Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
File:                     BADXfvnqDtKVK-L2D6067MLhaKw.mft (raw, json)
Hash identifier:          SRAvaodwtSfyWJsjUtSwNI/g1RFo3sGPe5VEmakuAcE=
Subject key identifier:   81:63:CA:B2:B0:9F:7B:65:22:2B:D8:37:B6:67:9A:E7:0C:74:CB:C8
Authority key identifier: 04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC
Certificate issuer:       /CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
Certificate serial:       01962F74F809C82C26D6C46F57A54F09DC87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft
Manifest number:          080B
Signing time:             Sun 13 Apr 2025 14:01:56 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:56 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:56 +0000
Files and hashes:         1: BADXfvnqDtKVK-L2D6067MLhaKw.crl (hash: Gt4Z2sp2nEZZM2sJ3JNb8cQwQ8IPVnt0iyYxkc4GK5Q=)
                          2: jgMTcyosgm7FIVLeAPtI1RSjhVU.roa (hash: g2bFBV/1uz4ha4E7siEdgYNeYk8szBDsVWWKSTGKJE4=)
                          3: pO3Lr4jiN61Kn49lUDVd_S0OVvM.roa (hash: mIykw56twR66Kx0cZsZgXBwa4bIpNsTJWsybM0eym2Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:f8:09:c8:2c:26:d6:c4:6f:57:a5:4f:09:dc:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0400d77ef9ea0ed2952be2f60fad3aecc2e168ac
        Validity
            Not Before: Apr 13 14:01:56 2025 GMT
            Not After : Apr 14 14:01:56 2025 GMT
        Subject: CN=8163cab2b09f7b65222bd837b6679ae70c74cbc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ab:3b:77:58:8b:c4:03:e4:59:fa:64:c4:5a:
                    d0:2e:e4:79:4e:d8:36:dc:80:07:a6:bc:93:e3:e8:
                    dd:f9:e3:b9:24:50:9e:f8:ad:28:a0:68:25:8f:e8:
                    ba:d4:0f:75:53:06:53:f4:27:53:96:80:e6:c3:3d:
                    1b:c5:9b:e5:7f:bf:c9:e3:46:2f:6b:91:a3:61:a4:
                    a9:15:80:40:c4:46:95:d8:cc:a2:80:ab:3c:71:24:
                    06:b5:3b:19:26:5d:c3:e3:94:d2:83:f8:54:81:21:
                    e7:b7:44:2f:7c:5b:b8:bb:1b:90:4e:29:36:ea:70:
                    7b:3d:06:4a:b2:9b:db:bd:20:bc:c8:bc:84:55:42:
                    d4:a4:31:22:40:24:6a:ce:0d:7f:f9:75:f1:ac:cb:
                    07:37:25:19:d3:9d:0c:fc:f5:8e:84:2f:60:ae:69:
                    fb:0c:40:45:59:41:11:58:4f:cd:3c:76:18:d5:50:
                    2f:0d:aa:a9:d2:e0:dd:15:eb:0e:60:fc:87:1a:fa:
                    16:f5:46:2b:25:23:fc:b2:66:cf:31:53:bc:40:48:
                    c2:61:fd:24:9d:52:a2:c8:27:91:13:cc:bc:11:43:
                    43:94:4b:1f:4a:18:71:94:6b:92:21:8c:d5:13:80:
                    ff:a1:67:b8:74:0d:68:1c:77:81:47:49:f2:7c:33:
                    ca:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:63:CA:B2:B0:9F:7B:65:22:2B:D8:37:B6:67:9A:E7:0C:74:CB:C8
            X509v3 Authority Key Identifier:
                keyid:04:00:D7:7E:F9:EA:0E:D2:95:2B:E2:F6:0F:AD:3A:EC:C2:E1:68:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BADXfvnqDtKVK-L2D6067MLhaKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/98c5c3-9928-4957-9448-a60138c1c046/1/BADXfvnqDtKVK-L2D6067MLhaKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:63:b6:01:d1:9e:1d:2d:04:d3:02:a5:0e:26:52:0c:fe:e6:
         64:cc:20:28:53:43:7f:d7:3f:99:cb:fb:33:cc:e3:d8:13:72:
         b9:7c:7c:90:f9:ad:53:76:3e:f7:b9:c2:ad:8d:c7:fe:38:59:
         09:4a:a2:7e:b2:d4:99:e2:76:2b:28:19:7d:19:5c:68:04:16:
         fa:cc:ff:38:3b:dc:55:e0:56:c4:33:96:84:51:43:f4:7e:60:
         fd:23:be:36:c6:5a:cb:27:58:14:45:a3:c9:55:7d:c3:a9:c0:
         79:0c:8c:80:2a:a8:76:53:12:cc:c5:11:d4:3e:8c:cc:68:6e:
         b1:50:78:b1:17:42:b0:0a:c6:7f:ca:4a:41:25:81:f6:ea:5e:
         8e:9a:f4:78:59:82:f3:eb:78:1c:a8:c2:3a:34:94:54:29:72:
         d8:4e:a9:d5:dc:89:00:cf:61:f0:b0:c1:ba:74:8c:5e:0a:bf:
         d4:60:00:9e:2e:b5:26:6f:f0:79:6e:ff:df:f3:f1:6c:90:4a:
         cb:35:64:bc:d4:35:e1:05:16:e4:c5:98:be:25:78:53:88:3d:
         47:38:8c:28:0f:b0:aa:24:87:6d:a4:81:66:4e:15:77:e4:01:
         64:a9:3c:18:84:b8:9f:72:e3:ad:96:1a:1d:cd:97:7f:be:83:
         b6:9a:18:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----