Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/096f45-9978-4887-893e-e7b5b397cd26/1/bfcVxYs6uhTfvf_-FTvea3p_L9g.mft
File:                     bfcVxYs6uhTfvf_-FTvea3p_L9g.mft (raw, json)
Hash identifier:          GFubhelJc7FxPAiZ+VUEtvI50k17639Ilmf+Qe5JWm8=
Subject key identifier:   C6:BC:09:5F:BB:C6:44:E8:1B:65:56:A6:F3:21:7D:8E:8D:BD:09:B8
Authority key identifier: 6D:F7:15:C5:8B:3A:BA:14:DF:BD:FF:FE:15:3B:DE:6B:7A:7F:2F:D8
Certificate issuer:       /CN=6df715c58b3aba14dfbdfffe153bde6b7a7f2fd8
Certificate serial:       01954823D3367F1461D5745DEE5973AE879C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bfcVxYs6uhTfvf_-FTvea3p_L9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/096f45-9978-4887-893e-e7b5b397cd26/1/bfcVxYs6uhTfvf_-FTvea3p_L9g.mft
Manifest number:          0A21
Signing time:             Thu 27 Feb 2025 16:01:02 +0000
Manifest this update:     Thu 27 Feb 2025 16:01:02 +0000
Manifest next update:     Fri 28 Feb 2025 16:01:02 +0000
Files and hashes:         1: bfcVxYs6uhTfvf_-FTvea3p_L9g.crl (hash: KSyEXxgnHhjNWDto3tQUOUrJPPcTwwR9ywiZ5557MSk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:48:23:d3:36:7f:14:61:d5:74:5d:ee:59:73:ae:87:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6df715c58b3aba14dfbdfffe153bde6b7a7f2fd8
        Validity
            Not Before: Feb 27 16:01:02 2025 GMT
            Not After : Feb 28 16:01:02 2025 GMT
        Subject: CN=c6bc095fbbc644e81b6556a6f3217d8e8dbd09b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2e:a3:07:fc:ab:72:d6:ad:3f:ff:ea:a6:46:
                    1b:5f:71:78:c5:6f:8b:f8:8b:82:ec:84:0c:7e:29:
                    11:7e:e6:75:01:f3:3e:6b:d5:a5:66:90:a8:24:55:
                    40:17:87:6d:4a:f5:64:69:4d:a8:65:7e:a5:78:e0:
                    ed:9c:f0:34:5d:f2:fd:78:0f:0c:b2:1e:f4:d9:9a:
                    09:4e:59:02:cc:fe:f6:40:b8:88:1e:0e:30:dd:5d:
                    ac:6c:0c:65:ed:66:94:eb:ab:ca:a7:ea:80:71:a7:
                    d4:53:82:a7:d3:e8:3e:49:21:c6:3f:50:6f:17:47:
                    aa:d7:65:36:f6:ed:a1:01:f6:c8:e2:fb:af:83:c6:
                    26:92:bd:e8:9c:ec:e4:8b:de:af:52:57:7b:c6:06:
                    38:f6:ba:09:56:77:4e:89:3f:f4:af:6e:78:ca:07:
                    aa:80:3d:06:9d:ac:4c:20:d1:70:0f:57:b0:42:62:
                    b9:b8:c8:78:88:c4:a4:09:ff:79:2d:15:71:2a:06:
                    7b:ad:9b:b3:42:09:df:55:d6:d2:81:e4:54:32:8c:
                    8b:07:a8:1d:b6:97:65:42:d8:c0:86:d6:86:94:8f:
                    ed:37:c7:a3:5e:fd:44:0a:f7:12:66:de:82:5d:f6:
                    8a:be:df:4f:e4:2e:fc:5d:5f:8c:c4:2f:15:59:dc:
                    9b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BC:09:5F:BB:C6:44:E8:1B:65:56:A6:F3:21:7D:8E:8D:BD:09:B8
            X509v3 Authority Key Identifier:
                keyid:6D:F7:15:C5:8B:3A:BA:14:DF:BD:FF:FE:15:3B:DE:6B:7A:7F:2F:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfcVxYs6uhTfvf_-FTvea3p_L9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/096f45-9978-4887-893e-e7b5b397cd26/1/bfcVxYs6uhTfvf_-FTvea3p_L9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/096f45-9978-4887-893e-e7b5b397cd26/1/bfcVxYs6uhTfvf_-FTvea3p_L9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:4f:63:a0:9e:9f:60:96:56:b0:7c:bb:9a:95:dd:a9:ac:fc:
         a3:ec:7a:57:64:6f:8f:30:15:2b:5e:70:11:13:c7:88:9a:da:
         2e:8a:f5:eb:01:5c:be:3b:24:12:e3:20:32:7b:78:c1:e1:81:
         7b:17:a2:b7:07:b4:3e:f8:58:17:ff:0d:48:92:d8:b2:f7:c7:
         4c:6b:24:27:70:ca:e4:28:fa:5b:22:01:66:40:6a:63:39:00:
         8d:36:78:53:5e:28:e7:58:ed:2f:e0:86:a9:ee:df:56:63:88:
         32:f3:27:5a:95:07:e9:b9:bb:2f:23:20:ef:17:21:ca:bf:a1:
         d0:c2:a3:c3:9c:45:68:58:f3:df:b0:42:23:d0:e0:9d:c9:47:
         9f:53:51:48:80:85:91:eb:16:50:b0:00:bd:17:d7:ca:3b:e1:
         9f:5e:e6:f4:c7:4a:41:15:0e:06:a8:95:db:ef:02:b6:da:6d:
         93:7a:b8:70:d0:cb:c9:db:a9:c9:01:b2:db:9c:e4:23:ff:b4:
         26:2d:2d:c0:7d:a5:ee:43:3e:c2:33:8c:1e:f4:5b:7a:b0:ad:
         8b:ae:0b:f0:e1:28:db:39:33:bb:30:8a:18:32:1c:36:c1:84:
         23:ef:a0:75:5e:9b:bb:f5:aa:4b:3c:54:a8:f4:c0:42:59:9d:
         3d:84:cb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----