Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
File:                     u76WEtFEC8bHBOBGXw711spzl6Y.mft (raw, json)
Hash identifier:          joNJPl/kfEnLT4fDJ6J3y6LnprjpVH6V5+czBHWpdhY=
Subject key identifier:   B7:D5:64:D4:94:8B:EA:8B:8D:A8:23:98:F3:5B:08:19:2B:3F:DC:9B
Authority key identifier: BB:BE:96:12:D1:44:0B:C6:C7:04:E0:46:5F:0E:F5:D6:CA:73:97:A6
Certificate issuer:       /CN=bbbe9612d1440bc6c704e0465f0ef5d6ca7397a6
Certificate serial:       01962FAB4190CBD900E63881DF149DE1DE9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 15:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:14 +0000
Files and hashes:         1: D46VMQb05uTNgl5dbNVDFYzDjzE.roa (hash: V0B6OmfcULHphu50p4sAuyLvveC3GQAGdFvTao1f9Y8=)
                          2: u76WEtFEC8bHBOBGXw711spzl6Y.crl (hash: WBpiqI2EEBn7trUArWKwjVWfrqPH9yMlNCvalFVirks=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:41:90:cb:d9:00:e6:38:81:df:14:9d:e1:de:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbbe9612d1440bc6c704e0465f0ef5d6ca7397a6
        Validity
            Not Before: Apr 13 15:01:14 2025 GMT
            Not After : Apr 14 15:01:14 2025 GMT
        Subject: CN=b7d564d4948bea8b8da82398f35b08192b3fdc9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ec:bc:39:ef:1a:30:9c:51:2a:23:01:c4:58:
                    7f:90:8e:28:9b:51:20:eb:36:59:7c:f4:86:30:98:
                    83:cd:54:51:27:7d:38:9b:80:ef:37:b2:f6:39:4d:
                    4e:04:c3:19:70:b7:04:04:2a:b4:d2:6c:9f:10:82:
                    7f:07:73:4e:32:dc:24:6c:d3:8d:24:9d:4b:99:1f:
                    ef:cc:ec:4b:6a:7d:16:0f:ea:b0:e0:8c:f2:2b:6b:
                    bd:3d:72:78:0b:91:43:e5:5b:39:74:13:30:dc:11:
                    df:8f:a1:ed:69:ab:5e:8b:e4:9a:19:6a:91:d8:d3:
                    a8:78:09:01:60:0a:5b:e2:49:5e:a1:bf:cb:a1:7d:
                    10:e1:27:b9:69:13:25:2b:ba:d1:e5:d4:a9:a3:9d:
                    48:45:b4:5c:42:de:ba:28:6d:6c:c0:8c:66:8a:05:
                    dc:3f:b7:ce:93:76:62:30:98:2f:b6:64:86:69:1f:
                    7f:78:c7:3f:06:a3:5f:88:e1:23:70:29:eb:5c:ef:
                    14:b6:20:ee:c5:0d:fc:a4:ba:14:a2:68:f9:8f:78:
                    2e:94:cb:05:3e:a7:8d:2d:e5:d9:fb:50:da:73:f0:
                    10:89:8c:7e:ea:7d:93:9b:4e:4b:b0:0e:9c:f1:eb:
                    fb:43:4e:13:19:be:ba:0e:79:2d:cb:6b:f8:eb:b3:
                    e9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D5:64:D4:94:8B:EA:8B:8D:A8:23:98:F3:5B:08:19:2B:3F:DC:9B
            X509v3 Authority Key Identifier:
                keyid:BB:BE:96:12:D1:44:0B:C6:C7:04:E0:46:5F:0E:F5:D6:CA:73:97:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u76WEtFEC8bHBOBGXw711spzl6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/f2640a-46e7-4650-83c5-cc55b81302cf/1/u76WEtFEC8bHBOBGXw711spzl6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:67:59:ea:84:61:ac:88:4a:64:2f:0d:ff:4c:55:c6:f8:fb:
         19:4b:a6:ad:a8:b1:c3:34:45:19:c7:4b:fa:38:4f:3c:e0:aa:
         cd:ba:00:56:69:a5:f3:79:55:06:f0:38:5c:45:ec:2e:b5:1c:
         c0:e6:a6:4d:7f:0f:51:c3:a5:93:1b:12:5c:9e:42:3a:74:6d:
         82:8c:ef:c4:1f:56:d7:58:9d:39:7f:9a:64:3b:c1:ab:86:0c:
         51:d6:9b:07:0a:41:c9:77:4f:26:56:4e:83:23:c5:f4:40:f7:
         f1:a1:3e:be:e2:34:ce:22:7f:45:79:4a:bd:2d:a1:44:f8:f5:
         d7:36:21:aa:58:c3:74:66:82:a1:92:82:76:44:dd:57:3e:99:
         6a:94:d8:22:0c:b4:f7:6c:fa:fb:aa:e1:ab:e8:7e:2e:87:e8:
         48:3f:b3:50:a1:7d:6e:ed:c7:63:49:48:3d:b5:78:d4:6d:14:
         b5:c9:aa:2a:79:58:33:df:69:f5:f2:7e:e0:0e:84:a8:24:b1:
         79:f0:74:ed:85:82:78:66:f6:f5:95:52:2d:c8:66:de:ef:8f:
         52:7a:e3:7a:5e:d3:4a:66:0e:d5:b8:af:47:f4:fb:70:55:92:
         47:56:48:5f:79:bb:ae:4d:e3:e0:aa:c0:13:07:50:65:b8:65:
         ca:31:51:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----