Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.mft
File:                     I7KazNTA1fX4N36n9GNDt2Brq3w.mft (raw, json)
Hash identifier:          BD4rZ8WRNHRquvDR28kIaYv7zaqyjTK7xr/1X4md4Vg=
Subject key identifier:   BB:1B:B2:8C:37:50:C1:75:4D:48:5D:EA:D6:04:D7:27:7E:DF:CB:22
Authority key identifier: 23:B2:9A:CC:D4:C0:D5:F5:F8:37:7E:A7:F4:63:43:B7:60:6B:AB:7C
Certificate issuer:       /CN=23b29accd4c0d5f5f8377ea7f46343b7606bab7c
Certificate serial:       01962F06FBB1681EC52C3E2FD1E1BC064B9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I7KazNTA1fX4N36n9GNDt2Brq3w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.mft
Manifest number:          0B65
Signing time:             Sun 13 Apr 2025 12:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:48 +0000
Files and hashes:         1: BY3gmYE2jAUAzVYgNkSF1kzgx38.roa (hash: o+T/NGOLnxz7Wv8sLagAUwobjqcsqFCif9O5RgNrbi4=)
                          2: I7KazNTA1fX4N36n9GNDt2Brq3w.crl (hash: WTU2rI8joEJswCbVKlbmH0zcXHuVXbTAgGV7ERRnqHU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fb:b1:68:1e:c5:2c:3e:2f:d1:e1:bc:06:4b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23b29accd4c0d5f5f8377ea7f46343b7606bab7c
        Validity
            Not Before: Apr 13 12:01:48 2025 GMT
            Not After : Apr 14 12:01:48 2025 GMT
        Subject: CN=bb1bb28c3750c1754d485dead604d7277edfcb22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5b:bc:3e:d9:37:7f:c5:fe:3d:61:2b:0a:61:
                    17:0d:77:57:ff:5f:13:c9:db:76:16:df:c6:09:08:
                    7b:2b:51:1a:2d:9c:ee:1b:17:ee:a9:76:2e:d6:9c:
                    df:cc:d9:fb:01:f8:3c:12:7b:ef:da:92:45:3b:0c:
                    b5:bf:26:6f:cf:ad:2b:57:e1:b9:86:9a:98:91:a3:
                    04:0d:95:9f:34:87:32:01:ca:1e:26:c8:23:0c:ab:
                    cc:df:da:ac:09:83:de:1b:0c:5b:49:c9:98:53:ee:
                    a2:b1:c1:d3:04:44:d2:2d:eb:87:4a:59:a1:cd:4e:
                    ba:1b:89:cf:11:3f:1b:bb:13:5e:1b:b5:0a:46:7c:
                    4a:cc:27:17:71:37:29:b5:9c:de:5c:8e:e1:8a:40:
                    a8:2e:a8:3c:b3:2e:ce:c0:65:67:b8:03:04:65:7e:
                    22:a6:85:ba:84:23:80:5d:1e:d7:c1:8d:a4:f5:3d:
                    94:8d:42:6d:de:89:47:9f:34:1b:0f:56:c2:92:dd:
                    ab:20:38:1d:5a:4c:52:ab:1f:d9:12:4c:6c:49:ab:
                    4a:0c:0b:24:e7:05:37:b6:15:8d:71:09:cd:20:ca:
                    62:7e:e9:83:e8:88:43:c3:c1:0a:ff:f6:f1:98:53:
                    19:1a:8c:33:4f:41:e5:58:1c:da:a9:26:ee:ac:8a:
                    45:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:1B:B2:8C:37:50:C1:75:4D:48:5D:EA:D6:04:D7:27:7E:DF:CB:22
            X509v3 Authority Key Identifier:
                keyid:23:B2:9A:CC:D4:C0:D5:F5:F8:37:7E:A7:F4:63:43:B7:60:6B:AB:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7KazNTA1fX4N36n9GNDt2Brq3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/811db9-cbe0-4a89-a220-1174a428036b/1/I7KazNTA1fX4N36n9GNDt2Brq3w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:99:77:07:1f:c9:14:ca:37:3b:92:30:45:0e:c5:59:b6:7d:
         be:ec:11:4f:7f:d0:df:94:e9:89:8c:64:bb:06:88:3e:b5:e3:
         20:4e:3e:6e:92:46:52:b9:d0:bf:c3:42:41:c4:c0:bd:db:60:
         75:a4:01:7a:0b:67:d5:ab:79:b3:e4:0a:7e:83:23:a5:a4:b8:
         53:e6:94:47:9c:5b:f6:79:68:3f:18:25:b8:28:59:ad:3f:f9:
         b2:c3:c8:23:92:f9:9e:6c:e8:d1:01:8c:00:ac:6b:ff:45:4d:
         45:bc:05:74:7d:68:37:be:63:98:a6:43:c2:c7:5c:c4:bc:50:
         82:e1:f3:37:35:b8:3a:50:e4:eb:be:dd:2b:04:8b:3b:c9:c8:
         2a:3b:e4:d7:68:a8:74:4d:83:77:15:d0:d0:43:72:77:b9:5a:
         60:82:cd:8c:50:03:0d:f6:bc:8c:ab:65:4a:71:e2:82:47:e9:
         51:fd:51:b6:4d:40:74:df:9f:fb:84:26:8c:9c:33:5a:84:75:
         ca:4e:02:5d:a0:b4:a9:f1:8a:0e:70:fc:69:6b:d2:14:a1:21:
         5e:07:58:a6:f8:0a:cf:39:ce:31:41:d1:58:e8:7a:d1:92:ca:
         19:f1:c9:bf:29:2e:fc:df:4f:c5:5a:3f:ce:1b:6c:ae:5b:bf:
         36:be:56:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----