Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.mft
File:                     bkCd70qKicqI9XGCxS7W1w-5GXY.mft (raw, json)
Hash identifier:          aLBPQIerlaCBXELYIYPA1RSt9ayWhHMTgPk8j762tMA=
Subject key identifier:   36:60:2E:14:AE:FC:B0:7F:D9:F4:1E:FC:6F:65:21:84:1C:F6:B4:52
Authority key identifier: 6E:40:9D:EF:4A:8A:89:CA:88:F5:71:82:C5:2E:D6:D7:0F:B9:19:76
Certificate issuer:       /CN=6e409def4a8a89ca88f57182c52ed6d70fb91976
Certificate serial:       01962E61BD4C4A79CDCF014ABFC8A2A20A29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bkCd70qKicqI9XGCxS7W1w-5GXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 09:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:19 +0000
Files and hashes:         1: 1-OsNCAIB8BtnJpCmSk5vs9AfqRw.roa (hash: rov7VSnSSae/bJ4kPmKmJWJ9MKvyKBsrk/qcPi6/iFE=)
                          2: 9J9PrXmCNB--oR4MRGOzZcKbWlw.roa (hash: 8ukYcG1/HqvKX0B3kiFSlIN1cfw+XxyIB9UHL+2qKP8=)
                          3: bkCd70qKicqI9XGCxS7W1w-5GXY.crl (hash: Xmaq08MhYC2SKDtQS1teRzDxc/CxZTzUHAmmBBXZfkc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:bd:4c:4a:79:cd:cf:01:4a:bf:c8:a2:a2:0a:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e409def4a8a89ca88f57182c52ed6d70fb91976
        Validity
            Not Before: Apr 13 09:01:19 2025 GMT
            Not After : Apr 14 09:01:19 2025 GMT
        Subject: CN=36602e14aefcb07fd9f41efc6f6521841cf6b452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:07:12:68:f8:eb:39:23:b0:a9:f1:a2:14:6c:
                    79:4b:c6:ad:bf:e5:2e:76:9d:ad:48:6e:78:dd:48:
                    8f:11:09:0b:aa:91:93:8e:a2:8a:90:7f:90:e5:c1:
                    6f:71:e2:45:28:62:2f:fc:65:9c:d4:14:0f:c5:19:
                    de:89:5d:a9:f1:41:44:8b:d3:3f:24:34:6a:f6:1a:
                    ef:0a:b4:7c:91:74:0b:ba:6c:05:75:38:76:6f:88:
                    9c:6e:27:ab:93:af:30:93:65:55:82:3c:ff:06:05:
                    f7:5a:ca:1a:86:4a:82:1a:0d:35:0a:f0:d6:42:52:
                    d6:01:07:4f:73:8a:13:0d:56:e1:02:3a:ee:42:17:
                    1c:d8:b1:81:1c:36:c8:11:a9:1b:8f:39:74:ae:60:
                    e3:b3:c2:85:ce:77:98:32:c0:c4:7d:c7:b8:d6:8e:
                    10:13:57:4c:45:77:15:20:b8:d3:2e:0f:af:df:39:
                    bb:15:0f:74:ab:ed:5d:81:b6:79:2b:c9:ea:5f:3c:
                    59:fa:87:70:a4:46:3c:ae:a4:c6:50:30:f1:56:e5:
                    1e:a9:07:9e:f3:8b:cb:ee:0d:68:94:05:cd:33:08:
                    6c:6c:6c:93:c1:31:08:cd:46:45:5b:7d:4c:9e:6d:
                    59:8a:1f:9e:4b:48:48:b9:82:57:94:18:71:5d:57:
                    c2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:60:2E:14:AE:FC:B0:7F:D9:F4:1E:FC:6F:65:21:84:1C:F6:B4:52
            X509v3 Authority Key Identifier:
                keyid:6E:40:9D:EF:4A:8A:89:CA:88:F5:71:82:C5:2E:D6:D7:0F:B9:19:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkCd70qKicqI9XGCxS7W1w-5GXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:bc:4f:cf:2b:f0:d7:df:59:c3:cb:b0:51:f1:42:9a:0b:80:
         1f:17:eb:77:da:8b:a4:92:5d:38:62:cd:a4:cc:76:77:92:f8:
         45:67:c8:ea:c4:ab:ac:86:d4:6f:2b:ca:5e:43:99:36:ee:04:
         da:4f:de:f0:17:eb:a1:8f:85:79:7b:25:da:d9:70:66:d9:ea:
         6c:82:73:f6:6a:46:ab:c3:9e:01:4d:75:92:42:e5:74:08:5a:
         81:1b:9b:d4:53:c8:0c:ad:66:f8:e5:a3:c2:fc:3a:e2:8e:ea:
         b5:e0:58:ae:ac:82:72:5e:dc:20:a6:7a:2d:d1:1b:6b:be:dc:
         a8:0c:da:a1:8b:f9:af:70:03:9a:be:13:6b:1f:d5:2a:bf:11:
         ae:0c:8e:02:f8:bd:2d:3b:e8:e5:6e:97:bd:d6:b7:0a:9e:ad:
         a6:7b:5f:95:39:cf:a7:e7:c3:4e:c3:d2:9b:ce:45:16:67:20:
         09:ed:05:eb:fb:93:ec:23:b3:fb:c7:0b:38:d4:27:38:bb:11:
         39:0f:e5:04:16:73:47:fd:bf:8b:62:4f:d5:85:92:09:ef:61:
         29:f7:14:fb:72:13:7b:a0:c7:eb:a2:61:ee:c0:fd:f1:d2:1f:
         95:3a:71:89:da:44:01:8f:d1:9e:5b:bf:25:0a:18:ae:99:f2:
         d4:e3:2b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----