Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
File:                     bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft (raw, json)
Hash identifier:          IoQSxvN61NDCbbytVeNBgIgiX3QdwY8m11FsvQQPi1E=
Subject key identifier:   B3:40:37:70:AB:2B:25:8C:53:14:E4:BA:D9:F3:1A:5F:D3:23:89:38
Authority key identifier: 6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6
Certificate issuer:       /CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6
Certificate serial:       01962F742960D99B8A3745FA45F1EE93F65A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft
Manifest number:          029B
Signing time:             Sun 13 Apr 2025 14:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:03 +0000
Files and hashes:         1: L9Z2nBuUYrQISK7NL514VgxVG3M.roa (hash: EYXtLvAFnvPlybFtRX2gRTh4fJad12faTUZ9Z5qawVM=)
                          2: bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl (hash: 142fKmUjuPjVqqNHbL4LWEwWVMkOu8FP0aJU6eFUFMY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:29:60:d9:9b:8a:37:45:fa:45:f1:ee:93:f6:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ec392f83e38f92a5d6f3b7a64b36f8c4b3509e6
        Validity
            Not Before: Apr 13 14:01:03 2025 GMT
            Not After : Apr 14 14:01:03 2025 GMT
        Subject: CN=b3403770ab2b258c5314e4bad9f31a5fd3238938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5f:5c:b1:b0:85:82:f8:7e:cc:f7:1c:a9:2c:
                    c4:66:2e:31:01:b0:bc:9a:aa:4c:39:cf:6e:7d:b1:
                    d3:31:4d:1b:f2:cf:55:65:2f:ce:dd:27:1f:7a:5c:
                    34:35:4c:7e:ad:e0:5c:69:f1:3c:95:55:4c:c1:e1:
                    d1:35:19:74:0d:2c:8f:eb:c9:9b:bc:6d:5b:2b:79:
                    4d:a0:8d:49:f3:8a:40:5c:fa:8a:31:39:36:b4:0c:
                    8f:e3:ed:0e:f0:55:93:ef:93:57:47:8e:50:28:e1:
                    69:c5:8e:a5:fc:98:e0:95:99:c5:7d:b1:c2:98:c4:
                    c8:22:c0:7f:1f:08:91:e3:48:0e:e2:72:7b:af:06:
                    93:a1:e8:2b:f2:77:6a:01:42:af:4c:66:9c:39:69:
                    3e:ec:02:11:50:00:fe:20:0c:a6:dc:fc:7a:b8:f2:
                    bf:57:38:74:29:d6:20:94:32:ba:9e:3c:ff:f6:1a:
                    51:40:6d:68:c7:41:52:43:14:b9:ed:97:9a:ed:60:
                    3f:e3:58:53:08:34:b1:fd:69:ce:2e:75:05:8b:03:
                    fd:1e:b5:19:58:9b:24:cb:cd:ca:56:1b:00:55:c6:
                    3b:cc:22:b8:7d:85:d8:7b:7a:8c:56:d1:12:64:d0:
                    f2:c2:f4:cc:ff:bb:79:0a:e7:f9:29:36:f9:af:09:
                    6e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:40:37:70:AB:2B:25:8C:53:14:E4:BA:D9:F3:1A:5F:D3:23:89:38
            X509v3 Authority Key Identifier:
                keyid:6E:C3:92:F8:3E:38:F9:2A:5D:6F:3B:7A:64:B3:6F:8C:4B:35:09:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsOS-D44-Spdbzt6ZLNvjEs1CeY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d6de9f-30c6-46a5-84d1-8d15569b5bfe/1/bsOS-D44-Spdbzt6ZLNvjEs1CeY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:8f:d2:40:02:a4:9b:94:f5:51:d3:1e:57:52:95:13:2a:0d:
         db:ea:71:60:c9:83:84:7d:61:ab:4d:dd:61:16:5d:b5:71:3f:
         56:93:fe:1b:a0:47:85:56:19:39:09:ba:19:72:58:ec:73:6f:
         08:06:1f:1e:cd:dd:57:3e:df:4b:cb:ff:4a:c8:7d:e2:74:c9:
         a4:15:0e:02:20:51:7d:3c:b6:7e:91:63:d8:13:e8:fc:ee:f2:
         55:75:b3:78:78:3e:1b:12:bb:1a:ed:38:f3:d3:95:b7:f4:43:
         cc:07:10:3f:f2:cd:73:c4:ca:eb:d9:c8:60:10:9d:8c:7c:83:
         6f:da:01:92:77:ec:28:0f:7e:0f:32:d1:b5:13:85:40:08:e9:
         df:07:b5:59:2a:cf:e8:fd:37:68:48:2b:a7:aa:f4:4f:15:47:
         5e:40:44:63:63:50:9b:81:96:4b:7d:14:81:f1:52:89:53:16:
         0e:8b:1f:eb:d2:7a:92:19:56:bb:86:97:76:92:0e:af:56:8c:
         0b:57:53:41:76:4a:a7:16:d6:61:68:48:cf:9b:e1:3a:12:45:
         ee:2e:bb:00:78:4a:bd:2a:60:f9:ec:f4:cf:34:c2:54:ec:22:
         7a:ae:18:e4:b0:fb:2e:ae:51:95:0b:c7:a6:db:94:69:1d:7a:
         e2:4f:c7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----