Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
File:                     bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft (raw, json)
Hash identifier:          ctIFpWpYjo7LFYJZeknSoN0Prig3ZTb3x760O1n7dOQ=
Subject key identifier:   57:61:85:BF:4F:31:BB:D4:E5:5B:11:A5:92:15:E1:52:33:8A:10:EF
Authority key identifier: 6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35
Certificate issuer:       /CN=6d088cef28e02af7d00f297816c55f8e3c43d535
Certificate serial:       01962F74555FDCBE6EE866030A6213E80630
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft
Manifest number:          07ED
Signing time:             Sun 13 Apr 2025 14:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:15 +0000
Files and hashes:         1: EEK5h733GgwCs0WLVpqLrGo9ZG0.roa (hash: N2crl3QJ7UnqksAKF6ONENjAw+MlaZ++wJWtHpcZCCo=)
                          2: EeRJfPRF7a3wwh-vbetINiCYobw.roa (hash: OhoqMaZazc1P2Azp0jTNViTiYycEgII0m+//TdrzOFM=)
                          3: J8OV6sWb08R90TMyBueJQSzBQfs.roa (hash: kHoZa6hyYf5NS9P0kFkvBZ2kHqlOD6SQE3IhW/5skoU=)
                          4: L-zAQKQylAwMOWOD8KogBSnuStI.roa (hash: BIslxPlAV+Qa2N9u4A+l71nINfewXHqfB8ShkpyQ/fE=)
                          5: Tr2lFtVHl_6azdLf4MhlzHjBXeI.roa (hash: TNlarbzWV21tOljiHNGKSTQFIJSJA906zY/LVf//P2c=)
                          6: URtx2Qs2hmoNbexNjDCH87s_d7U.roa (hash: aGVY4s+OAba7NfmkmxPvmFp/W9HemkPnjycLftzsaqw=)
                          7: X2rACUC1DNfg5wWXCDcFu7ZLgEw.roa (hash: g7h8t2fvA2uFR3cdj4CAvCvbd9J1/DKm+OiMSTwzs84=)
                          8: aEYrq5OTszYCkrQCOg6UNIZ4ixg.roa (hash: NnX8w21s85sec40Tib0/WU4IMC7GCNy++WkrtuMHZBQ=)
                          9: b9VdPpDdBNcdj9AHIrIZzSw6ufI.roa (hash: CbCURFE9hdZB2JAB/+EmF2z3GhY68Qqk8qinRoqy/Rw=)
                          10: bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl (hash: A6Qht4/8R4wRS3iG30Fmaj6/pES9uZFBFsMryjqntec=)
                          11: iDTqLQGlZf0o0g616HIqRtwNiYs.roa (hash: TywFJSy0+ByfjWm+cngApzau6nnLlHrdsw/oJofNjeY=)
                          12: ppb7zwfGhsGHXV4qIGbEGzExlww.roa (hash: rrX4uS4Q47f8xCuszkUdxiXV8rHUapmYAN7FcML9vnU=)
                          13: rQMc8tlbD24MLedawDrFjbFwrbU.roa (hash: 96Ec+H4X1QQDrOAwkuHuDNv0NdIpnRkAMRD5A4fFZtA=)
                          14: tryiJsr_1C6Wl6lmV6_fRxv9JpU.roa (hash: p0acgkVQIk/SEvXPYgI9n2gjSFwqTpydiov8yUCFYeQ=)
                          15: yc556VZRN51TX5Opo32pMpmaqyc.roa (hash: JUEUgIf6cuFn4ydX3ZXU1bMUG5S/hNysKafNtqmmPcs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:55:5f:dc:be:6e:e8:66:03:0a:62:13:e8:06:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d088cef28e02af7d00f297816c55f8e3c43d535
        Validity
            Not Before: Apr 13 14:01:15 2025 GMT
            Not After : Apr 14 14:01:15 2025 GMT
        Subject: CN=576185bf4f31bbd4e55b11a59215e152338a10ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:15:c2:57:78:6f:b4:b2:95:ba:7f:06:77:e2:
                    6c:41:86:8e:aa:70:30:78:79:c4:9f:9a:bc:fd:06:
                    e3:1b:f4:82:36:c1:69:4f:63:ac:d6:cb:ce:78:b8:
                    4a:58:d1:f8:fa:aa:f6:7a:9e:dd:8e:a3:6a:22:86:
                    4f:f1:57:1f:8f:9f:2c:28:64:f3:06:9a:32:3a:dd:
                    c1:08:4a:5a:58:ae:8a:64:1f:2c:c2:a2:1c:a9:4b:
                    d0:df:d1:f6:1c:d6:80:a4:fc:42:3a:f5:36:9a:36:
                    6f:9a:fa:ad:e2:22:77:1e:99:a8:a1:f6:e2:11:ea:
                    1c:74:9c:25:b7:f6:05:3b:d6:06:66:46:c2:cb:6a:
                    ab:90:e6:57:c9:3e:91:ee:52:d3:34:5b:1a:e4:64:
                    79:12:01:cb:5e:db:fd:e3:4f:9f:87:52:26:b9:88:
                    7d:bd:ab:af:75:ad:60:5e:c5:46:5d:99:e1:79:9d:
                    f1:bd:07:87:57:16:04:d8:93:e0:c6:aa:19:45:c1:
                    e9:b9:11:8f:86:d2:b3:af:ad:bf:d9:c1:4a:c5:b6:
                    3c:81:f3:66:74:ff:17:fa:ed:53:ce:ab:fb:b4:94:
                    93:75:25:11:3d:da:74:48:73:6a:b1:64:7f:5e:5f:
                    a2:1e:d5:62:4a:9a:fb:47:5c:20:e3:c2:f6:a1:43:
                    f7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:61:85:BF:4F:31:BB:D4:E5:5B:11:A5:92:15:E1:52:33:8A:10:EF
            X509v3 Authority Key Identifier:
                keyid:6D:08:8C:EF:28:E0:2A:F7:D0:0F:29:78:16:C5:5F:8E:3C:43:D5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQiM7yjgKvfQDyl4FsVfjjxD1TU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d57a64-bd32-4c91-be06-fee8eaf73b0d/1/bQiM7yjgKvfQDyl4FsVfjjxD1TU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ed:e0:8c:67:d2:63:49:f2:65:31:4d:e3:20:7d:42:16:57:
         a2:ae:9c:a5:cd:7a:b3:32:e9:0e:d1:d1:f5:10:f5:0c:36:6d:
         b3:ba:ef:fd:14:ff:f9:77:23:f7:a8:c6:63:da:5b:5b:af:99:
         d9:13:5b:86:ec:90:bf:b5:f8:96:f7:d8:ef:1d:83:a7:46:37:
         4a:be:20:86:f9:c2:3d:56:8c:84:e5:18:d2:ac:1b:64:3b:d0:
         48:4f:80:c2:16:d6:61:6e:54:dc:6c:63:02:bd:95:d0:95:d8:
         a7:22:7b:d6:ff:62:eb:d7:4e:9a:42:7b:a7:d1:2c:52:72:51:
         e6:bd:2f:d4:ca:35:f1:f4:05:c2:f1:32:7b:9e:07:6a:94:74:
         d5:ed:40:39:2f:13:be:74:47:9e:4a:79:5e:69:f2:71:1e:7c:
         ef:ca:9c:be:9d:7e:b5:d1:a1:cb:1d:8d:ab:78:48:a0:98:6b:
         a6:ed:ea:fa:1a:bf:60:a2:46:5a:71:4b:00:6f:87:99:d2:a8:
         74:19:42:a4:50:53:00:de:36:77:0b:12:d0:c1:e0:b4:1d:b9:
         eb:c8:0d:45:01:8c:dd:de:7d:fd:6d:1e:fb:1f:7a:4a:fe:c0:
         35:25:a1:16:5f:e7:e0:a2:9b:42:0c:f8:48:fc:39:07:5b:61:
         72:e7:8b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----