Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft
File:                     bOl89NjQvBezrx1ixNcUiGYb0hI.mft (raw, json)
Hash identifier:          zYq7+H7gtE+xgxZSQNLH22XsLIhwCimIXzuIWj/ds5M=
Subject key identifier:   DC:FC:44:9B:F0:8A:36:07:1E:3B:A8:3D:5D:74:A9:51:4D:57:B9:A5
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Certificate issuer:       /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial:       01962FAB8EBA4B48F5294E18F505690925E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft
Manifest number:          14F4
Signing time:             Sun 13 Apr 2025 15:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:34 +0000
Files and hashes:         1: Af8LoP7Lc3Ri1EjEl2aPSimN8N8.roa (hash: K3jq+ZPDX3ZWFw5k3Zz+FhB98xNgrxje9TzL4q7xQ84=)
                          2: F2A4Y0MrgEztwlWitJZvMyHSYcU.roa (hash: w50mpPDFrcclMXuIaVxZ4+xtSUk5AU18fPWu5EoX+LA=)
                          3: HDwNTyOMXjdcFIbI5Dg8ZGceIPc.roa (hash: xGqkyX+qZQ75xb5Nb+DtuxrBcbMbXYywOv/jqNzFE9U=)
                          4: J1CKtsXx9r_LHHrlYsJGTJF509U.roa (hash: Wy6xl+FAMDx5u89yFxnteVYqnAsEeBLLKMZFfJdUW6I=)
                          5: Uh2lETEq8E5x-jAu-VnjQrM5VGg.roa (hash: SoBuut5hx6X/4eMmfxkxmJvGDUdRqdsnwXxbmDCgQsE=)
                          6: V9Tcb7av_dVNBRfc9o8N4UA1rso.roa (hash: grBhVeV/JDROWekOKeK0iGvKNav3Jg9ZyJda99GGyG4=)
                          7: Vv7xuEIJNPkNiS2jgKXFiJ0hO5o.roa (hash: 0tBte5YJPRScKJDnL/xskQjq4j0+cjIuEo3Z5S4On/k=)
                          8: YY5vnq-WY3ttKAPBwWUwZDNoZ94.roa (hash: otf25hemgRYV3JPKjRYvJ8q5HrlB5I1ctES0TPSG1ck=)
                          9: _sq0c5GTAFHDkK0kB1xS-FJEkxE.roa (hash: 0/aQ7T6vcLRIStkXpDsfCFlQb8OkLcG1wf2/+Q//xZk=)
                          10: bOl89NjQvBezrx1ixNcUiGYb0hI.crl (hash: xTAjx0227TM8gmRwqfy9yimEiCWle2YFYpFdvvklrj8=)
                          11: bgndW0CmBQuiHxQFDGV1p4kfQ0w.roa (hash: 69wNM6Nj33ysdv0n+TRiRf/aZRUnSe2bA4XmQXvr6Ug=)
                          12: nRXz0JWuVzTuqgJJowbVl480fPU.roa (hash: 8yilskVPxe2I/+785iQCSlJBQxLK7FQ+9fHJRaIbBIk=)
                          13: ok2coLlZfCNf012-KQnTYpk7lZE.roa (hash: jPQ1+YObpchvAlB5pc4INo3tzPPIYQQgACezxT56CVQ=)
                          14: s3CD24AurNDhU5l0KzX89OIgsIY.roa (hash: j74AELSwt2VeN/kZd/dKyAyFPFjNPOflv3KMrplCA7M=)
                          15: whbNPX7xpImhIktrpipKoQzAFZo.roa (hash: Jtvnk0ncEqCQ/ZQ9F0sCk3O4UoG6D0dlD2s9B3IWjbk=)
                          16: y2chyLi0MiNw5kPgCGuG_lAJm6E.roa (hash: aBY4sS6r8TuI74TUuwhLmDR0B3e0KyzhgW6eBiCSGXY=)
                          17: yCCs4shbMfXFkRbB-dbVm3aK1dE.roa (hash: ERGKfWwqWpDoNIV4hNRq6bDPGoH2AztZvrPKQ4MnRxU=)
                          18: yqrbohxedJqZYRfOM_ZbeFgbUDk.roa (hash: 5D+jOOYzSjHZwRxIJ5GcJlLwrz/EOLrzaFXp3+Dosvg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8e:ba:4b:48:f5:29:4e:18:f5:05:69:09:25:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
        Validity
            Not Before: Apr 13 15:01:34 2025 GMT
            Not After : Apr 14 15:01:34 2025 GMT
        Subject: CN=dcfc449bf08a36071e3ba83d5d74a9514d57b9a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4a:c1:7a:26:63:25:3b:bc:63:c3:cf:b3:fe:
                    d9:69:6b:20:0e:7d:f9:aa:5f:25:0d:32:66:5e:95:
                    8f:b5:8d:d4:d2:20:88:b1:76:c9:a8:0b:f2:f8:7b:
                    8e:d9:d4:30:b5:d2:d9:c2:45:fa:ef:f7:c9:14:69:
                    9e:8c:da:06:e5:22:7d:60:6f:84:74:99:cf:a6:e2:
                    3f:e7:7a:4c:3a:37:ee:ae:54:61:0c:66:18:21:e4:
                    36:b5:40:59:31:e1:a9:13:cd:53:9a:6c:1a:1f:1d:
                    58:9d:8f:d2:87:ef:f1:d8:b1:8d:fb:74:40:99:13:
                    a4:19:a9:ff:fa:13:db:40:94:a9:25:d9:77:30:c2:
                    70:00:41:1e:5b:21:10:42:1e:5f:23:38:fd:98:8e:
                    e3:ff:a8:1d:20:1c:9e:b1:2c:d7:5a:02:74:c8:f5:
                    60:9d:a4:3d:8b:a8:b8:ab:26:4c:04:00:5b:96:05:
                    02:5a:53:2c:b0:1f:22:04:aa:4c:27:98:1f:0f:c0:
                    ba:c1:5f:61:cf:98:99:ec:42:cb:21:85:33:18:e3:
                    8d:9d:15:79:31:7c:25:38:e8:79:59:f6:18:47:a2:
                    74:0a:ab:42:7a:fe:24:08:75:32:0a:62:8b:a2:91:
                    75:27:95:2b:ce:11:87:38:74:10:ed:7c:90:a8:4b:
                    9d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:FC:44:9B:F0:8A:36:07:1E:3B:A8:3D:5D:74:A9:51:4D:57:B9:A5
            X509v3 Authority Key Identifier:
                keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:94:62:96:59:05:30:62:f3:67:53:70:d4:a8:80:b5:a0:50:
         72:66:df:45:94:c5:8a:50:2b:4b:f2:21:cb:1e:ac:b7:14:d5:
         b3:cb:ec:48:a3:78:ad:56:49:4c:b0:fd:9d:b9:34:e1:f9:8b:
         c5:b8:2b:db:e6:b3:cb:45:ef:bc:ac:35:30:2a:27:11:b7:c6:
         67:d8:30:fa:5d:78:02:c8:f9:48:66:e7:62:99:a9:5f:b2:ec:
         33:d4:7a:29:09:15:e3:c2:1a:9b:d0:09:64:d6:10:f9:c2:4c:
         b6:86:89:ea:a0:ef:d5:62:eb:8e:6c:0a:cc:9d:9e:b3:79:43:
         3e:3d:93:9a:0c:12:27:33:69:04:a8:dc:d3:58:9b:86:e5:af:
         63:8b:43:de:e4:59:3a:00:48:f1:e8:fa:18:64:92:7f:0a:21:
         f2:53:14:11:b1:0d:13:2a:87:c0:09:6a:d5:ea:1b:8a:37:39:
         86:fc:2e:cf:09:58:4d:25:10:d4:2a:5b:6b:10:4b:4c:7e:a9:
         fb:50:64:47:a4:52:6e:63:24:dd:f9:68:8c:9e:74:4a:a7:19:
         ba:c8:1c:c0:16:f5:c4:10:36:06:4d:19:44:5c:b8:69:4c:f3:
         77:61:17:64:4e:66:40:06:34:24:ff:24:9c:1e:2a:f9:dd:e3:
         ed:15:d5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----