Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
File:                     bmgcJW1nKYHLOc4lynjPIVz06qY.mft (raw, json)
Hash identifier:          fFCbjSK4INuTgWLoIVhv11HRw6rp2yDUHZpCBOvuqOQ=
Subject key identifier:   D6:41:4B:06:F3:F1:3F:C0:9D:D7:B4:6D:24:A5:6B:6C:E1:19:E1:0E
Authority key identifier: 6E:68:1C:25:6D:67:29:81:CB:39:CE:25:CA:78:CF:21:5C:F4:EA:A6
Certificate issuer:       /CN=6e681c256d672981cb39ce25ca78cf215cf4eaa6
Certificate serial:       01962ECF8780E968C4178558F87B603FBF28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 11:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:14 +0000
Files and hashes:         1: bmgcJW1nKYHLOc4lynjPIVz06qY.crl (hash: J2gA74mAabxTIIj4GpAeO8BLelOaUPJzg0GtPCTrILI=)
                          2: tvKD3UXqZVXDvVX7leTlMKw_qew.roa (hash: WK5XR30REtOfSSrTxnfQEhXv68zn6pJyCz3GjFrJURA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:87:80:e9:68:c4:17:85:58:f8:7b:60:3f:bf:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e681c256d672981cb39ce25ca78cf215cf4eaa6
        Validity
            Not Before: Apr 13 11:01:14 2025 GMT
            Not After : Apr 14 11:01:14 2025 GMT
        Subject: CN=d6414b06f3f13fc09dd7b46d24a56b6ce119e10e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f4:8a:31:6a:1b:f9:61:68:44:8c:2a:f0:7c:
                    e4:aa:cf:9c:39:14:af:31:df:98:48:7b:1a:d3:1e:
                    f6:53:5f:1a:44:73:eb:19:a3:f8:f6:10:30:b3:67:
                    9d:a5:a3:3c:39:f0:37:4a:61:c2:5e:62:51:09:72:
                    67:f6:89:c3:58:b5:28:92:db:6e:cc:70:45:93:7a:
                    c7:e0:2b:0a:08:59:33:48:16:4c:c9:26:55:52:51:
                    12:df:8c:84:ab:84:83:c9:e4:26:2c:a8:3d:8f:54:
                    4d:ef:d3:1b:da:92:a5:5a:46:63:09:de:c8:df:4e:
                    d5:fd:f4:58:cc:5c:be:77:2f:17:07:8a:86:2f:99:
                    97:13:5b:2b:8c:f3:4b:1b:b8:32:15:50:86:9e:7d:
                    84:fd:60:5b:f8:cd:c9:73:ea:4b:fa:94:05:26:fc:
                    26:79:6d:8d:a0:22:d6:b0:e3:18:c2:6a:12:a8:71:
                    bf:f7:82:b0:85:e0:aa:3f:a9:fc:8c:cd:e6:a1:da:
                    80:1a:69:3a:9e:1c:03:ac:b5:c5:b9:b8:78:98:3c:
                    cd:a5:47:41:4d:32:64:fc:3e:bf:89:2d:1f:76:de:
                    c4:aa:b6:a4:e3:26:16:44:bf:c9:4a:50:5b:ef:4b:
                    68:20:f6:25:1b:c3:46:7e:5f:49:9e:12:ad:b6:58:
                    10:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:41:4B:06:F3:F1:3F:C0:9D:D7:B4:6D:24:A5:6B:6C:E1:19:E1:0E
            X509v3 Authority Key Identifier:
                keyid:6E:68:1C:25:6D:67:29:81:CB:39:CE:25:CA:78:CF:21:5C:F4:EA:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:b1:78:72:b1:0d:a8:21:ca:c0:07:ba:61:b5:70:0a:1b:79:
         03:49:ae:b2:28:89:ca:fc:c8:f2:ea:0a:dc:76:8a:01:45:ef:
         8a:cc:6c:f9:d8:29:7f:47:fb:35:83:c5:9c:d0:03:e0:96:a0:
         68:ed:59:61:5d:62:fa:3b:bb:68:a7:e0:77:60:83:19:3e:30:
         1c:47:11:ba:83:13:71:48:f4:3f:17:ef:4b:a1:d3:b2:0d:47:
         9c:e5:92:3b:01:74:bd:9c:7b:d0:e4:fe:0c:fa:30:bc:df:df:
         bf:4c:9b:42:82:0d:a7:bf:ad:d2:7e:de:e8:7f:4d:c7:c0:23:
         d5:07:48:70:bf:8f:4b:ff:11:d9:03:ce:04:b3:01:6a:3d:f6:
         1c:a7:e5:79:7e:2f:3c:b6:11:cd:cd:8d:b3:43:99:a8:80:a4:
         50:0e:05:e8:df:3c:57:7f:e1:70:ed:07:8f:a8:c4:de:21:c7:
         2e:57:35:f3:55:a3:f5:08:92:ff:88:f1:27:04:2e:2b:13:4a:
         a6:1c:0c:79:f4:48:7b:e6:9f:dc:32:71:f1:8e:34:a9:99:60:
         e7:37:a5:5a:ef:88:e9:84:b7:61:08:01:fb:24:87:53:53:bb:
         d5:18:a8:63:6f:5b:b2:06:ea:09:ad:a5:1f:3d:a4:68:e4:69:
         65:fc:bb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----