Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
File:                     bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft (raw, json)
Hash identifier:          JuyZlK/wFNPxPjG191vXnuQJ4npA0pxvdqfibRkT0mg=
Subject key identifier:   B2:02:64:95:7C:1C:A9:4E:92:31:DD:C3:9E:55:72:B6:28:A8:A3:62
Authority key identifier: 6C:9B:3E:19:FD:1F:43:0F:51:45:D6:DB:92:41:A5:05:7E:D9:6C:B3
Certificate issuer:       /CN=6c9b3e19fd1f430f5145d6db9241a5057ed96cb3
Certificate serial:       01962FAB4B0E424707D8A29AF80969658023
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft
Manifest number:          0B7C
Signing time:             Sun 13 Apr 2025 15:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:17 +0000
Files and hashes:         1: _MMRM5gPmnbq2reAxzdSDLSF69Y.roa (hash: cjqAj6GsWqy7BzMKUAnCFHbn8leWiofU15doogJDNHE=)
                          2: bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl (hash: RzC4U27LByjFxkximm0gIIycwvaYn8DNruUeZQapgQ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:4b:0e:42:47:07:d8:a2:9a:f8:09:69:65:80:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c9b3e19fd1f430f5145d6db9241a5057ed96cb3
        Validity
            Not Before: Apr 13 15:01:17 2025 GMT
            Not After : Apr 14 15:01:17 2025 GMT
        Subject: CN=b20264957c1ca94e9231ddc39e5572b628a8a362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8c:62:2e:0d:06:dc:c5:c4:f5:18:3a:8f:f6:
                    4b:34:a1:0e:7d:d9:03:0a:e1:b9:c0:57:76:35:3c:
                    9c:2a:92:81:fc:98:3c:b2:2b:2a:1e:94:e4:fd:4b:
                    e7:30:6c:c5:75:e9:68:e1:2e:5f:ac:4a:91:16:67:
                    ba:79:c9:7b:4e:bf:2a:8f:cb:af:dc:24:ba:42:0b:
                    55:ff:cd:eb:1f:93:d3:56:25:96:89:57:82:ec:9c:
                    ea:bf:f2:c6:a6:9c:94:e3:03:8f:59:d1:e7:bf:2f:
                    75:7f:ab:1c:2d:e8:7f:dd:40:4f:c4:43:1c:3f:fb:
                    f3:40:43:ce:67:fd:4b:3c:a0:96:3f:31:b6:c1:b7:
                    a5:03:56:d6:db:90:46:bf:c4:89:0f:b5:c4:a0:fb:
                    e8:be:6b:4a:87:88:1b:72:83:79:58:4c:12:af:1b:
                    66:25:93:b5:b8:a7:81:2a:d2:91:5a:62:7f:b8:9c:
                    f7:3d:b2:2c:42:45:66:5c:04:56:7b:5a:29:48:67:
                    a4:da:7c:c0:d3:05:4d:b1:9a:9c:ef:a6:b8:9a:7f:
                    76:5e:8f:eb:01:cc:89:92:6d:c1:00:90:2e:a1:44:
                    d5:bb:c3:1e:f0:67:f7:77:4d:b9:f9:b1:da:4c:77:
                    74:6f:73:96:4d:34:81:2c:b6:3b:2d:49:62:40:29:
                    50:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:02:64:95:7C:1C:A9:4E:92:31:DD:C3:9E:55:72:B6:28:A8:A3:62
            X509v3 Authority Key Identifier:
                keyid:6C:9B:3E:19:FD:1F:43:0F:51:45:D6:DB:92:41:A5:05:7E:D9:6C:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ea4b1f-3d90-40f2-8f98-0baa7778ace7/1/bJs-Gf0fQw9RRdbbkkGlBX7ZbLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:b7:c1:58:f5:ce:e4:60:3d:33:38:8b:91:82:1e:6a:83:e4:
         46:29:a0:27:72:f5:61:c7:fc:cb:92:39:3c:ea:e4:f4:cf:3c:
         8e:c5:39:d2:11:d0:9b:bb:35:72:92:51:bf:91:f1:e6:c3:5b:
         c5:89:4e:10:5f:0b:8c:6c:dd:c9:b2:5f:77:fe:b5:00:47:41:
         7d:c7:2c:b5:3e:6e:50:c4:36:c1:e1:78:55:60:78:fd:84:87:
         f6:13:d6:64:51:87:b1:ab:a3:64:9d:08:83:09:f7:10:e8:68:
         39:4e:88:9a:ec:95:51:ac:b3:53:82:8d:64:08:37:00:23:1a:
         d4:cf:7f:4d:c6:fc:e9:87:05:46:26:c6:3e:b0:e9:14:7c:e7:
         fa:33:43:c3:69:4f:bb:18:fc:7c:f9:e3:b7:87:d1:81:2c:18:
         6c:0b:a2:6b:a4:ae:77:55:2b:43:b9:b0:4f:fc:9e:92:96:1e:
         86:b7:7f:73:71:cd:b0:81:a5:93:00:85:d7:a9:f5:18:03:f5:
         4d:15:30:0d:4c:f5:e1:22:78:2c:16:40:db:30:f2:2c:40:45:
         40:d9:6d:7c:75:1f:ea:6b:07:27:fa:f1:20:bd:c4:f7:d8:dd:
         0e:74:1a:4b:01:ab:9e:e7:cc:d8:26:a7:78:a6:bb:1f:8b:5b:
         0b:9a:56:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----