6:da:e8:a0:a1:d1:56:4f:15:ad:32:
         ff:4e:c9:45:06:a6:a5:1b:00:6b:8f:c7:05:43:e1:ca:81:e8:
         e4:81:5d:10:7a:0b:4a:72:25:90:3d:34:2e:60:7e:da:50:33:
         5a:8f:90:8c:7f:fe:7b:a0:53:26:18:42:e8:bd:9c:59:81:43:
         77:56:af:cf:e1:53:5f:ad:c6:f5:74:4a:40:14:ee:1b:bc:0c:
         6b:f3:e8:dd:7d:88:b8:7d:06:f0:98:7c:94:78:29:a2:35:10:
         17:16:a1:91:cf:16:41:86:b7:af:37:0f:6a:d6:84:4e:5d:fa:
         c3:4f:19:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----