Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
File:                     bz2JqB_CmfOcCS5PbQFzqanPvGU.mft (raw, json)
Hash identifier:          GnONEud3SL+LlU3NEm43xdo33AknqiG2ZzUZSLQwMIs=
Subject key identifier:   63:87:4D:A0:0A:06:FB:6F:CA:DA:C5:B8:CA:62:5A:D4:4C:D0:83:AE
Authority key identifier: 6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
Certificate issuer:       /CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Certificate serial:       01962E61E901D3B286FD5AFC626D291ECD6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 09:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:30 +0000
Files and hashes:         1: _OBCt42Qgl4wI2H058mG4uDYUOw.roa (hash: jWbxYRFs270K2f9wkh6LdpAj2cDPsQg7s0mhGOvBxRQ=)
                          2: bz2JqB_CmfOcCS5PbQFzqanPvGU.crl (hash: GKwjZbsXYSE8TG2yv1Ojg0C/bCqkRmh1NdrcCq+1MFE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e9:01:d3:b2:86:fd:5a:fc:62:6d:29:1e:cd:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
        Validity
            Not Before: Apr 13 09:01:30 2025 GMT
            Not After : Apr 14 09:01:30 2025 GMT
        Subject: CN=63874da00a06fb6fcadac5b8ca625ad44cd083ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:30:65:a0:fa:1c:7c:1d:10:c7:70:93:12:2a:
                    c7:62:d4:f0:17:e4:2d:e4:93:ee:a7:ae:d6:b4:c0:
                    ad:00:09:e7:2d:40:d3:f3:c3:f4:97:da:8d:b5:10:
                    4e:82:ed:f1:41:27:48:9c:a3:a4:cd:97:72:9b:38:
                    61:88:46:32:3b:56:3a:49:77:a8:3a:1d:1d:79:49:
                    3e:de:87:6f:5d:a0:fe:ea:2b:60:84:a4:fb:c9:d7:
                    0d:dc:e1:2f:d6:60:45:ef:66:2f:f7:ed:ea:0f:f7:
                    70:62:5c:78:eb:b6:88:70:90:dc:e6:25:72:4d:42:
                    2e:1d:ad:61:96:ff:1a:2d:0a:d6:f1:46:da:6f:e8:
                    98:a7:70:08:aa:cc:9b:86:52:66:a2:1c:1e:c8:5c:
                    94:c7:92:5b:95:91:b3:ae:ac:e9:c2:35:13:77:e2:
                    19:fe:28:3a:67:f8:3f:b9:49:27:d0:7e:32:e6:b8:
                    71:a0:20:50:57:8e:b3:6b:c4:64:44:c8:df:79:74:
                    3a:98:62:25:ee:37:fd:17:d4:b7:70:a1:a8:0b:cb:
                    c0:aa:72:70:a9:d4:75:1d:e0:1f:43:4b:c7:c5:fd:
                    6d:50:d4:c7:28:7c:ea:3c:6e:65:d9:aa:74:63:f9:
                    4e:30:f0:60:67:a3:82:90:5d:ca:53:d1:55:9d:27:
                    86:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:87:4D:A0:0A:06:FB:6F:CA:DA:C5:B8:CA:62:5A:D4:4C:D0:83:AE
            X509v3 Authority Key Identifier:
                keyid:6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:94:34:96:5b:e0:c4:f6:c4:a1:17:d5:32:d5:14:a5:86:58:
         6b:73:45:ad:63:52:77:e9:fb:69:04:18:c2:1a:a8:ef:a2:b0:
         8a:9f:c5:bb:99:48:00:f5:2d:9a:6a:28:db:05:58:fc:57:21:
         f7:9d:0b:45:a8:49:8e:6b:97:30:d4:60:f0:4e:1f:92:b4:17:
         a1:cc:4b:4f:74:76:83:6c:07:ff:e2:d8:e3:7a:dd:5a:dd:b8:
         03:2b:fb:d5:e6:76:20:6b:9d:d7:80:a5:22:1a:3c:e3:0b:92:
         78:77:f2:ce:2e:1d:3b:2f:52:82:d4:e3:ce:4a:2d:27:96:5c:
         e7:68:fb:dd:6f:e7:04:5d:ab:7a:eb:1e:62:47:41:d3:9f:c2:
         ea:2d:1b:c6:51:d2:8a:66:2a:aa:9a:25:0a:fd:43:3d:67:42:
         16:e1:1e:e4:02:f3:51:07:d0:32:6c:bd:ed:09:94:77:d8:80:
         79:ce:9a:63:91:62:94:70:06:99:52:8b:e0:a8:9f:33:dd:4d:
         f3:f8:af:74:23:1a:0b:aa:f9:ec:80:4e:71:b0:0f:0a:a4:7d:
         82:32:f3:a4:56:f4:6d:a3:01:8d:41:bf:71:42:59:98:9d:ee:
         14:1d:d8:13:e2:e4:83:1d:79:e2:ae:2d:bf:0b:2c:04:22:ec:
         68:1a:e2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----