Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.mft
File:                     biw-HNO4VNZu9GxWd-9y0sWjZpc.mft (raw, json)
Hash identifier:          WxDFYblmlARozL+5s6r9rl0C1dV5eWV1AsnM311oIDc=
Subject key identifier:   BA:4F:73:5D:A0:81:7B:B4:0B:54:52:41:88:06:67:C8:26:E0:01:E4
Authority key identifier: 6E:2C:3E:1C:D3:B8:54:D6:6E:F4:6C:56:77:EF:72:D2:C5:A3:66:97
Certificate issuer:       /CN=6e2c3e1cd3b854d66ef46c5677ef72d2c5a36697
Certificate serial:       01962FAB7D3BC688AEE07053A6BBFBC011B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/biw-HNO4VNZu9GxWd-9y0sWjZpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.mft
Manifest number:          06A4
Signing time:             Sun 13 Apr 2025 15:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:29 +0000
Files and hashes:         1: biw-HNO4VNZu9GxWd-9y0sWjZpc.crl (hash: LyKI7mGtfCc1vm7A21rrAiwWxIYZvERu2m4+iaDMOpc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:7d:3b:c6:88:ae:e0:70:53:a6:bb:fb:c0:11:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e2c3e1cd3b854d66ef46c5677ef72d2c5a36697
        Validity
            Not Before: Apr 13 15:01:29 2025 GMT
            Not After : Apr 14 15:01:29 2025 GMT
        Subject: CN=ba4f735da0817bb40b545241880667c826e001e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7d:18:dc:72:96:fc:ca:6d:e2:26:b4:ab:f7:
                    79:0d:08:bf:85:f5:1f:b0:8d:60:14:ce:40:35:d7:
                    59:8a:08:4d:41:81:44:dd:93:cd:f8:9b:62:28:a0:
                    db:2f:2b:4f:68:b4:ef:09:db:c7:ee:0a:b0:d9:11:
                    40:38:f7:2b:f4:52:d2:6c:63:9a:9f:17:91:54:00:
                    5f:0e:33:4c:5c:5b:db:2f:4f:ac:8f:0c:08:6c:48:
                    f9:fc:8f:66:c2:4c:ce:a6:2a:4c:14:a2:ae:79:bd:
                    47:28:e3:ac:3e:91:b7:19:8c:7e:15:b2:04:ae:81:
                    84:4d:d5:d3:96:86:75:ba:ea:80:f8:da:3c:2a:5a:
                    a4:d0:be:84:a7:6e:46:8e:7d:f9:44:5d:fa:d8:cf:
                    f8:b1:66:cf:76:ed:ca:e9:ea:5f:28:da:16:b5:6a:
                    49:a7:3d:e8:48:94:89:7a:55:70:48:53:f8:04:e4:
                    53:a5:6a:09:53:d7:0b:9f:7c:34:b5:b6:c5:3b:1a:
                    3c:3f:3e:b3:b5:06:fd:2b:a7:41:20:55:3c:30:bc:
                    1c:c4:d8:db:83:88:bd:2a:c9:6c:29:f0:01:37:49:
                    13:04:08:71:99:7a:bf:44:6e:05:df:81:e5:44:28:
                    84:cf:e4:42:b1:ae:80:e7:d7:81:a0:b4:94:f6:bb:
                    c4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4F:73:5D:A0:81:7B:B4:0B:54:52:41:88:06:67:C8:26:E0:01:E4
            X509v3 Authority Key Identifier:
                keyid:6E:2C:3E:1C:D3:B8:54:D6:6E:F4:6C:56:77:EF:72:D2:C5:A3:66:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/biw-HNO4VNZu9GxWd-9y0sWjZpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2590fb-b05e-4441-add1-f8355b78db24/1/biw-HNO4VNZu9GxWd-9y0sWjZpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:ba:30:b0:78:29:4c:fd:a7:d5:9e:f6:83:36:31:1b:0f:a0:
         24:46:ce:3c:63:58:c6:b2:c0:c1:c8:a9:2f:f3:4c:55:c4:65:
         a5:24:8a:0d:fb:27:11:3a:14:4c:78:9e:e6:a7:cb:d2:72:0d:
         2b:8b:6a:06:df:c0:90:16:11:49:e8:e0:29:47:b8:8a:de:3e:
         ec:b0:73:29:e4:74:e6:c9:4c:f1:6e:bc:b6:1f:22:24:eb:e9:
         9f:0f:bf:33:20:1f:51:81:37:88:e8:d8:2c:eb:b8:9d:5f:84:
         e7:c0:1e:2a:5e:64:25:86:ae:c1:e9:9a:09:55:2d:42:ce:c2:
         65:2e:12:cb:dc:e2:61:cd:ba:3e:39:ce:c0:d3:b5:95:ac:9c:
         57:b2:8c:9d:1d:eb:cc:e2:53:f8:58:d1:1b:2d:7e:d9:62:5f:
         68:61:eb:cb:96:0c:04:b7:fa:84:40:7c:c2:6a:10:10:bf:ef:
         f1:a4:99:a7:58:2e:56:b3:f7:b3:50:16:9e:12:55:4c:32:79:
         55:06:bb:40:5d:dc:ee:56:cc:cb:9e:86:d1:d1:5f:ef:a2:f0:
         55:44:d2:50:17:2d:02:58:6c:07:3c:76:41:d6:13:d4:31:66:
         37:97:ce:d2:0f:b9:45:7e:ad:e0:60:a5:1c:04:e5:07:54:36:
         34:47:2a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----