Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
File:                     bws2ahNvj8xd9SPI1G95B5HBs7s.mft (raw, json)
Hash identifier:          cc0lINDyiJFCbPAL8izS7zb+qwnzzCxYzpyHdVAOpSg=
Subject key identifier:   66:7A:E8:76:CC:70:6C:58:69:9C:7C:E6:03:4A:41:12:B5:3E:46:E3
Authority key identifier: 6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB
Certificate issuer:       /CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb
Certificate serial:       01962E994262FDCC40B0C93EC62CCFB5B64B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
Manifest number:          0D5D
Signing time:             Sun 13 Apr 2025 10:01:58 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:58 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:58 +0000
Files and hashes:         1: CUY45Y1KmLWjDR8KaCm8pfbWmHk.roa (hash: Wr/mH88dBzO09g3KW6jW/bHo4ew9LfQROwCNYWZRYNQ=)
                          2: bws2ahNvj8xd9SPI1G95B5HBs7s.crl (hash: ZPCdg6BPQqj7FIrQiD/296y3XdI1lsrG5ZOmXsC9JTM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:42:62:fd:cc:40:b0:c9:3e:c6:2c:cf:b5:b6:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb
        Validity
            Not Before: Apr 13 10:01:58 2025 GMT
            Not After : Apr 14 10:01:58 2025 GMT
        Subject: CN=667ae876cc706c58699c7ce6034a4112b53e46e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:65:bd:75:b1:a6:ca:50:00:05:7b:b3:84:70:
                    47:2a:05:b5:4b:8c:e3:60:40:b4:d9:6f:6c:f2:64:
                    a5:51:89:97:f7:b0:1d:a4:e8:f9:48:e4:0f:51:2e:
                    95:70:2f:56:9d:3a:e1:90:fb:92:f5:76:36:cc:c2:
                    2c:9c:4b:aa:68:04:ed:78:6e:2c:05:76:96:d6:fa:
                    9f:a9:3d:20:be:e1:bd:0d:20:98:fe:e4:a8:fb:ef:
                    98:83:ab:59:34:2b:ea:ae:0c:1c:e9:df:11:d4:e7:
                    7f:44:fe:07:ac:77:b5:4f:15:1f:23:f5:fd:f3:99:
                    0b:46:09:c4:31:f2:86:98:40:60:69:9a:75:98:c7:
                    35:c5:6b:87:c3:bb:61:95:2f:72:ec:ee:80:ab:70:
                    5c:d4:3c:d0:9d:55:e8:2f:69:a0:7b:d9:b3:6b:bd:
                    68:70:81:73:e7:24:9a:3c:db:bd:93:bc:3f:c6:cc:
                    6b:a2:2e:0b:4e:82:9b:1b:ba:f6:3b:b7:a1:a7:f1:
                    33:89:5d:62:4a:ab:5d:08:bb:a9:cd:bc:4c:40:c1:
                    2a:8f:06:9e:a3:6d:5d:01:c0:97:d0:42:a5:ab:ea:
                    c5:5a:dd:fd:e1:e5:1a:7a:1e:8f:4c:2e:07:e3:9b:
                    a6:3f:f2:ac:8e:53:d1:b4:de:25:d9:dc:71:e8:90:
                    13:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7A:E8:76:CC:70:6C:58:69:9C:7C:E6:03:4A:41:12:B5:3E:46:E3
            X509v3 Authority Key Identifier:
                keyid:6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:50:ba:a2:5c:88:da:f2:5a:2e:37:59:f2:42:6d:52:5a:0c:
         bf:f4:f3:c0:97:52:a5:71:33:2a:0f:87:dc:5a:01:77:3f:5a:
         46:84:8f:24:7b:c0:8b:bd:48:45:ea:34:7b:d2:e1:6f:fc:3a:
         7c:e3:75:cc:e4:7c:d9:e0:df:4c:4e:15:b5:a8:bb:13:7b:76:
         33:d6:7f:8b:22:97:77:85:71:04:f5:51:19:0d:4e:04:a7:b2:
         41:3c:40:ed:9f:82:8e:ec:fa:d6:4d:e4:0a:ba:3d:2d:1c:33:
         7d:a6:ee:9d:7a:c5:25:3e:da:14:34:c0:bf:63:19:31:0a:e2:
         8c:d3:0e:aa:31:0b:be:e3:3a:5d:e6:d7:73:b1:65:e7:49:0e:
         23:35:56:f0:87:1a:b5:d8:23:91:cc:3c:40:85:71:0b:84:9e:
         b7:9d:b6:60:87:6b:b1:57:e7:d2:75:ba:e6:34:2b:ac:7c:1a:
         5c:86:d1:4b:a1:a9:89:d3:35:c4:6d:00:ca:a6:9d:f3:69:98:
         8b:c8:ec:0b:11:79:e4:3e:f3:a4:ca:ea:dd:52:d9:63:ae:67:
         09:85:7a:d1:11:fc:92:3b:4c:01:79:e8:42:94:d8:fc:61:84:
         78:8f:35:f3:84:bc:0c:1b:4b:6c:9d:a6:cf:13:34:f6:07:bb:
         71:88:48:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----