Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/bSID7B5abCZsyjm5rxq-LLILGVo.mft
File:                     bSID7B5abCZsyjm5rxq-LLILGVo.mft (raw, json)
Hash identifier:          MSRao0XSARUXQ0CdagYCp2gcRTVn3YI0Urt6Xn/agb8=
Subject key identifier:   BA:4D:4F:AC:D1:64:8E:54:EE:A9:04:A9:F7:47:A2:69:4B:C4:F2:B5
Authority key identifier: 6D:22:03:EC:1E:5A:6C:26:6C:CA:39:B9:AF:1A:BE:2C:B2:0B:19:5A
Certificate issuer:       /CN=6d2203ec1e5a6c266cca39b9af1abe2cb20b195a
Certificate serial:       01962E61F5259CDBD0439E0ECA3902ECE6BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bSID7B5abCZsyjm5rxq-LLILGVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/bSID7B5abCZsyjm5rxq-LLILGVo.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:33 +0000
Files and hashes:         1: bSID7B5abCZsyjm5rxq-LLILGVo.crl (hash: o7/Ln8EB9ulG6YELBfX6LbXRgzjfTRpQgy8YXcF23cQ=)
                          2: h9zvvPI2dBY4jNWQKpPxUoE047A.roa (hash: PkWglafHXDxF9KIzM61BgLg1omYPGots3ZThAKgjHP4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f5:25:9c:db:d0:43:9e:0e:ca:39:02:ec:e6:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d2203ec1e5a6c266cca39b9af1abe2cb20b195a
        Validity
            Not Before: Apr 13 09:01:33 2025 GMT
            Not After : Apr 14 09:01:33 2025 GMT
        Subject: CN=ba4d4facd1648e54eea904a9f747a2694bc4f2b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5f:03:10:73:46:70:18:69:bd:9b:18:3b:aa:
                    cd:36:4e:e2:7e:75:ad:46:6a:9d:65:b2:39:82:a9:
                    a9:6d:a3:f6:0f:84:98:46:38:b6:27:7f:3c:ef:87:
                    77:f5:57:af:db:43:97:80:b9:8d:90:06:f0:3d:33:
                    bb:60:72:8e:05:4d:53:51:6e:3e:5d:6d:c6:89:dd:
                    ca:cf:8f:c3:c5:94:cc:8f:5c:76:7c:74:5c:8a:1d:
                    d1:a2:1b:d3:ad:27:a3:64:1b:64:bb:de:85:cc:fd:
                    47:27:46:a9:69:c5:35:ac:66:5a:ad:c1:05:54:68:
                    ac:35:af:6f:02:01:c6:f2:25:9d:7b:c0:d7:9b:c6:
                    30:41:68:3b:7a:c0:95:63:05:ad:b4:5f:fa:57:34:
                    c1:e2:8c:d7:04:6e:8d:6b:61:1f:99:dc:a3:ae:c0:
                    3c:e5:00:52:b2:e4:d1:3d:58:62:a6:d0:e7:de:21:
                    4d:98:39:ff:a1:d6:76:13:ec:77:36:5d:cc:b0:fc:
                    0c:89:81:4f:6b:9e:0b:e8:78:44:c2:20:82:23:93:
                    fd:03:11:d9:05:d3:e0:8a:6a:3d:0b:8f:29:b6:2a:
                    de:d5:3c:41:1b:01:23:6a:8f:45:57:17:f6:f9:8c:
                    18:fe:4d:e2:e7:96:d1:79:12:de:f9:04:7e:76:d2:
                    4c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4D:4F:AC:D1:64:8E:54:EE:A9:04:A9:F7:47:A2:69:4B:C4:F2:B5
            X509v3 Authority Key Identifier:
                keyid:6D:22:03:EC:1E:5A:6C:26:6C:CA:39:B9:AF:1A:BE:2C:B2:0B:19:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSID7B5abCZsyjm5rxq-LLILGVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/bSID7B5abCZsyjm5rxq-LLILGVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/bSID7B5abCZsyjm5rxq-LLILGVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:89:b0:41:9a:80:53:26:51:6b:28:fe:8b:d5:12:b5:f4:ba:
         03:40:b1:fd:8c:12:64:27:65:6e:d5:17:24:33:75:cb:b8:e7:
         5c:d6:1a:85:01:5a:94:85:46:2f:7c:77:06:af:d5:07:72:9c:
         fa:90:c0:f4:2d:d2:6a:a4:83:9c:e2:e1:ae:fc:74:b8:84:42:
         e8:a1:50:29:7c:b1:50:4d:d3:8a:f8:8a:d8:de:3f:1c:06:69:
         e3:6c:67:04:d9:29:0d:d3:8b:c4:e3:5b:2f:7b:ce:c2:22:52:
         9a:da:92:e9:e6:3f:0b:66:74:52:49:97:8a:77:d7:d0:7c:44:
         3b:db:c0:b0:e8:23:11:9d:71:95:46:c6:01:ec:47:f2:0c:5a:
         e9:d0:b1:27:a5:5b:c4:86:ba:b9:0b:60:2a:9d:af:da:44:52:
         b2:4f:88:dd:99:e9:c0:9f:98:cb:e5:74:ed:b4:8b:53:5e:ed:
         72:f4:30:c3:0f:9f:3c:0e:6a:bc:18:d7:b9:93:ae:b1:a9:28:
         9d:44:b2:69:82:49:9c:f4:b7:3e:91:82:fc:a2:8c:c4:8c:5c:
         f2:41:1b:6e:e8:c2:df:d6:fc:26:e5:da:0c:27:a2:9e:9a:8f:
         eb:90:e9:55:d7:2f:55:87:b3:9d:4e:57:65:7e:f0:8f:6d:36:
         84:62:2f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----