Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
File:                     bBAkoL37rZXwEGTVGM9uqWa0SIo.mft (raw, json)
Hash identifier:          rwgNn4XsgNXgLg8FmlikOmMmJbVS1sL0ajawGe5SFEI=
Subject key identifier:   5F:05:5B:A0:78:4F:FC:2F:75:5B:4B:52:A2:73:28:BA:D5:D2:87:45
Authority key identifier: 6C:10:24:A0:BD:FB:AD:95:F0:10:64:D5:18:CF:6E:A9:66:B4:48:8A
Certificate issuer:       /CN=6c1024a0bdfbad95f01064d518cf6ea966b4488a
Certificate serial:       01962ECF535055FBFDB341F2DBC1CBE35A4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 11:01:01 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:01 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:01 +0000
Files and hashes:         1: 2jz_GVg3tc2PAmVfZM229I9y7DM.roa (hash: a4U4fdO6/HHzhz/D1fQJsN+9NOOESB95lRB1mTGoD/4=)
                          2: bBAkoL37rZXwEGTVGM9uqWa0SIo.crl (hash: bI58r3aH02YlBQytnv8Bhto29Mu2OL6vzlkBLIq5PH8=)
                          3: qjQqwaE98pw-Tsc3qccVON2SJQg.roa (hash: y4z4CZUi94ZRWjv9y7p8MUe6n4UJbAQ8c5NqooIEDx8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:53:50:55:fb:fd:b3:41:f2:db:c1:cb:e3:5a:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c1024a0bdfbad95f01064d518cf6ea966b4488a
        Validity
            Not Before: Apr 13 11:01:01 2025 GMT
            Not After : Apr 14 11:01:01 2025 GMT
        Subject: CN=5f055ba0784ffc2f755b4b52a27328bad5d28745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e3:14:38:38:59:c5:7c:f8:4e:a4:2a:6d:1d:
                    b6:f7:19:2c:e3:f3:a6:2b:e3:f9:8f:f1:11:0b:95:
                    c4:f3:6d:5a:fc:39:df:69:0d:57:da:e6:11:b8:dc:
                    65:6d:15:cd:d4:62:76:b9:90:77:fd:51:cc:94:cc:
                    19:8c:d3:d3:1d:7e:79:b3:73:ee:0c:a6:7c:19:dc:
                    7c:87:59:3a:41:3a:e5:c1:1f:99:f1:f1:c6:3f:31:
                    fd:02:71:19:44:11:69:21:6e:14:0a:a6:0c:49:37:
                    21:83:a3:6f:92:f7:c7:6f:28:5b:eb:96:e6:61:31:
                    21:05:d4:95:ef:20:4c:3e:cc:60:08:87:a3:01:37:
                    e6:cc:74:73:6b:f6:01:d2:0a:44:03:ed:cb:05:a7:
                    ea:e7:10:08:24:cc:70:16:0d:ba:97:4f:91:2d:35:
                    21:34:14:67:cd:0d:83:80:2a:6f:dc:7e:5c:65:fd:
                    ce:a4:9b:bb:e1:ce:31:f5:e6:e8:df:cf:f3:eb:e5:
                    ca:01:a4:bc:2a:9a:ea:33:9a:b5:e6:15:61:ff:3a:
                    d8:59:69:1c:de:c9:de:45:73:5a:41:44:7c:d3:b4:
                    ed:cc:5f:cc:3d:77:a2:d3:9a:af:09:47:e4:5e:b0:
                    30:52:21:b1:a9:b0:34:da:68:6e:ec:17:e5:4f:0c:
                    a2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:05:5B:A0:78:4F:FC:2F:75:5B:4B:52:A2:73:28:BA:D5:D2:87:45
            X509v3 Authority Key Identifier:
                keyid:6C:10:24:A0:BD:FB:AD:95:F0:10:64:D5:18:CF:6E:A9:66:B4:48:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:cb:86:05:fc:1f:9e:28:e8:ea:ad:16:95:e1:e2:f5:fb:3e:
         94:91:f8:5a:09:91:8b:12:d6:92:f4:6e:7d:eb:39:54:8d:1f:
         bc:d3:16:de:c6:be:77:19:a1:6c:b8:a1:62:07:cf:be:b3:2d:
         8a:1d:5c:25:10:84:d7:f1:dd:5e:13:ef:8c:68:af:f1:14:86:
         14:f3:90:82:70:09:e7:3e:76:00:81:36:b3:53:fe:48:04:6d:
         70:14:b8:5b:4f:d8:8a:bd:05:60:3c:88:6e:9b:28:b0:e9:d1:
         d6:56:7f:a5:be:fb:c9:58:8d:58:36:27:0f:cf:b3:d7:23:09:
         8d:dd:2b:9e:e7:ad:8d:d0:c5:56:6f:f6:3e:19:d9:de:ae:32:
         ff:de:1d:06:e5:2f:3a:2d:ae:99:22:d0:c3:74:2c:1c:b3:16:
         b8:f4:4f:b6:bb:c5:0f:08:cd:f8:e1:5f:ba:8d:4c:46:71:bf:
         ef:bf:89:73:35:54:23:09:5c:bd:09:63:1d:cf:4d:8f:27:db:
         a0:1c:f5:c1:2b:07:47:9e:32:bd:01:9e:22:85:2e:93:7c:56:
         b4:13:25:71:1f:2d:1d:ad:2f:1a:51:78:96:85:0d:e4:b5:15:
         08:59:a9:fd:6d:2c:66:d6:75:81:cc:a2:db:d3:2c:7b:44:da:
         5f:06:7f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----