Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
File:                     b4bJ980XO7zR22Hg8bTr4FwbnKE.mft (raw, json)
Hash identifier:          ZlCeyeOT7pOrhICYiVPvTApflWjvGpPehyKQx8lHlGs=
Subject key identifier:   BE:CE:43:DC:FB:32:9E:12:25:04:08:E8:74:16:47:3B:EA:5B:07:2E
Authority key identifier: 6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1
Certificate issuer:       /CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
Certificate serial:       01962DF3FA36B5DA64CCA5CF29928BDA5F9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft
Manifest number:          0EFA
Signing time:             Sun 13 Apr 2025 07:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:26 +0000
Files and hashes:         1: 7BXDP2MXXtjiuKfCj7kGQbobaJg.roa (hash: dX4O/Ud+qTWtCLczeQoZeg+HV0IvLYclumW7g97KhD4=)
                          2: b4bJ980XO7zR22Hg8bTr4FwbnKE.crl (hash: BAnKkLVN02q8alYlQevTY4VcFdZtKZ7qD7ef+dM949M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:fa:36:b5:da:64:cc:a5:cf:29:92:8b:da:5f:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f86c9f7cd173bbcd1db61e0f1b4ebe05c1b9ca1
        Validity
            Not Before: Apr 13 07:01:26 2025 GMT
            Not After : Apr 14 07:01:26 2025 GMT
        Subject: CN=bece43dcfb329e12250408e87416473bea5b072e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:45:c9:e8:86:ec:90:be:bd:b5:27:dd:e8:87:
                    ea:19:df:6e:7c:2f:cc:41:6b:50:ad:81:f8:3b:c4:
                    27:33:37:b2:aa:f7:43:e1:94:74:3b:d3:2e:b8:4e:
                    32:3f:a8:58:8a:f6:cd:98:e5:ed:9e:f4:8b:e2:8e:
                    7c:3c:95:6c:85:2a:d3:4d:db:98:19:d1:0c:b5:7c:
                    04:84:d6:f6:6b:ec:00:92:3b:3b:75:c5:1b:67:8d:
                    2e:34:cb:bf:a2:46:e4:9d:94:9f:05:67:78:fa:fb:
                    64:46:e9:e5:4f:e2:a6:e9:9b:1f:74:22:d9:5d:a8:
                    37:29:be:8c:2f:ea:b8:d1:61:33:f2:de:9f:0c:fb:
                    d0:8a:4a:cd:d4:0d:41:58:07:0a:d3:c1:5d:0c:85:
                    59:17:f6:04:6f:27:3d:ae:53:f6:c8:70:05:c5:ae:
                    57:41:b2:e6:5c:08:64:15:55:f0:42:3d:a8:95:68:
                    95:9a:7c:dc:02:a5:a7:52:9f:54:b8:c1:c1:0e:4d:
                    68:27:ad:6d:13:e6:d9:59:28:2a:ec:34:74:b0:f3:
                    71:9b:0f:60:14:2d:41:98:31:75:9c:ee:2f:03:da:
                    f2:eb:33:9a:82:42:95:08:cd:1a:0f:62:e7:95:56:
                    d7:ae:24:45:3b:bf:df:9e:06:73:e6:83:35:a6:0e:
                    9a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:CE:43:DC:FB:32:9E:12:25:04:08:E8:74:16:47:3B:EA:5B:07:2E
            X509v3 Authority Key Identifier:
                keyid:6F:86:C9:F7:CD:17:3B:BC:D1:DB:61:E0:F1:B4:EB:E0:5C:1B:9C:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4bJ980XO7zR22Hg8bTr4FwbnKE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5b0342-5e52-4c56-81b3-dc0dc5d5141f/1/b4bJ980XO7zR22Hg8bTr4FwbnKE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c6:03:5a:fc:1f:40:a9:ec:b1:75:0c:85:9b:fb:b6:ab:5e:
         d4:b1:2a:57:02:df:47:07:12:6c:3e:3f:33:c8:15:0d:2b:53:
         79:9b:64:72:5f:9e:92:0e:fc:a3:64:7b:ef:b4:ab:ab:95:68:
         90:e6:fd:45:e9:72:b6:c2:f7:18:ec:3b:e1:3b:f1:f7:50:f2:
         0d:f8:2a:ee:3c:f9:92:9f:f2:ae:ff:41:af:78:4b:33:a9:2c:
         ac:d7:3e:76:2b:22:94:49:fe:f6:f8:5e:b1:40:ea:ff:4e:01:
         de:73:ec:ec:b4:79:92:ed:4d:68:3e:64:c6:e9:e8:24:61:20:
         f3:d9:c5:f8:28:ef:0e:17:ee:56:c7:c6:9c:60:bb:28:39:c1:
         ce:fc:e3:7a:f3:1d:87:06:96:72:7a:49:fb:96:c6:7d:dd:65:
         f8:40:27:14:4b:18:01:cb:29:5c:de:59:2a:52:74:06:e5:33:
         15:07:d4:f4:34:60:53:8c:e0:72:71:3e:8b:e1:44:ac:75:fc:
         08:e9:9f:69:11:b4:47:c6:6c:5d:0b:65:e1:4e:5e:55:2b:1f:
         ee:a4:26:82:d0:08:4e:87:56:41:99:ec:4f:31:0b:62:fc:b5:
         5b:ec:25:8b:fe:bf:a5:7d:14:80:ac:d8:ee:72:f2:b6:5b:3c:
         94:d2:ba:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----