Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft
File:                     bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft (raw, json)
Hash identifier:          jde6YIcWxpzWPtS482pE6XuR8eg8W9Ptu7GOiQo+S2g=
Subject key identifier:   22:5B:F1:3A:33:27:9F:0C:68:5C:A8:24:DE:5A:0A:AE:37:B4:E8:44
Authority key identifier: 6D:8E:0E:7E:86:77:5B:41:5D:3D:57:80:CE:4C:FE:C0:C8:59:18:9C
Certificate issuer:       /CN=6d8e0e7e86775b415d3d5780ce4cfec0c859189c
Certificate serial:       01962DF3BBFD4DBD62973086ADBA61F7A27B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft
Manifest number:          1278
Signing time:             Sun 13 Apr 2025 07:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:10 +0000
Files and hashes:         1: bY4OfoZ3W0FdPVeAzkz-wMhZGJw.crl (hash: D7+Wya5lBjeMRENosWvDQ5ZkqUTe5swLS1mTw2UX7x8=)
                          2: qgSgsUNmjGc3XOuValdIkwwl07g.roa (hash: K6iu6N/DtzSRuE8h4cXXnk/shnPgBX6kLrlWrpVPx3E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:bb:fd:4d:bd:62:97:30:86:ad:ba:61:f7:a2:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d8e0e7e86775b415d3d5780ce4cfec0c859189c
        Validity
            Not Before: Apr 13 07:01:10 2025 GMT
            Not After : Apr 14 07:01:10 2025 GMT
        Subject: CN=225bf13a33279f0c685ca824de5a0aae37b4e844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c7:5f:61:70:78:04:bc:ac:d9:e9:7c:b9:1b:
                    88:33:c2:00:4a:86:0c:f9:fd:95:8b:68:ba:bf:66:
                    4b:16:bf:b3:4a:d0:65:18:7a:02:24:c9:4d:32:22:
                    38:2e:6f:ac:e4:0e:c4:17:26:0e:4d:46:16:fa:be:
                    cd:84:06:89:ed:02:3b:45:6a:1f:91:28:bb:5b:c5:
                    fc:03:ba:65:32:fc:42:a3:df:03:b3:f4:d8:ff:44:
                    38:a7:ee:a2:4a:34:54:f3:a9:5c:2c:26:47:31:2e:
                    7a:99:35:33:e4:a2:86:bc:81:bb:8d:49:06:4d:cd:
                    1c:6b:b3:4d:ea:cb:99:12:78:d6:89:06:1f:b8:6e:
                    1d:a1:c4:6e:65:86:dd:be:3e:24:88:ff:77:4e:43:
                    79:83:64:db:d3:7e:ba:fc:a3:6c:21:b7:95:34:8c:
                    ce:0e:c1:23:5d:8c:61:35:3e:c8:c8:ee:36:a9:8f:
                    88:ff:34:a0:ee:74:17:c9:cb:e9:f1:14:11:69:2d:
                    41:4d:8b:95:89:99:e8:bc:48:1a:35:b7:89:21:ad:
                    39:ff:7a:21:a4:92:6a:c9:6f:9a:0e:06:1b:6e:b7:
                    c3:b9:b3:4d:a7:78:12:0f:15:b4:b8:52:32:9e:f4:
                    81:f7:2d:2b:96:23:e8:e6:43:89:f2:cd:cc:f4:3f:
                    ae:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5B:F1:3A:33:27:9F:0C:68:5C:A8:24:DE:5A:0A:AE:37:B4:E8:44
            X509v3 Authority Key Identifier:
                keyid:6D:8E:0E:7E:86:77:5B:41:5D:3D:57:80:CE:4C:FE:C0:C8:59:18:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/056235-df36-4870-8746-ae5f4c12de79/1/bY4OfoZ3W0FdPVeAzkz-wMhZGJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:d0:d6:21:19:c6:93:67:26:0a:36:34:ca:b9:41:68:f1:99:
         24:74:4e:62:10:01:a5:ec:72:2c:15:5c:b1:08:13:e7:0e:1d:
         47:45:a2:9a:59:75:21:f8:82:aa:8b:b6:54:04:ad:3b:49:83:
         9a:34:96:15:17:a4:ad:5e:91:0a:4c:ff:40:e5:35:77:5f:6c:
         7f:ec:de:d2:e4:74:1b:93:32:ba:84:d6:d8:59:1e:0f:db:4d:
         e7:5a:a9:9a:6a:cf:e6:9c:3a:54:4d:4a:39:33:15:74:fa:3c:
         1c:cf:40:d5:c5:c1:4e:b3:33:2e:e4:53:92:16:3f:a7:59:e1:
         49:e3:80:88:90:7f:a9:fc:ac:f8:81:ab:4e:60:18:90:4d:3d:
         6c:04:09:c9:fe:aa:28:d6:54:7c:38:46:15:6a:a1:c9:b4:c8:
         93:5e:11:57:30:00:c2:48:ad:0c:85:29:0d:38:75:23:93:c4:
         78:41:fe:c0:2b:01:2b:83:64:80:50:fa:c9:17:4b:eb:e7:d3:
         21:f3:b5:13:3c:3d:64:fa:9b:3b:da:8e:54:f7:4c:63:a8:2d:
         37:e0:c8:0b:6e:ec:3b:31:41:83:d7:47:46:94:c8:0a:81:18:
         3d:50:21:07:77:cf:6f:3b:f2:40:51:4e:8a:ee:22:be:3e:b6:
         5f:55:1e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----