Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
File:                     bjw2OogPxx8yLRcPdH7FKiqcwNU.mft (raw, json)
Hash identifier:          7mxGyTpac5+6F+rxBaQbDNNjOQ8Mw/Rq/GpvTwJlkww=
Subject key identifier:   CA:B1:77:3C:43:94:45:C2:32:64:59:B2:94:DF:B9:7B:E9:C4:E9:83
Authority key identifier: 6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5
Certificate issuer:       /CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
Certificate serial:       01962DF427A191E0FA5670200FC6212CE311
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
Manifest number:          0CFE
Signing time:             Sun 13 Apr 2025 07:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:37 +0000
Files and hashes:         1: bPY9ahZxxt2lvVyVwzqBcjtryAE.roa (hash: gG0UZlZzIEWrBdANAlshbEpSDSiGqX3YZm/S5ZOuqaw=)
                          2: bjw2OogPxx8yLRcPdH7FKiqcwNU.crl (hash: zrgPb19mDBdwyM205gHcTUP+ETEKPVaq30nHgJRfxPA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:27:a1:91:e0:fa:56:70:20:0f:c6:21:2c:e3:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
        Validity
            Not Before: Apr 13 07:01:37 2025 GMT
            Not After : Apr 14 07:01:37 2025 GMT
        Subject: CN=cab1773c439445c2326459b294dfb97be9c4e983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2c:c5:4d:d5:ee:dd:2a:2b:90:87:16:f6:1a:
                    80:2d:42:aa:28:2d:9a:6b:65:f6:55:99:5d:d3:34:
                    e0:01:47:45:bd:d6:14:42:b2:23:be:a6:1e:8a:93:
                    fd:5e:e6:17:7b:ec:c4:84:a5:d6:e1:c2:1d:29:09:
                    d3:39:69:07:f7:c4:a4:52:3b:97:d0:20:db:b3:cc:
                    cb:d0:bb:ea:cd:5a:c4:8d:ab:8b:b9:06:6d:3e:4e:
                    61:ca:17:ea:5d:27:f7:f9:b0:7d:68:70:5a:89:82:
                    85:26:11:96:4e:c1:18:58:5b:74:f6:e1:5b:62:85:
                    1c:64:20:1e:da:09:02:41:fb:4c:5e:d5:e7:e3:a1:
                    18:b7:70:cf:c3:1b:71:ba:95:45:88:9b:bd:4e:72:
                    a9:d4:5f:f4:f1:06:92:6e:87:b0:53:b5:e7:e7:9c:
                    58:4a:6b:64:80:3e:a4:f2:68:55:77:55:1c:44:54:
                    b9:f6:f9:c9:40:a9:e7:19:68:aa:a1:f5:71:1e:82:
                    10:00:c4:12:55:a5:f8:7e:e2:b1:dc:6b:85:5a:db:
                    5f:93:b1:c2:5b:d4:b2:e2:09:1a:cc:5b:2b:16:55:
                    4e:6f:f9:a7:08:00:63:26:05:8b:41:6c:a1:b8:8f:
                    23:3a:e4:5d:a7:c9:01:b7:88:50:48:52:69:fb:3f:
                    b4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B1:77:3C:43:94:45:C2:32:64:59:B2:94:DF:B9:7B:E9:C4:E9:83
            X509v3 Authority Key Identifier:
                keyid:6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:80:89:65:fa:d9:b0:f9:a5:0a:86:6b:fc:49:d3:b3:bc:b5:
         49:84:34:9a:62:ae:5b:f8:ab:69:8a:35:87:5d:1d:3c:c3:17:
         2d:08:17:3d:c2:37:5d:af:72:6f:e9:51:f9:e5:8f:c4:75:0e:
         4b:c1:bf:73:91:75:43:1a:f0:74:db:79:e0:37:31:b5:b0:af:
         31:00:d1:61:59:d0:f7:10:52:67:82:bc:bd:f4:8b:2c:05:3e:
         21:23:af:e6:45:36:08:0d:1a:0f:d6:7d:08:8b:d9:e1:9a:75:
         cd:36:54:17:4f:6b:07:39:11:52:d2:e2:09:84:91:30:de:4f:
         06:f9:86:46:29:c2:70:9f:45:a9:fe:90:b3:99:ce:d3:0f:b4:
         56:c5:53:9e:6d:6e:df:4f:ed:44:f2:9a:68:d2:c1:2f:25:08:
         12:56:a1:e4:31:80:68:c5:7a:74:fd:ec:79:6d:b1:e9:15:ae:
         92:c5:7f:9d:e5:ab:a3:9a:96:d9:aa:57:ff:94:bc:92:ef:37:
         ee:7a:95:19:62:48:bb:ab:2d:5c:a7:f2:a5:7f:19:df:41:83:
         07:67:36:90:32:d8:a0:14:1d:2a:8c:42:29:08:4d:56:9e:60:
         d9:cf:c2:02:cb:d1:05:2e:64:d9:f5:bc:fd:78:31:b5:6b:86:
         bb:22:f6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----