Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
File:                     brk9vAG87DpLmI6PjVMwpaL8Smg.mft (raw, json)
Hash identifier:          Obp79vNVCzEsxuQvaIyBiIhYF+6tabY9ixzC6xxhKEk=
Subject key identifier:   BA:E0:4D:44:8E:A4:B2:B6:A1:93:B1:A5:F8:E0:71:9A:2A:13:3E:9E
Authority key identifier: 6E:B9:3D:BC:01:BC:EC:3A:4B:98:8E:8F:8D:53:30:A5:A2:FC:4A:68
Certificate issuer:       /CN=6eb93dbc01bcec3a4b988e8f8d5330a5a2fc4a68
Certificate serial:       01962FAB20381E56878FD6027F00E25EA4DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft
Manifest number:          0E1E
Signing time:             Sun 13 Apr 2025 15:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:06 +0000
Files and hashes:         1: 5DPWCgybWZa7aXBOD7aRwRIeIns.roa (hash: EY7kLGn+91zHAkvdNmxs56BoLlsYshC66U8Z0FxR410=)
                          2: brk9vAG87DpLmI6PjVMwpaL8Smg.crl (hash: bUVZDUMo7B4U+zl4BBG/7KDJ0py03hpdn959IO2GxYc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:20:38:1e:56:87:8f:d6:02:7f:00:e2:5e:a4:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb93dbc01bcec3a4b988e8f8d5330a5a2fc4a68
        Validity
            Not Before: Apr 13 15:01:06 2025 GMT
            Not After : Apr 14 15:01:06 2025 GMT
        Subject: CN=bae04d448ea4b2b6a193b1a5f8e0719a2a133e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f6:56:6a:5d:d3:e3:f7:20:17:51:ea:d2:cd:
                    15:18:f1:3d:4f:c4:bd:30:2e:a7:b8:de:ef:45:6e:
                    16:c7:62:e5:bf:20:56:7c:85:26:0d:c5:06:9f:d0:
                    bc:0f:9c:cb:b9:bf:99:5f:bb:90:cc:0e:4a:f5:4a:
                    81:6a:56:d3:4d:8e:44:c7:b7:79:f1:ba:23:74:d1:
                    09:0b:5f:87:32:61:95:74:04:e9:d3:4a:80:98:10:
                    cf:2d:43:11:da:51:b6:16:d1:d3:57:96:bf:d3:c1:
                    c8:ac:c5:01:33:65:95:cc:73:2c:92:7b:c8:9d:dd:
                    11:6e:70:da:6b:0e:63:ff:4c:51:a0:87:35:3d:0b:
                    e8:57:41:9a:57:a3:25:a8:03:c9:f6:78:3a:6d:b3:
                    df:99:80:2e:c4:0c:6f:3c:e3:e6:b5:4f:26:01:e6:
                    d9:8e:88:26:db:b0:14:ba:c9:d5:a5:31:8f:df:8a:
                    11:76:33:9e:03:73:be:e6:2e:31:04:c1:05:48:9c:
                    13:5b:37:2a:d7:6c:ea:5f:e6:75:96:91:2f:83:aa:
                    22:4b:41:a5:47:30:3a:13:16:70:bc:32:10:07:97:
                    74:77:5c:53:25:32:72:e3:7c:94:1a:8b:03:d1:1e:
                    06:e1:6c:c4:96:b4:3e:c4:d3:24:50:2b:cb:9c:e3:
                    fb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E0:4D:44:8E:A4:B2:B6:A1:93:B1:A5:F8:E0:71:9A:2A:13:3E:9E
            X509v3 Authority Key Identifier:
                keyid:6E:B9:3D:BC:01:BC:EC:3A:4B:98:8E:8F:8D:53:30:A5:A2:FC:4A:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:22:e0:1d:b6:f0:8f:94:20:c1:ae:64:47:52:4c:f3:76:09:
         bd:43:c2:5b:9a:3e:73:c1:bf:53:b6:31:c3:16:1e:38:b0:49:
         0c:cc:d2:b5:09:ed:fd:7a:33:27:70:9b:6c:ee:54:3b:38:87:
         36:39:aa:a1:6c:c8:d4:48:08:f4:3f:c2:0d:18:b2:78:44:25:
         81:ba:84:b4:68:66:96:2c:2d:90:1f:8e:50:dc:92:64:e2:59:
         76:00:b6:9c:a6:78:58:57:87:52:c5:f0:cc:74:a5:ab:15:28:
         38:4c:da:8a:48:06:9c:59:bc:1f:86:95:53:33:c0:a3:8a:a1:
         4b:18:22:a1:5d:91:e5:f2:fe:9c:9e:6c:94:f6:c1:54:6a:b5:
         b3:6f:38:18:88:05:cb:2b:98:42:6c:dd:36:f4:1e:df:32:e2:
         50:8f:cd:1b:c7:a9:a5:62:8b:6a:ad:de:22:64:4c:df:06:26:
         c8:69:33:af:50:23:0d:2e:df:d5:65:64:9e:67:0b:0a:81:1d:
         87:a6:fd:0a:54:47:7f:3e:9e:e0:b9:be:8f:74:6c:e9:8b:55:
         c9:fe:0d:d1:ef:66:c7:22:da:e8:3d:b0:a0:02:01:31:66:b1:
         00:d2:cf:8b:cd:1a:17:36:fd:25:0d:2a:07:a4:d1:33:18:41:
         df:10:fb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----