Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
File:                     v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft (raw, json)
Hash identifier:          r6AlHsc9teVzt0h1cuXOhdt24OYa5qSyPbcDj5vqELo=
Subject key identifier:   62:3B:63:9A:07:9B:D6:D1:AF:6B:9A:9F:9C:6F:B8:A0:D9:6F:7B:22
Authority key identifier: BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB
Certificate issuer:       /CN=bf7a0258a521e99d213fb30e79667e584e37c7db
Certificate serial:       01962F06DD2B2DB575080312203A4BFD67DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
Manifest number:          0420
Signing time:             Sun 13 Apr 2025 12:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:41 +0000
Files and hashes:         1: bE_NJ1O4li4w5jwL1p9Rzj6psYs.roa (hash: kKa0W4IHbF8D6GG7pogePLVv7EcTQEGkGc0M7Xs7J84=)
                          2: hoEO8bI4_PQXnv3luwEAaFGc0JU.roa (hash: bcr7JWWwUvc7qdiUDI1oNsEA+fH4+6yxoDEjsKx/8Wg=)
                          3: v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl (hash: kieF3W/MZyCScW1QjYskr9GPf9LPY+oM3Pa53tfdhcA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:dd:2b:2d:b5:75:08:03:12:20:3a:4b:fd:67:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf7a0258a521e99d213fb30e79667e584e37c7db
        Validity
            Not Before: Apr 13 12:01:41 2025 GMT
            Not After : Apr 14 12:01:41 2025 GMT
        Subject: CN=623b639a079bd6d1af6b9a9f9c6fb8a0d96f7b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f3:a9:de:8a:37:8f:73:8e:93:d5:9b:38:d4:
                    e2:fd:3b:17:ba:5f:34:63:1c:04:2e:c1:fa:c3:97:
                    60:14:02:5d:a5:e6:6d:38:1a:6f:ea:1c:0a:bf:9d:
                    9b:06:68:e9:09:56:82:2b:fa:2c:47:cd:b2:93:53:
                    e8:db:87:b5:fe:c4:c7:80:96:6d:62:88:d6:ad:28:
                    87:a0:1d:a1:9f:3a:8a:1e:71:fd:51:4a:18:7b:46:
                    6c:ad:ca:da:a2:f5:af:d3:34:51:c3:85:8b:d3:e1:
                    19:48:af:3a:64:1e:fb:86:36:28:0f:9b:1a:22:ab:
                    cc:f0:a4:a7:72:44:ea:81:31:32:1e:fe:5a:1e:8c:
                    db:40:43:e9:68:ac:24:d8:f2:36:1e:ba:5b:0a:8f:
                    65:49:06:42:75:26:f1:69:cf:ad:da:fe:43:8d:55:
                    b1:72:20:09:e8:a3:8c:da:73:54:cc:1e:93:92:9a:
                    09:98:31:51:c4:c7:6c:54:ec:a2:20:ea:0e:1b:fb:
                    89:a2:b3:ab:c9:59:b8:a1:90:e5:d2:a5:75:fa:d2:
                    58:7d:a9:4e:e7:25:c1:19:8b:2e:71:28:93:dd:09:
                    cc:70:1d:d7:47:cb:5e:83:b1:cd:a8:f8:eb:f7:8f:
                    37:d1:23:07:ac:0f:cc:d2:f3:73:d6:1f:ba:42:54:
                    bb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:3B:63:9A:07:9B:D6:D1:AF:6B:9A:9F:9C:6F:B8:A0:D9:6F:7B:22
            X509v3 Authority Key Identifier:
                keyid:BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:b2:b9:b4:5c:53:1a:09:3f:06:0c:42:b2:bd:c4:71:87:29:
         37:5c:e5:cd:2b:15:6d:9c:ab:1e:a7:39:ea:2b:55:91:a5:67:
         d6:a6:84:f6:18:97:cf:60:b8:99:5d:12:56:a7:47:df:b4:8b:
         4e:a3:4e:8e:d6:ef:7d:32:41:5f:b3:1d:89:f2:6c:04:75:12:
         f2:63:93:7d:b7:50:0c:e6:ae:92:6d:bb:d1:ff:72:ec:9d:14:
         43:88:7c:b3:a8:ec:c9:b1:e0:02:a7:a9:45:0e:e5:32:98:6a:
         b6:c2:70:ee:a7:62:81:5b:f5:27:3b:4a:44:a8:76:e6:71:10:
         cb:0a:e3:24:89:5e:ab:60:56:92:75:da:c1:4d:5a:bc:90:78:
         a7:13:09:6c:61:24:ba:e5:41:9c:87:9f:85:1e:b7:2a:b9:6a:
         26:44:bd:22:b6:35:96:23:f0:1b:d4:aa:d9:da:8c:1f:5e:3a:
         a4:62:00:f0:75:39:63:8f:8b:f8:fd:c2:d7:73:e7:5e:ec:ab:
         1f:12:4c:ef:e2:6e:be:80:19:e8:fc:a6:bf:ba:95:9e:f1:ba:
         7d:a8:2e:75:e4:9e:b2:93:6f:2e:e7:b3:51:ff:17:f1:b8:13:
         b9:6e:91:cb:0f:30:79:5f:e2:6a:28:09:e1:74:b1:30:74:ed:
         10:a5:6d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----