Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
File:                     bzU9GF_B600HBKS0qJD5i4tP74M.mft (raw, json)
Hash identifier:          YRMKKhD/NI8amSzTm2ek+K9SdueuAn9FuHzJRezmgFk=
Subject key identifier:   3E:C9:64:67:2E:67:5D:B7:7D:15:E7:E2:55:DA:24:73:5C:C5:61:FB
Authority key identifier: 6F:35:3D:18:5F:C1:EB:4D:07:04:A4:B4:A8:90:F9:8B:8B:4F:EF:83
Certificate issuer:       /CN=6f353d185fc1eb4d0704a4b4a890f98b8b4fef83
Certificate serial:       01962E98886A950CE042366A9FDDCD32BB19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft
Manifest number:          130F
Signing time:             Sun 13 Apr 2025 10:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:10 +0000
Files and hashes:         1: bzU9GF_B600HBKS0qJD5i4tP74M.crl (hash: g/hy+BltCnS/S4aEzTZPrkIcPpmaWHoUoVsAqV1CXjQ=)
                          2: gvsVSFz03ym6x4GX1RIpPiUYpbE.roa (hash: qMyunpUmf/QPIAP0ujJIHQg80YhQYSCuTZCFegCEJUA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:88:6a:95:0c:e0:42:36:6a:9f:dd:cd:32:bb:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f353d185fc1eb4d0704a4b4a890f98b8b4fef83
        Validity
            Not Before: Apr 13 10:01:10 2025 GMT
            Not After : Apr 14 10:01:10 2025 GMT
        Subject: CN=3ec964672e675db77d15e7e255da24735cc561fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d1:a7:5b:4f:ab:af:61:6f:4f:2c:80:bf:54:
                    5d:62:ed:29:0b:13:3a:66:c7:7d:b8:54:9c:35:0c:
                    81:42:cf:16:1c:0a:b5:a5:d4:15:7a:50:fa:29:48:
                    36:b5:2a:aa:7c:8a:6d:88:b4:3e:44:92:fb:77:60:
                    06:b2:29:9b:0c:e5:b2:7d:60:7b:08:31:3e:94:e1:
                    bd:48:8c:4c:b8:7a:6e:37:08:16:9d:98:e5:f8:7f:
                    36:53:f9:ca:02:1f:2b:e4:76:bf:d5:2b:c9:dc:d5:
                    81:b2:24:e4:84:61:83:dd:e6:13:84:42:b9:2f:06:
                    82:03:00:e3:f1:e4:70:e8:57:f6:7e:f7:d2:dd:a1:
                    c0:51:ba:1c:6a:b8:7b:26:63:2b:ca:2b:52:64:88:
                    29:a9:3a:6a:29:60:91:56:0b:67:6e:3d:2f:7f:87:
                    27:78:02:76:27:29:e2:6a:6f:c7:c7:19:92:39:fa:
                    35:14:7f:13:f5:5d:33:e1:83:1f:ee:82:8a:14:6f:
                    11:30:1a:01:b7:5e:f9:5e:b6:f6:1b:25:c9:cb:17:
                    08:7b:ac:e9:ad:87:6b:ab:d5:5b:3a:5d:fc:99:56:
                    c1:84:12:08:b2:8c:50:4f:89:8f:2a:0d:8c:45:91:
                    87:70:cc:94:87:e7:27:63:90:d6:e3:45:ee:03:20:
                    da:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C9:64:67:2E:67:5D:B7:7D:15:E7:E2:55:DA:24:73:5C:C5:61:FB
            X509v3 Authority Key Identifier:
                keyid:6F:35:3D:18:5F:C1:EB:4D:07:04:A4:B4:A8:90:F9:8B:8B:4F:EF:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzU9GF_B600HBKS0qJD5i4tP74M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/a06a67-d4dc-458e-abe6-4bb1fd0375f2/1/bzU9GF_B600HBKS0qJD5i4tP74M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:27:73:59:2a:e3:2a:95:f7:41:94:cf:00:83:36:11:af:c0:
         78:3b:d3:f9:69:eb:54:0f:f7:81:bc:83:50:14:29:3c:b4:41:
         21:6b:d5:a0:a3:c3:f7:ba:b6:04:1f:45:79:27:80:83:79:b3:
         0f:79:f8:36:3d:2a:29:ae:0d:3d:e8:ae:a1:f9:08:09:e5:7e:
         2b:e4:c3:a6:11:25:14:f4:55:91:34:67:ec:3f:7d:d3:f5:ac:
         1e:81:88:e3:9a:5a:c7:98:f7:b0:55:11:a4:05:6a:ad:3b:10:
         a4:e4:2c:4d:7b:0f:a6:a4:fc:2c:ba:bb:f3:c2:9e:79:6d:e1:
         a6:ba:cd:cb:f6:71:c7:32:a5:2d:fa:68:a5:ab:e5:7d:a5:cb:
         4d:ca:01:2f:1e:9d:76:47:c1:57:52:3c:20:d1:12:a3:fe:3a:
         6b:32:12:18:af:6a:07:a6:72:57:f9:94:65:ad:f3:d0:87:4d:
         66:32:fa:45:65:4a:b9:4c:3e:61:6f:84:ff:d0:a1:96:89:94:
         10:c5:8c:25:81:83:9b:45:5e:af:81:0a:b1:9f:be:d4:37:10:
         53:6a:b4:72:cc:5f:ba:ce:d0:3f:fc:e8:56:4b:94:c5:17:b9:
         ca:f0:ec:0a:58:98:29:23:1e:fe:c2:04:94:03:fe:c6:aa:b4:
         62:6d:54:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----