Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft
File:                     BuLSfTDs_0J3HEq5d6gq6lina04.mft (raw, json)
Hash identifier:          yJll1Q1ZcOH4ejQ1HN7qWE5PjYZzGobpa76MVvY/V4s=
Subject key identifier:   EC:62:10:F0:6D:72:1B:69:CB:A1:D0:D2:F3:F1:EB:3A:F7:D7:32:7A
Authority key identifier: 06:E2:D2:7D:30:EC:FF:42:77:1C:4A:B9:77:A8:2A:EA:58:A7:6B:4E
Certificate issuer:       /CN=06e2d27d30ecff42771c4ab977a82aea58a76b4e
Certificate serial:       01962F06C86D9FB592515A8231CDB6D38AB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BuLSfTDs_0J3HEq5d6gq6lina04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft
Manifest number:          02BB
Signing time:             Sun 13 Apr 2025 12:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:35 +0000
Files and hashes:         1: BuLSfTDs_0J3HEq5d6gq6lina04.crl (hash: xqHs5tRlZuNFazfeU2eAYWV6EDiWFHSCBw0M5jtFTX8=)
                          2: F9NENsgLQplgyDxaKboJGp-ngV4.roa (hash: aqyInFH9uBhCwBTndxpchZMGLxp6pudfSp9X2MnmgCg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:c8:6d:9f:b5:92:51:5a:82:31:cd:b6:d3:8a:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06e2d27d30ecff42771c4ab977a82aea58a76b4e
        Validity
            Not Before: Apr 13 12:01:35 2025 GMT
            Not After : Apr 14 12:01:35 2025 GMT
        Subject: CN=ec6210f06d721b69cba1d0d2f3f1eb3af7d7327a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:44:fe:c4:32:32:09:b2:00:ed:55:81:85:c3:
                    73:2e:89:b3:99:db:77:72:fe:dc:1e:d2:4d:e3:27:
                    7a:9f:f6:96:40:11:89:71:cf:a2:85:fc:2d:8f:8d:
                    ce:26:f5:7b:43:aa:56:1b:30:fa:a3:4a:92:81:fb:
                    fa:78:0c:c2:4f:19:eb:1f:66:f6:93:b7:f3:54:48:
                    9d:8a:a9:92:ee:69:f1:2f:8a:90:7b:d6:ef:24:54:
                    ff:39:66:15:17:9e:7d:00:6c:7c:b2:32:ba:56:13:
                    08:9f:b0:09:bd:ac:9b:87:cf:e3:66:b0:d1:d3:24:
                    a7:e8:eb:47:ce:8f:72:63:3c:c9:1b:30:06:be:00:
                    27:c9:08:99:3c:6b:ad:a6:10:19:37:e6:1b:8d:fb:
                    34:0e:8d:66:70:56:fa:c7:b8:fa:95:ff:fd:93:92:
                    cc:51:01:c4:79:27:c5:98:cc:53:a6:8b:79:8a:ef:
                    97:68:05:9c:32:b0:fb:df:0b:d7:cc:47:a1:4c:5f:
                    d9:4a:2c:16:e2:5f:a3:8f:3a:c4:df:48:fb:f6:13:
                    7e:16:e0:6e:cb:9f:a4:5f:50:66:d3:54:ee:92:08:
                    ad:a6:54:09:ed:b4:c8:f6:c4:f4:60:a2:fc:4e:92:
                    e1:ab:90:76:b6:89:f7:10:98:a3:69:a0:7a:23:bd:
                    7c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:62:10:F0:6D:72:1B:69:CB:A1:D0:D2:F3:F1:EB:3A:F7:D7:32:7A
            X509v3 Authority Key Identifier:
                keyid:06:E2:D2:7D:30:EC:FF:42:77:1C:4A:B9:77:A8:2A:EA:58:A7:6B:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuLSfTDs_0J3HEq5d6gq6lina04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/20913b-e506-4760-88b6-6d98324b9916/1/BuLSfTDs_0J3HEq5d6gq6lina04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:bb:90:da:f1:13:a8:16:56:74:f8:b9:3d:30:b5:64:33:97:
         d0:de:23:fc:21:49:f6:08:82:16:e8:57:4b:db:d7:fd:57:fe:
         0e:e9:70:3e:cf:6b:e5:a0:c2:8a:4f:87:43:5c:99:32:3b:9d:
         91:b1:8e:b5:9a:5d:9d:53:9b:aa:1b:e4:ff:ed:ca:a3:b6:cb:
         82:74:21:2c:4a:95:cc:0b:a8:6e:98:f4:a0:81:cf:61:8c:29:
         2d:b5:b9:f3:35:fd:ea:3d:63:1a:67:c3:05:be:f2:ae:82:30:
         ca:ac:10:cd:ad:32:d0:fc:05:f8:6d:76:de:b9:e4:48:43:38:
         ee:82:7f:6c:18:0d:dc:09:34:b1:8c:21:65:ec:20:fa:24:0c:
         24:40:63:40:ac:84:2e:c0:dc:4d:d6:7a:1a:fb:b9:74:59:46:
         82:83:c5:00:1c:8e:eb:70:0a:3b:3e:7d:a2:84:e6:bb:c7:9a:
         48:66:75:a1:5b:63:b1:dd:2b:da:09:f8:f2:8e:f8:eb:8b:2f:
         c3:8a:e8:9c:a6:fe:eb:63:43:76:d3:b7:91:e6:d1:32:de:92:
         ce:55:94:24:f8:17:01:bd:05:23:0a:29:46:d4:c2:4b:16:f8:
         c7:b7:9a:ae:e8:32:f2:79:5e:8e:3c:d8:2b:20:39:4d:b2:52:
         21:14:23:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----