Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/9fa815-b5fc-4387-8771-18f0a50c8e26/1/bHwktnELOtfXKCoMlH9rlTHVjsU.mft
File:                     bHwktnELOtfXKCoMlH9rlTHVjsU.mft (raw, json)
Hash identifier:          kcDLc/0KviYjDX5CL/vKdUjwTdPRKG34RwPdf2Pkobw=
Subject key identifier:   EF:FD:6A:4B:6E:2D:40:9E:46:29:4D:F0:2B:25:D2:16:92:9F:97:12
Authority key identifier: 6C:7C:24:B6:71:0B:3A:D7:D7:28:2A:0C:94:7F:6B:95:31:D5:8E:C5
Certificate issuer:       /CN=6c7c24b6710b3ad7d7282a0c947f6b9531d58ec5
Certificate serial:       01962F070EDFD709427B6417D05DBB7F5B4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bHwktnELOtfXKCoMlH9rlTHVjsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/9fa815-b5fc-4387-8771-18f0a50c8e26/1/bHwktnELOtfXKCoMlH9rlTHVjsU.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 12:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:53 +0000
Files and hashes:         1: bHwktnELOtfXKCoMlH9rlTHVjsU.crl (hash: TuEciBzTVmGhyFL0I3XqotVevR/ltdF14Z8TAteAsBE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:0e:df:d7:09:42:7b:64:17:d0:5d:bb:7f:5b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c7c24b6710b3ad7d7282a0c947f6b9531d58ec5
        Validity
            Not Before: Apr 13 12:01:53 2025 GMT
            Not After : Apr 14 12:01:53 2025 GMT
        Subject: CN=effd6a4b6e2d409e46294df02b25d216929f9712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2a:f8:6d:1b:43:43:96:73:b1:1b:57:0d:e9:
                    f3:75:e6:fb:9a:53:ff:37:6f:98:d5:88:90:4f:41:
                    b7:9d:04:fd:35:08:00:84:0d:5e:97:5f:ca:02:21:
                    3f:79:e9:b1:b2:4d:28:61:ec:47:73:80:c7:e3:86:
                    ca:6b:7f:22:41:ed:eb:02:62:96:3f:01:83:3b:05:
                    ac:42:62:c8:cf:4d:a6:fb:bb:00:45:0a:8c:1e:04:
                    7d:55:8b:63:df:d6:dd:87:0b:8a:80:7a:b1:ac:1a:
                    3c:4b:ae:c3:d3:99:1a:5c:93:94:83:55:e9:a0:7c:
                    63:53:68:d9:45:f5:11:c4:05:13:b8:d3:c6:de:0a:
                    9e:ea:7e:aa:67:c3:87:54:90:b0:4c:6c:ef:4e:da:
                    7c:18:dc:0b:52:ff:ba:74:b4:7f:16:26:2a:4d:e8:
                    ba:48:b1:92:4f:23:11:ea:03:6e:5d:a4:96:c0:c3:
                    0e:96:56:bc:0c:e9:cd:00:63:79:28:b9:24:01:f2:
                    db:85:63:45:f2:8d:32:0b:c4:fc:d2:36:ae:31:27:
                    c2:de:b4:ce:a4:69:ad:2b:8d:47:61:30:56:1f:62:
                    f9:40:4e:d2:c8:3b:04:52:46:93:9b:81:13:43:15:
                    7d:a7:f4:84:0d:23:19:a8:9a:e6:eb:3e:70:3d:9a:
                    0a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FD:6A:4B:6E:2D:40:9E:46:29:4D:F0:2B:25:D2:16:92:9F:97:12
            X509v3 Authority Key Identifier:
                keyid:6C:7C:24:B6:71:0B:3A:D7:D7:28:2A:0C:94:7F:6B:95:31:D5:8E:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHwktnELOtfXKCoMlH9rlTHVjsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/9fa815-b5fc-4387-8771-18f0a50c8e26/1/bHwktnELOtfXKCoMlH9rlTHVjsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/9fa815-b5fc-4387-8771-18f0a50c8e26/1/bHwktnELOtfXKCoMlH9rlTHVjsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:66:da:31:cc:2d:11:c8:c4:2a:ab:81:21:7d:97:2f:58:96:
         58:07:2f:b2:c9:bd:1b:86:f4:7a:87:a9:e0:eb:d7:b3:a5:16:
         f3:c7:56:ad:66:0b:d2:db:01:b0:80:cd:a6:61:03:cc:23:d5:
         e3:ea:d1:85:b2:e0:c2:0c:77:20:c1:5a:b7:d6:aa:bc:c3:83:
         d2:6f:1f:70:18:cd:52:33:7b:ae:b0:7e:6f:0b:9a:76:98:32:
         11:be:23:8c:af:08:74:22:e0:81:b3:50:c3:f9:77:a9:dd:4c:
         3a:7e:43:d1:4b:eb:b7:08:9e:33:6b:6a:66:be:6c:71:d4:2b:
         03:e5:26:1f:ef:84:93:db:89:65:48:4d:26:ea:65:7a:c3:84:
         81:83:4f:50:dc:55:db:c8:b8:16:cd:ad:5b:84:7d:96:ba:6b:
         57:67:b6:bb:d7:18:7b:ff:bf:9c:0a:8b:46:c9:1e:67:ac:b1:
         21:06:d6:ca:87:04:31:7a:a9:27:7f:02:1d:b3:63:d5:b8:a1:
         2d:ad:35:26:9f:79:6e:e0:d1:ec:83:36:f9:93:a9:23:2f:60:
         d8:b5:17:c6:7b:65:1f:a6:9a:ed:33:8d:e5:41:fc:ae:64:d1:
         14:54:69:bd:74:a6:12:c5:c4:d3:69:e8:0e:93:34:f0:e0:ce:
         09:87:86:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----