Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
File:                     bSPOewwQBo-8RMAhlD4zkBPyruA.mft (raw, json)
Hash identifier:          gKNsJoNwzbHJZ49xNfE72IxZsuWPFXsCozHToDrM7Q4=
Subject key identifier:   D5:43:4F:89:DE:A8:41:A8:D3:76:9A:95:6C:7D:9A:0F:34:76:1A:3C
Authority key identifier: 6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
Certificate issuer:       /CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Certificate serial:       01962DF3E29BBF256C0F5AEF5187298A5B1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:19 +0000
Files and hashes:         1: LQcm0nhQTgxfcAEHFSpSeQFsVHo.roa (hash: ScQNvXtsK5w/Wj3QzlqfHMAUcdIYUpFbtGKhSGmn1FI=)
                          2: bSPOewwQBo-8RMAhlD4zkBPyruA.crl (hash: AVJAQBhCJp8ZqoJOKDn/VF6roak4S4DU4tOtNWGZmEo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e2:9b:bf:25:6c:0f:5a:ef:51:87:29:8a:5b:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
        Validity
            Not Before: Apr 13 07:01:19 2025 GMT
            Not After : Apr 14 07:01:19 2025 GMT
        Subject: CN=d5434f89dea841a8d3769a956c7d9a0f34761a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:dc:73:23:b0:87:cd:67:36:aa:65:17:af:4a:
                    9e:41:11:db:64:da:c8:aa:8e:a1:43:57:a8:71:84:
                    47:25:c5:6c:87:f4:b8:0c:4f:02:2f:eb:32:a0:17:
                    a8:ee:1f:81:a1:d6:5d:db:3f:0a:80:6e:9e:fd:b8:
                    18:8e:dd:a5:4e:8d:bf:ce:a5:63:3a:73:e5:1b:5f:
                    56:a5:9f:df:bd:f8:64:41:45:f8:1a:6d:80:59:a4:
                    5f:c9:2d:9f:b8:20:7d:da:e5:99:37:0b:70:9f:71:
                    dc:50:b8:01:6c:b4:e4:c9:28:b8:17:37:17:12:aa:
                    b8:f4:69:7a:e4:b0:ca:08:67:68:26:da:84:a2:9c:
                    7d:81:14:bf:37:5a:20:a6:9b:bd:dc:74:9a:d9:4d:
                    68:fb:72:ed:b9:95:17:bf:f6:89:94:f5:2a:38:75:
                    34:7c:27:21:28:33:f9:82:ee:97:37:16:c0:78:4e:
                    dd:a7:1a:da:2a:e8:a9:2f:e0:90:75:e3:b7:d4:7a:
                    e9:23:dc:1f:d8:3a:af:8d:24:cf:ba:da:04:3c:e5:
                    65:7c:ef:44:f0:eb:35:9e:8a:32:ea:cc:9b:07:df:
                    78:ac:26:b8:da:0c:3d:ac:60:36:b6:0a:12:34:b1:
                    fb:c7:1b:07:2e:2c:a2:51:75:e9:e2:b0:39:e7:52:
                    1b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:43:4F:89:DE:A8:41:A8:D3:76:9A:95:6C:7D:9A:0F:34:76:1A:3C
            X509v3 Authority Key Identifier:
                keyid:6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:fc:1b:1e:e6:a7:75:60:e4:e8:f6:29:7f:17:e4:77:fc:6f:
         68:63:69:8b:60:2f:b3:94:ce:d4:ed:3f:01:58:5b:07:4f:c5:
         ab:80:2d:f3:4b:2a:53:eb:57:1c:6e:d3:e2:d7:bb:c4:27:7e:
         bc:2e:21:b7:26:bc:77:42:b1:67:78:c3:2f:9b:47:2f:d1:22:
         b9:ba:79:9d:3a:d4:14:22:24:50:90:95:bb:bb:0b:84:f4:a1:
         f9:15:8a:d0:33:89:d6:e4:e3:60:39:fc:e2:2f:16:6d:86:08:
         a9:86:5a:2f:f9:42:d6:00:d4:66:6f:c4:d3:49:f2:fd:8b:fa:
         4d:72:90:50:e2:29:54:00:6a:66:60:c8:04:a4:cc:26:74:de:
         a3:52:b4:69:d1:69:73:b7:1a:64:ee:1c:e5:f3:88:ea:e2:a0:
         8b:a8:32:56:eb:59:3b:d0:4b:39:d6:b5:d6:e9:0f:ec:c1:a3:
         ef:80:e7:8d:ef:24:8e:e1:ef:b6:76:fd:cd:46:1a:64:82:b8:
         cf:b4:92:82:59:4c:03:07:f6:31:86:44:9a:bd:09:75:7f:8f:
         99:4d:42:2a:ee:1c:7f:9d:d8:2c:31:98:05:8b:9e:49:7f:15:
         b4:a1:27:0c:fc:82:e6:f7:b5:0c:07:46:ab:5f:5e:0e:bd:52:
         50:90:a1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----