Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
File:                     bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft (raw, json)
Hash identifier:          jIZlWe4qjKlK9XCFA9QUbLepsY3FAT1tXN/tz3P3d0Q=
Subject key identifier:   24:EE:56:FD:D2:92:00:EF:30:A7:79:05:1C:27:01:21:3F:8E:22:94
Authority key identifier: 6E:BC:B5:7E:2D:5E:40:63:0E:19:3B:D5:CE:B1:6F:1E:F1:87:43:A3
Certificate issuer:       /CN=6ebcb57e2d5e40630e193bd5ceb16f1ef18743a3
Certificate serial:       01962F0667CD416A0AED3EA354D751332809
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft
Manifest number:          1440
Signing time:             Sun 13 Apr 2025 12:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:11 +0000
Files and hashes:         1: bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl (hash: 6+BlrjDP5BgtOra5ip8LKyqkm1MqTCZ1SXuRZTYWHXg=)
                          2: qNGM6pCGS-402FlF5n22U9NiTF4.roa (hash: zNwmUdRzsfaiupAMcMKDejc+/QaW9x/P4JbzEtj3MCQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:67:cd:41:6a:0a:ed:3e:a3:54:d7:51:33:28:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ebcb57e2d5e40630e193bd5ceb16f1ef18743a3
        Validity
            Not Before: Apr 13 12:01:11 2025 GMT
            Not After : Apr 14 12:01:11 2025 GMT
        Subject: CN=24ee56fdd29200ef30a779051c2701213f8e2294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:05:3c:60:dc:26:87:bb:71:b4:25:5e:28:84:
                    20:65:2b:e5:01:84:72:24:0c:0a:60:f8:44:d2:1a:
                    21:cc:a2:b7:a9:a9:fa:d1:5d:85:c8:5b:88:27:27:
                    02:bc:9e:75:71:d7:35:90:d7:bb:67:c0:27:80:b6:
                    ac:c0:7e:d9:2c:59:9e:1d:53:ec:73:cb:3f:bc:cd:
                    07:84:b7:0d:4e:fb:5e:24:71:79:1b:ef:c0:9a:f1:
                    87:12:e4:1e:46:5d:45:e7:a1:d6:55:8e:79:9d:a4:
                    7b:dc:7f:67:fe:cc:87:9c:7e:4a:cd:7a:ae:52:92:
                    37:6d:d6:79:2a:98:ee:46:a7:61:02:dc:8d:2d:72:
                    f9:4c:47:92:d0:b0:6f:9f:25:e9:23:66:18:1e:de:
                    dd:49:01:6a:1d:08:2d:ae:74:70:85:01:2b:3f:97:
                    23:25:ea:41:4d:70:92:77:75:1c:37:c7:4a:e9:7f:
                    22:14:4c:95:96:44:fb:f1:b9:54:85:3f:b3:a2:f1:
                    de:ba:94:1d:ae:1f:72:e5:cf:68:85:54:f6:e6:70:
                    94:62:a6:f6:f5:05:3b:23:26:17:61:e0:c5:2d:e2:
                    21:9b:38:2b:9e:50:38:30:6d:14:5a:05:bc:03:44:
                    1d:61:0c:f3:cf:59:01:c9:a3:a5:ad:2b:86:26:fb:
                    a3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:EE:56:FD:D2:92:00:EF:30:A7:79:05:1C:27:01:21:3F:8E:22:94
            X509v3 Authority Key Identifier:
                keyid:6E:BC:B5:7E:2D:5E:40:63:0E:19:3B:D5:CE:B1:6F:1E:F1:87:43:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bry1fi1eQGMOGTvVzrFvHvGHQ6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e45fa1-429d-4eaf-b278-9ad18ba1a3d9/1/bry1fi1eQGMOGTvVzrFvHvGHQ6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:8d:2e:9d:66:0e:6b:59:25:5d:48:0b:fe:bf:ae:ba:d0:b2:
         52:01:26:0f:23:f9:10:2e:22:c0:08:97:d5:fc:b3:8d:f7:18:
         40:3d:49:e5:65:b8:e6:22:90:9b:d1:b9:c5:f6:8f:5d:8f:07:
         30:0d:03:8a:80:0f:3c:4e:47:3a:80:bb:14:bd:67:56:89:a0:
         8c:72:9c:7e:64:2e:7c:0c:0d:07:1d:61:88:82:a2:f4:c2:21:
         29:c4:6c:81:4c:c4:4f:55:60:c0:49:df:bc:33:22:04:4c:0b:
         58:ca:ad:58:f2:a8:8a:c0:3c:4c:15:64:2c:dc:10:bf:a4:fe:
         5d:ab:66:8d:33:62:5f:c7:c0:6f:27:dd:21:9a:c8:d3:42:8c:
         ab:75:83:a6:a9:75:66:e6:e9:e8:d7:99:4f:e6:83:d2:c6:b4:
         00:09:cc:c7:1e:03:4e:5d:66:2d:db:46:95:35:76:ad:10:8f:
         28:dc:5d:4e:87:59:00:60:c1:1f:17:8a:ba:1a:5d:21:8e:72:
         5e:ef:c5:c1:75:50:64:f1:b5:71:ce:4b:f3:74:21:8e:05:5e:
         c3:b8:f3:d6:e7:e0:8f:a3:a5:94:8c:85:88:dd:a3:bf:ea:56:
         0a:06:b4:50:fa:e3:0d:db:06:86:ab:c5:26:12:a4:28:17:4b:
         e7:4e:8f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----