Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
File:                     BhYY9tMA3yz1ni35f_6flWoj5jw.mft (raw, json)
Hash identifier:          rvOj7Zc9N8SF37cFQikUorJgF6Z8gg+nkVQQwz8VGKw=
Subject key identifier:   85:F1:16:8F:FB:16:5A:B9:E9:DC:A9:DF:6B:D7:A5:50:C1:DC:A6:BA
Authority key identifier: 06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
Certificate issuer:       /CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Certificate serial:       01962F07077C444D750814E316EBDF91FEBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 12:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:51 +0000
Files and hashes:         1: BhYY9tMA3yz1ni35f_6flWoj5jw.crl (hash: E2q7jpJTm3f/sdrDcoVfoLMXwiiFnbryp1es8SfwzVI=)
                          2: PpLMyuWEi7GW-Zo7FScOzQEDqmw.roa (hash: tpDYLlf85669UfO2WjK12JWkdre1n2ZIYLt0uyeHU34=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:07:7c:44:4d:75:08:14:e3:16:eb:df:91:fe:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
        Validity
            Not Before: Apr 13 12:01:51 2025 GMT
            Not After : Apr 14 12:01:51 2025 GMT
        Subject: CN=85f1168ffb165ab9e9dca9df6bd7a550c1dca6ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:46:5b:2a:56:3c:42:f6:ae:88:bd:a7:e8:18:
                    99:e5:20:70:65:d7:83:d1:12:13:23:3f:05:0d:b3:
                    a4:4b:ec:5b:e0:02:15:6b:c4:cd:1c:6d:6c:50:ea:
                    d0:02:3e:e2:48:49:f9:12:40:e4:2d:17:7f:ac:a5:
                    15:9c:a1:5a:2e:ab:77:c6:4d:ff:d1:e7:e5:2c:4e:
                    cd:81:38:ee:4c:9d:08:bc:75:76:24:b5:b4:90:0c:
                    3b:2a:c4:d8:42:c2:d8:a5:af:9a:6c:fb:8b:55:3a:
                    95:b9:e9:24:e2:01:99:17:42:41:42:f3:98:21:dd:
                    b0:75:53:8e:51:07:58:9b:ca:a4:98:c2:24:bc:9f:
                    22:f2:ca:da:95:af:06:e7:c6:bf:52:c8:89:da:3c:
                    7b:1f:1c:5b:44:e6:11:20:9e:f2:5f:43:98:d9:bc:
                    39:90:38:d7:8e:ae:2b:2b:51:13:23:41:13:a4:4d:
                    4d:b5:b5:76:d6:22:9e:c9:a9:b9:c0:60:8d:bc:9d:
                    39:e2:1f:79:c5:88:77:fc:c6:7a:40:8f:59:df:79:
                    b4:c8:6f:b1:45:53:94:47:d3:be:b9:86:6f:3d:58:
                    13:e1:e9:70:14:b0:41:7f:f3:82:52:f7:69:eb:f2:
                    09:87:eb:a1:6d:28:55:88:c9:ee:c2:a3:23:6a:f7:
                    f3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F1:16:8F:FB:16:5A:B9:E9:DC:A9:DF:6B:D7:A5:50:C1:DC:A6:BA
            X509v3 Authority Key Identifier:
                keyid:06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:f7:a7:8a:20:48:86:c1:05:da:76:83:1a:60:6f:90:79:e5:
         a5:b2:e6:72:71:35:f6:59:d0:70:86:9c:de:4a:16:cb:97:2b:
         61:c6:70:31:9b:98:3e:55:a2:99:34:da:85:1f:ae:ec:45:e6:
         b9:c0:e7:c4:cc:c8:3e:4a:1b:f1:46:29:8b:e8:5a:91:62:90:
         e3:8d:43:2f:24:4a:d8:d1:ff:12:cd:54:d2:ab:92:91:db:6d:
         20:b0:13:99:96:f4:10:7c:8d:5b:88:e4:33:90:71:60:a6:10:
         97:cd:7b:4d:e1:b0:85:23:5c:d4:77:3f:d0:9c:2f:6e:27:bd:
         af:39:25:cd:97:6c:a0:ef:db:3a:1b:40:2b:b0:2b:2d:76:3d:
         72:71:71:ec:ce:ba:07:5c:c5:10:29:f8:66:47:36:e8:03:e7:
         83:82:63:f2:ad:67:83:a0:55:16:32:74:ed:63:e2:ea:00:aa:
         c9:63:fa:19:64:1c:92:74:ce:e4:c1:25:6c:4d:d3:73:e5:1a:
         f3:81:17:be:b1:5a:1d:0b:33:e2:23:97:4b:2a:5f:41:d6:75:
         30:9e:d5:e1:56:52:66:23:ad:d8:b4:b1:74:43:af:11:45:27:
         fe:9d:93:4f:e6:4d:b0:45:86:33:e3:9b:a0:87:15:e3:c5:4a:
         3d:f6:d6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----