Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.mft
File:                     bzipg89Dc6pJdJhasi1RTA9IHS4.mft (raw, json)
Hash identifier:          MmeHj2tSn2pGykmbUu91Kp4bvY4qdypjBEaCzNpaU2Y=
Subject key identifier:   EB:D3:79:2A:B0:A9:80:1D:5D:98:34:F6:E9:9A:90:08:6F:B6:40:98
Authority key identifier: 6F:38:A9:83:CF:43:73:AA:49:74:98:5A:B2:2D:51:4C:0F:48:1D:2E
Certificate issuer:       /CN=6f38a983cf4373aa4974985ab22d514c0f481d2e
Certificate serial:       01962E988E959295C39F635C998DCA963F34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bzipg89Dc6pJdJhasi1RTA9IHS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.mft
Manifest number:          0137
Signing time:             Sun 13 Apr 2025 10:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:11 +0000
Files and hashes:         1: HZb4ypfyyLknrNflDGCKDQospm0.roa (hash: DJb41fbhgLGXN4Umv3DyaNZTQa8ZY7nKkJ22hR0xLS4=)
                          2: bzipg89Dc6pJdJhasi1RTA9IHS4.crl (hash: t+wVzakCLBMnlpXqz4uv5e4a1rgjBHJVcCwS/zd55ME=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:8e:95:92:95:c3:9f:63:5c:99:8d:ca:96:3f:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f38a983cf4373aa4974985ab22d514c0f481d2e
        Validity
            Not Before: Apr 13 10:01:11 2025 GMT
            Not After : Apr 14 10:01:11 2025 GMT
        Subject: CN=ebd3792ab0a9801d5d9834f6e99a90086fb64098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:56:ea:f5:bc:9a:29:f1:2f:4d:a2:de:1f:d7:
                    8a:2f:c7:12:0b:06:5e:23:ff:6e:65:b9:21:71:48:
                    37:ef:77:6f:26:7e:f0:81:3c:81:20:c7:4f:03:a4:
                    de:63:4e:ec:a2:ab:15:ec:89:20:4e:9d:f7:d3:c8:
                    7d:4b:ff:cf:c3:26:a3:78:61:0e:1d:57:ca:e9:85:
                    aa:3a:73:4d:25:e6:52:90:4d:e5:82:eb:39:8e:81:
                    af:5b:49:8a:c0:e4:52:30:56:ae:0b:ea:af:8d:bd:
                    e6:b5:c2:36:49:f2:fa:84:a3:8f:01:83:cd:ff:27:
                    68:8a:85:0a:e2:70:36:c2:ba:b0:07:9f:cd:5c:c2:
                    78:32:1d:1c:93:fc:3f:70:14:f2:2a:fe:86:8c:cd:
                    e8:a4:d0:05:d3:38:4d:55:c0:7f:83:cb:53:1a:f8:
                    7c:fe:5d:98:d9:e0:34:2e:22:76:4f:f4:99:e9:d0:
                    c3:d5:07:80:40:82:ce:0d:78:65:4d:2e:b2:13:9f:
                    69:06:dc:1a:a0:2f:0f:d5:c4:9e:cf:f2:76:98:53:
                    57:d9:77:72:8c:98:ef:da:cb:a8:39:b3:9c:e8:79:
                    a9:e6:ea:d8:55:b1:bd:bb:00:bf:9d:c7:7d:e7:89:
                    6f:73:1a:54:7d:2d:94:b6:75:59:6f:38:f0:03:05:
                    69:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D3:79:2A:B0:A9:80:1D:5D:98:34:F6:E9:9A:90:08:6F:B6:40:98
            X509v3 Authority Key Identifier:
                keyid:6F:38:A9:83:CF:43:73:AA:49:74:98:5A:B2:2D:51:4C:0F:48:1D:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzipg89Dc6pJdJhasi1RTA9IHS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/74337b-f98e-4e31-9004-af5a567732ef/1/bzipg89Dc6pJdJhasi1RTA9IHS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:20:af:ee:ba:18:e6:b1:59:00:39:aa:b6:e9:a1:80:c4:fd:
         3a:78:b1:2b:be:9f:c8:cb:5e:91:7f:8d:06:41:cb:ab:86:2f:
         2d:3c:16:10:37:30:72:85:7a:5a:de:13:71:3d:92:47:78:08:
         36:72:44:e8:78:84:50:55:b0:02:81:aa:9a:a0:1c:98:d8:30:
         c3:b0:4e:21:1b:bd:89:bb:be:3e:21:f9:d9:68:e7:e4:12:9c:
         ac:2f:00:42:1e:b7:1e:b0:32:b9:f2:d3:7c:b9:b6:3e:de:27:
         67:79:f6:76:5e:d0:52:33:55:ae:c7:17:47:39:3c:4b:42:95:
         57:f3:47:39:4d:d1:f3:1a:98:d1:40:3f:2c:79:36:33:67:93:
         bb:62:45:df:01:ab:62:e5:a5:2d:84:bc:cd:92:54:77:9f:e7:
         de:58:86:fe:34:5f:68:91:c9:93:a7:03:d0:bb:6f:34:21:3a:
         4c:d8:76:5c:d8:b2:c9:e5:40:8e:d4:ec:20:2a:36:b7:36:26:
         d2:9e:1c:46:a5:eb:6b:42:db:79:f3:4e:2b:fb:13:9c:8a:b7:
         e2:50:56:ac:d1:12:bc:f0:61:53:26:39:54:b3:06:83:4f:6e:
         8c:93:80:57:cc:70:57:52:d7:c4:39:91:c6:16:18:4c:5b:7d:
         6c:49:9f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----