Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
File:                     bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft (raw, json)
Hash identifier:          6edISr6cajpugEVlA/xU91x8qQ+ylBhoeBKhd9rW378=
Subject key identifier:   9B:BB:63:65:7A:A0:5C:25:00:AA:D5:E0:B0:AB:1E:73:9A:54:9D:97
Authority key identifier: 6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D
Certificate issuer:       /CN=6d65fe055fb7ed043d109307045c0abdf404d05d
Certificate serial:       01962F06D20D3880C273733059D3EE4BD985
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft
Manifest number:          0BCA
Signing time:             Sun 13 Apr 2025 12:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:38 +0000
Files and hashes:         1: CNEWTRKouN1ztdllhCMhjhdKKHg.roa (hash: aqhxq+qj3sPvgTV0jZeMkrVOr4/8ei7UkGfqQsH5Ljo=)
                          2: bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl (hash: MyqQ3GLZq3zD5QurmrS0gghMj+EMXCGI9ufyTO9fDFs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:d2:0d:38:80:c2:73:73:30:59:d3:ee:4b:d9:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d65fe055fb7ed043d109307045c0abdf404d05d
        Validity
            Not Before: Apr 13 12:01:38 2025 GMT
            Not After : Apr 14 12:01:38 2025 GMT
        Subject: CN=9bbb63657aa05c2500aad5e0b0ab1e739a549d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:51:07:45:4d:0a:7c:78:24:89:2b:bc:b7:84:
                    72:f1:bc:27:8e:3e:6a:be:d0:cc:61:f2:83:4a:ad:
                    d5:a0:66:30:5b:de:be:aa:84:d9:28:4c:da:e6:9a:
                    3a:f8:88:51:93:c3:1b:c8:61:25:5a:92:05:b9:65:
                    f3:2a:3d:3c:39:ef:3d:a5:c8:2f:a3:79:9a:de:6f:
                    bd:66:fe:57:9e:f5:1c:e7:5a:5c:29:58:96:21:f7:
                    7b:9d:33:bc:12:17:86:33:58:09:3c:f0:c3:c8:b5:
                    4f:0e:c8:32:4e:65:48:82:76:38:00:9d:9f:51:99:
                    82:74:18:10:df:4b:a2:f9:a3:8a:49:89:fe:6b:21:
                    69:3f:5f:9d:6f:70:c0:7e:ff:4b:7d:c4:63:06:f2:
                    2d:79:98:29:63:3c:2b:d9:a2:ea:41:03:82:c3:01:
                    fc:50:66:b8:9f:54:21:d3:90:b8:b7:46:f6:37:6e:
                    cd:c7:28:cd:55:c9:13:9e:dd:b3:71:d4:34:da:a2:
                    55:35:18:0d:69:da:a1:02:7b:7b:1f:db:f6:67:5d:
                    55:41:81:6d:ee:d1:d6:e2:84:98:4b:93:f2:38:9b:
                    35:e8:0d:cb:51:b9:98:fd:5e:37:3d:cd:d3:23:2f:
                    b2:fc:33:2d:e5:0f:a8:fe:b2:6c:d7:14:22:8a:11:
                    2c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BB:63:65:7A:A0:5C:25:00:AA:D5:E0:B0:AB:1E:73:9A:54:9D:97
            X509v3 Authority Key Identifier:
                keyid:6D:65:FE:05:5F:B7:ED:04:3D:10:93:07:04:5C:0A:BD:F4:04:D0:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWX-BV-37QQ9EJMHBFwKvfQE0F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/f60798-3202-484b-8640-1b749e9810b4/1/bWX-BV-37QQ9EJMHBFwKvfQE0F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:eb:e9:a4:e9:0b:c8:1a:00:d4:b6:33:66:dd:92:de:75:3b:
         1f:02:40:d2:47:12:fb:80:f9:de:f1:78:e3:f1:32:0f:a2:1e:
         30:88:59:03:e0:1c:f0:a5:01:61:2c:a9:63:a8:9e:f1:87:6a:
         cd:37:b4:17:18:d0:3c:9b:4e:49:3b:b6:23:8d:29:f5:f3:f5:
         0c:bd:95:ec:ae:d9:5e:66:b8:41:30:2b:52:8f:31:10:5e:72:
         f2:57:e4:b9:e9:90:05:b9:ef:b5:51:2a:f5:04:9e:67:7f:6f:
         df:6d:c0:55:e0:59:e9:73:99:51:7d:d5:bd:33:c3:b6:fa:99:
         4b:34:7f:3b:f4:85:20:44:d8:6d:73:d9:9c:3d:43:b9:17:36:
         27:43:57:03:92:98:d0:76:0b:b2:d4:6f:6d:16:72:d0:7c:a1:
         ef:96:85:e6:13:22:8d:b0:28:16:39:7a:94:44:8c:1d:64:f6:
         99:36:37:7f:c5:cb:de:5f:36:cc:95:5f:24:eb:f1:bd:f1:3f:
         e1:3a:56:f7:a9:79:d4:04:70:b0:45:fc:2b:27:20:82:5d:82:
         84:3d:09:b8:1a:6f:dd:eb:02:e4:ca:6d:4e:4e:29:05:bd:e2:
         de:cc:a1:98:c0:98:39:36:68:82:4a:a8:74:77:10:32:9c:2d:
         38:29:aa:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----