Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
File:                     bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft (raw, json)
Hash identifier:          lVKf+K0Sr2i8SoG9TQHFM3kPm1aQacJN1x6DdN+ekTg=
Subject key identifier:   83:BC:87:12:6F:86:13:90:0F:78:0E:4C:E6:6A:90:17:E5:0E:1B:05
Authority key identifier: 6E:3E:C9:72:F9:76:0B:85:5F:1D:43:90:BC:37:5B:3F:A3:D4:11:B6
Certificate issuer:       /CN=6e3ec972f9760b855f1d4390bc375b3fa3d411b6
Certificate serial:       01962E61ABF282F3C3FE46ED49802EF3299A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:15 +0000
Files and hashes:         1: bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl (hash: R7W7B/QMmFSNGP1Z7yiQFuXJfWuOX0Lw6TmBWaByxH8=)
                          2: dT_nuVNPNVy7zap0s-GlTGbCJFQ.roa (hash: 2ckePt60vTr0Jaf/aV6ugqWUeBibjAZagoTGX9Ra3Qc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ab:f2:82:f3:c3:fe:46:ed:49:80:2e:f3:29:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e3ec972f9760b855f1d4390bc375b3fa3d411b6
        Validity
            Not Before: Apr 13 09:01:15 2025 GMT
            Not After : Apr 14 09:01:15 2025 GMT
        Subject: CN=83bc87126f8613900f780e4ce66a9017e50e1b05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:51:76:c0:41:14:48:41:af:ca:54:c2:a6:1b:
                    63:de:f0:30:df:3a:7a:51:0d:57:86:98:a4:c3:04:
                    73:d3:de:96:c4:fb:a8:da:c1:4d:95:3f:83:33:4b:
                    8f:83:74:87:34:77:80:b7:ae:1b:51:99:ce:13:fb:
                    e5:69:a4:5b:4a:e2:21:e7:81:06:24:19:b6:68:27:
                    78:53:33:76:f8:ec:3c:5f:18:49:e1:ee:4f:c5:df:
                    a6:8a:7f:b7:bf:ed:1d:0a:ec:a6:21:0d:80:94:b0:
                    89:93:b4:07:7d:6f:d4:0e:db:d6:8a:0e:e9:3b:e2:
                    b4:64:eb:a9:be:c8:43:fd:3b:14:6f:04:1c:44:99:
                    82:8b:11:7a:9a:fc:6a:8f:22:23:51:2f:ce:33:86:
                    6b:15:51:53:75:1d:39:20:c6:76:ae:ed:b7:20:05:
                    07:f9:a0:09:3b:10:86:1f:f2:34:47:3e:98:7e:87:
                    45:ab:50:67:57:b2:ef:24:4a:06:24:75:d6:ed:f7:
                    22:2f:d6:de:54:7d:2a:a8:f5:59:52:78:fe:95:93:
                    4b:bb:e0:60:de:07:cf:b6:cf:08:3a:b5:41:f3:8b:
                    e3:d9:35:7f:d2:28:2c:55:b4:31:e2:81:cd:7f:51:
                    06:47:51:3a:48:a8:5d:ce:a2:5a:e1:e6:14:0c:97:
                    cc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BC:87:12:6F:86:13:90:0F:78:0E:4C:E6:6A:90:17:E5:0E:1B:05
            X509v3 Authority Key Identifier:
                keyid:6E:3E:C9:72:F9:76:0B:85:5F:1D:43:90:BC:37:5B:3F:A3:D4:11:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:bf:60:cc:6c:59:8f:3b:80:2b:4c:40:1a:68:c9:5d:ff:6f:
         d0:ac:dc:4b:1a:57:43:e0:f2:7d:7b:55:70:01:a3:f0:72:67:
         75:a8:0d:34:63:de:b4:4b:e4:46:e4:fb:71:92:f2:d5:c8:6b:
         f8:d6:0f:1d:da:81:f2:93:c9:aa:01:dc:a0:ef:a8:c4:4a:e3:
         b6:05:8b:4a:ce:44:db:3e:64:f0:11:79:43:22:0c:f7:1d:c8:
         14:eb:d5:47:23:32:dc:2f:c0:15:ea:4a:c3:d7:e2:7b:69:57:
         d7:c7:57:fe:4f:b7:e3:b0:b1:9a:9b:35:f3:84:40:db:87:cb:
         f9:38:6f:01:9b:05:07:3c:0a:ee:68:41:94:df:fd:60:3b:72:
         a4:82:dd:d4:9f:dd:d2:f1:2d:71:77:b4:9a:45:57:01:3f:12:
         e8:00:49:6a:d2:b0:e8:bf:8f:3f:9c:f3:8e:a4:10:fb:75:03:
         3d:bf:4b:8d:33:3f:1a:2d:73:8e:71:19:d8:11:7a:35:8f:e2:
         e8:6c:6b:00:96:6b:5d:b6:dd:c9:30:25:d9:c2:8c:d5:13:a0:
         b1:6b:f2:36:66:94:9d:23:77:bf:28:14:fb:5d:4b:b0:60:70:
         52:02:f1:65:39:05:91:68:eb:a8:f3:c5:13:44:8e:c7:16:d7:
         a5:f7:15:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----