Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
File:                     vMBbyedz38ikm7QwgluXRt1BxPE.mft (raw, json)
Hash identifier:          xgA5VF/H02OMAmnYu2op6+HDGwhKoKEOb5aRSI2jsPc=
Subject key identifier:   04:84:BD:5C:27:5F:5B:D6:A0:AA:4A:42:E5:41:E8:A9:F9:41:6B:ED
Authority key identifier: BC:C0:5B:C9:E7:73:DF:C8:A4:9B:B4:30:82:5B:97:46:DD:41:C4:F1
Certificate issuer:       /CN=bcc05bc9e773dfc8a49bb430825b9746dd41c4f1
Certificate serial:       01962E996B114CF15B37F6087A9F615F36F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:02:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:08 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:08 +0000
Files and hashes:         1: vMBbyedz38ikm7QwgluXRt1BxPE.crl (hash: mlk6IC5B41Qqme4F2GLqOos0qRMlbDDbKaDSuHEjHwA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:6b:11:4c:f1:5b:37:f6:08:7a:9f:61:5f:36:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcc05bc9e773dfc8a49bb430825b9746dd41c4f1
        Validity
            Not Before: Apr 13 10:02:08 2025 GMT
            Not After : Apr 14 10:02:08 2025 GMT
        Subject: CN=0484bd5c275f5bd6a0aa4a42e541e8a9f9416bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:20:a9:d1:9d:71:e3:70:49:fd:c4:74:ad:3c:
                    5f:10:c0:8c:4d:10:07:89:bc:ba:17:fe:51:33:22:
                    21:ac:20:d0:66:09:9e:3e:b1:15:d5:45:08:72:23:
                    07:42:ec:aa:60:85:51:cd:e8:41:c4:fd:e2:8e:7b:
                    15:f7:5f:de:c0:c2:69:ed:98:78:ef:b3:e5:55:1c:
                    42:ea:de:c2:3c:ab:5c:f3:58:44:e3:3b:b0:6f:98:
                    6b:0c:e7:ea:3b:4c:be:56:a8:d9:d1:2f:9a:61:70:
                    45:24:dd:5c:10:9d:72:00:5f:cc:0b:1c:6f:8d:07:
                    f8:1a:9b:2d:5b:5c:82:75:9a:43:cd:6d:26:5a:21:
                    a1:9a:2b:78:b0:72:a9:f5:c8:d2:47:61:3a:5c:af:
                    35:c8:21:c5:91:38:62:40:37:55:bc:e1:ea:2a:9d:
                    e2:0c:e5:d5:06:13:39:3f:73:37:64:1c:4d:44:e8:
                    93:6f:0d:6f:7e:06:50:71:95:00:6d:94:db:8c:07:
                    88:93:a9:f7:a8:8c:05:b5:be:24:fe:58:15:b8:ee:
                    4d:26:8f:7e:20:ee:4c:e2:f4:b0:e8:35:b7:d9:48:
                    ce:c7:89:8d:41:b8:aa:e2:9f:67:2a:80:15:1a:16:
                    b3:1c:c9:4e:19:49:3f:60:54:80:f1:c2:29:97:31:
                    56:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:84:BD:5C:27:5F:5B:D6:A0:AA:4A:42:E5:41:E8:A9:F9:41:6B:ED
            X509v3 Authority Key Identifier:
                keyid:BC:C0:5B:C9:E7:73:DF:C8:A4:9B:B4:30:82:5B:97:46:DD:41:C4:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:b8:35:f7:af:79:bf:a6:c5:00:74:f1:6f:4e:53:47:f8:e9:
         7d:3b:62:5a:00:28:d8:37:91:60:d1:a8:bb:dd:0c:da:7b:bf:
         69:1a:db:4f:a6:50:4a:3f:df:d3:01:58:ad:40:db:5b:c4:f6:
         26:87:50:12:a1:d5:cf:ac:71:71:a2:a3:58:32:73:bd:91:25:
         01:36:64:71:15:be:59:4f:4c:ce:be:34:9a:a9:17:2d:49:f7:
         dd:ab:c8:65:ec:a7:26:ce:81:dd:e7:a9:76:af:0c:bd:2a:ba:
         fe:14:76:08:68:82:17:d9:7a:45:88:3e:aa:ef:17:2f:dc:82:
         53:77:24:40:90:09:27:4b:5e:b0:aa:31:fa:a3:17:4b:6b:be:
         4e:40:23:7c:ec:3e:bc:5b:7b:6a:ee:d3:f5:cc:72:4c:33:1b:
         9e:49:70:f0:85:fb:a7:f2:92:3a:b8:f3:ea:2b:71:8f:df:5a:
         db:df:0f:d1:9a:e3:93:22:c2:79:0e:58:de:b2:f7:b9:f1:bc:
         ae:20:25:b6:c5:e6:93:fa:d4:f5:90:4b:e2:4b:61:fa:99:ca:
         20:c0:1d:4d:15:2c:13:4d:87:73:12:bd:30:2c:53:6f:08:09:
         87:ab:b5:5a:4e:7b:f6:28:73:cb:1f:83:b2:6f:e9:0e:3f:e5:
         08:77:5c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----