Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft
File:                     bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft (raw, json)
Hash identifier:          qDlME00N5ddnDPkZKwDttE2mCvZY385xD9j3Z0GX67I=
Subject key identifier:   E3:04:B8:CF:B1:6A:34:D7:09:4E:2C:B9:A7:8F:8C:77:BF:8E:33:07
Authority key identifier: 6F:06:04:74:08:86:06:EC:4E:E8:EE:D7:C4:1B:69:43:F8:9A:09:BD
Certificate issuer:       /CN=6f060474088606ec4ee8eed7c41b6943f89a09bd
Certificate serial:       01962E61CD808EB46BAAADB853A7A5A4D745
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft
Manifest number:          082E
Signing time:             Sun 13 Apr 2025 09:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:23 +0000
Files and hashes:         1: bwYEdAiGBuxO6O7XxBtpQ_iaCb0.crl (hash: qV+tPBIsdl18GnoidLenBtd8I3Tu7PSfxz/ABuo/vyY=)
                          2: xfilALq9xVm7LJX_uaRRDqm1ZX0.roa (hash: o3xsXXS0G1bR6xk5CmXK470ksv+YeZHYJ06DDMgu6J0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:cd:80:8e:b4:6b:aa:ad:b8:53:a7:a5:a4:d7:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f060474088606ec4ee8eed7c41b6943f89a09bd
        Validity
            Not Before: Apr 13 09:01:23 2025 GMT
            Not After : Apr 14 09:01:23 2025 GMT
        Subject: CN=e304b8cfb16a34d7094e2cb9a78f8c77bf8e3307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:af:ce:70:bb:01:e7:be:c2:f0:98:b8:c5:4e:
                    ea:97:68:f7:fa:50:11:8c:e2:4b:f0:5f:8b:44:25:
                    4b:98:dc:8c:bc:e4:50:00:a7:9d:2f:ca:a2:9c:9a:
                    e4:d5:c7:ed:b8:d5:a3:e4:49:0b:a8:e0:02:59:dc:
                    73:be:1e:63:8a:87:f2:88:01:b2:77:ac:ba:44:0c:
                    65:f8:97:cc:a3:1f:15:c8:55:68:7a:00:c8:e8:b2:
                    87:c4:15:19:9c:63:87:b7:32:b4:bb:fb:08:a1:59:
                    9d:be:04:f0:16:49:06:71:f0:93:c7:ad:48:86:25:
                    60:ab:61:5a:a3:70:9d:c0:dd:8a:f5:17:a7:cd:33:
                    73:78:ea:ef:3d:e0:cf:2c:14:89:08:41:a7:a2:76:
                    ba:6f:8c:b0:33:41:66:6f:a6:58:78:a0:b4:42:79:
                    a8:93:9f:cf:9d:44:6a:2c:f4:2e:a2:97:c9:1e:a3:
                    8e:fc:d2:47:22:ed:a6:4b:1a:3c:3e:d6:4e:aa:2a:
                    90:01:a8:bf:4a:32:a2:26:18:27:4f:d4:b6:df:de:
                    7d:e9:10:65:b6:34:6d:d5:07:66:0a:f0:08:5d:3a:
                    56:e9:8c:be:fc:03:0d:5f:a1:56:8c:08:7a:7d:44:
                    c6:8a:a3:58:6d:89:23:53:03:f6:5a:d9:bf:35:18:
                    cd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:04:B8:CF:B1:6A:34:D7:09:4E:2C:B9:A7:8F:8C:77:BF:8E:33:07
            X509v3 Authority Key Identifier:
                keyid:6F:06:04:74:08:86:06:EC:4E:E8:EE:D7:C4:1B:69:43:F8:9A:09:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:cb:fc:69:bb:4a:db:dd:8d:69:66:45:3a:ec:30:81:54:09:
         2d:3c:be:03:a2:43:ca:05:64:78:ce:84:f5:5a:c8:06:0d:04:
         b7:61:7a:ef:8c:4a:db:5b:09:83:24:07:23:65:4e:f7:db:40:
         75:3c:f3:32:c8:e0:a2:fd:81:9f:cf:4d:e4:22:d3:d2:18:39:
         e8:17:bd:0a:52:f0:67:ae:0c:10:93:e3:22:b7:4d:04:ea:39:
         13:17:9f:f4:cb:a9:6c:2e:9a:64:d6:eb:81:63:79:7e:5b:95:
         d8:67:97:13:59:57:d8:4f:7b:21:61:10:d2:aa:6b:af:47:cf:
         b8:41:8c:ca:00:ea:b9:eb:a9:04:a1:b0:ae:1a:60:7b:7c:1b:
         3a:73:7b:14:e7:0f:c1:60:ad:d7:40:86:66:ca:6e:44:60:d3:
         8e:47:fd:1c:fc:d4:a8:4f:59:c8:01:46:64:64:ab:a4:e1:fe:
         aa:de:31:aa:aa:21:5e:e3:cb:b4:b2:b9:ae:4c:44:0d:80:e4:
         ec:b1:1d:04:af:f2:17:3c:af:f4:bb:8f:96:0f:b0:77:0a:03:
         75:ca:55:cb:62:ba:6f:12:d8:3b:d4:e2:02:79:87:34:ac:7e:
         49:39:60:91:fc:20:8d:ec:b4:02:bb:f9:39:0d:fa:e1:4a:30:
         79:f0:d2:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----