Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft
File:                     v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft (raw, json)
Hash identifier:          gBlrs6VAtj4rLCohBwarNTrSx61aAZUHXsrKox2Rx2Y=
Subject key identifier:   B7:69:BE:59:86:7A:8F:19:A6:40:57:10:7D:BC:99:4C:50:15:C8:E6
Authority key identifier: BF:42:40:9A:1F:8C:1C:EE:59:74:DB:8A:42:E1:EB:67:2E:E8:34:36
Certificate issuer:       /CN=bf42409a1f8c1cee5974db8a42e1eb672ee83436
Certificate serial:       01962E997467F38DA327B93729FCF64AEACB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft
Manifest number:          0B89
Signing time:             Sun 13 Apr 2025 10:02:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:10 +0000
Files and hashes:         1: v0JAmh-MHO5ZdNuKQuHrZy7oNDY.crl (hash: nb9YC/j0lZNAsCOpWQYVyhnoULl1QDAcpLacaEh2oLY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:74:67:f3:8d:a3:27:b9:37:29:fc:f6:4a:ea:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf42409a1f8c1cee5974db8a42e1eb672ee83436
        Validity
            Not Before: Apr 13 10:02:10 2025 GMT
            Not After : Apr 14 10:02:10 2025 GMT
        Subject: CN=b769be59867a8f19a64057107dbc994c5015c8e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d9:e9:54:75:ab:f9:64:31:57:b5:35:f0:da:
                    f2:be:e1:12:7a:e4:2d:51:94:e6:59:a0:11:3b:88:
                    0f:d3:fd:ae:e8:e9:17:66:93:d1:a7:05:7b:7c:da:
                    e3:3c:73:a4:fe:10:3b:56:ed:89:de:c4:01:bb:05:
                    c0:50:dc:33:84:a3:f4:0e:c1:4a:d1:bf:d8:d7:0b:
                    d2:de:01:61:b4:d7:1d:42:e0:2d:f6:fa:16:40:f5:
                    80:c9:9a:48:d7:fe:07:f0:99:c2:80:7c:3d:c1:e4:
                    47:de:db:4e:9d:66:74:bb:76:b6:0a:2c:5e:1b:3c:
                    bf:6a:76:c0:80:d3:32:73:c1:9b:2d:b5:d8:af:5c:
                    78:d1:40:eb:c8:bb:16:a3:d0:12:f2:d4:8e:8d:3f:
                    23:ff:84:3a:30:dc:c0:2b:a6:f8:a3:b0:28:b2:5f:
                    83:7c:40:7a:00:43:3c:74:9d:08:42:7e:b9:49:23:
                    38:c9:be:f5:5e:5e:15:55:fe:6c:3f:d1:84:ea:94:
                    49:ca:5d:68:d8:3f:c4:87:ff:2c:f0:d6:be:a8:df:
                    cc:4c:2d:db:76:c1:9b:ab:2d:9b:3f:c7:f8:18:80:
                    e1:64:9d:df:a5:ff:8f:cc:a6:06:9c:ef:2c:af:97:
                    68:47:9d:df:bf:00:68:f3:f2:bc:02:a6:9f:2b:69:
                    07:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:69:BE:59:86:7A:8F:19:A6:40:57:10:7D:BC:99:4C:50:15:C8:E6
            X509v3 Authority Key Identifier:
                keyid:BF:42:40:9A:1F:8C:1C:EE:59:74:DB:8A:42:E1:EB:67:2E:E8:34:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/572b4a-d230-4603-8a42-a51f46bb7464/1/v0JAmh-MHO5ZdNuKQuHrZy7oNDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:dc:5b:eb:73:84:c7:2d:7b:9e:f2:05:bc:09:55:ef:9f:d8:
         c4:6d:38:e3:13:47:17:3e:60:54:71:61:d7:8b:09:15:15:08:
         4f:9a:e9:19:36:c4:ee:d6:7f:5d:22:4f:29:5e:24:8f:3a:76:
         35:5f:cb:20:17:66:d6:ec:b7:6f:6f:c2:8f:3c:60:b8:2d:5b:
         2b:30:0a:24:8f:f7:ca:4d:6f:18:9b:65:41:4e:1c:bd:8d:43:
         73:78:e2:de:95:98:0d:f3:db:34:3e:bb:79:fc:c3:ee:b0:cd:
         e5:76:e2:89:24:74:91:aa:45:72:02:ea:1d:0c:0e:3d:af:a5:
         b7:78:cf:fd:97:26:0f:cc:5d:4b:1a:26:f0:96:05:4b:7a:58:
         1f:cc:bc:4f:77:da:0c:59:3e:72:a3:4e:05:64:4e:51:e4:95:
         6a:57:8c:1a:98:bf:d0:ea:38:2b:fa:e8:95:b8:aa:60:48:ed:
         7c:4c:b4:0c:86:c6:2c:2e:3c:dd:9c:87:5d:f2:ec:99:d2:ba:
         36:d7:44:e2:9f:94:00:ff:56:a8:2e:2f:d0:0a:5a:76:fa:5c:
         de:86:ac:b6:57:92:86:57:25:ab:75:d8:78:c2:52:39:76:31:
         e9:a4:f2:82:8c:78:55:56:25:77:f9:4c:87:6a:f2:ac:cb:76:
         4b:ad:54:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----