Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
File:                     bwXPdx2ZkucP9nQOayBiDOUtDYs.mft (raw, json)
Hash identifier:          hWWf3okgf8y4fI13hJ4S6lgeOB38Eu3eATfBFP/UP38=
Subject key identifier:   DB:16:6C:F6:E6:FC:70:2D:9D:7A:C3:D2:7A:97:5B:81:C2:78:78:A1
Authority key identifier: 6F:05:CF:77:1D:99:92:E7:0F:F6:74:0E:6B:20:62:0C:E5:2D:0D:8B
Certificate issuer:       /CN=6f05cf771d9992e70ff6740e6b20620ce52d0d8b
Certificate serial:       01962E98D9F37ACDD56D9659CDC90B02EF9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwXPdx2ZkucP9nQOayBiDOUtDYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft
Manifest number:          0A89
Signing time:             Sun 13 Apr 2025 10:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:31 +0000
Files and hashes:         1: bwXPdx2ZkucP9nQOayBiDOUtDYs.crl (hash: 644qYFC8CCXlo/GlnJlZZ5mJKF93crv+zWWcxbrD+Lw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d9:f3:7a:cd:d5:6d:96:59:cd:c9:0b:02:ef:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f05cf771d9992e70ff6740e6b20620ce52d0d8b
        Validity
            Not Before: Apr 13 10:01:31 2025 GMT
            Not After : Apr 14 10:01:31 2025 GMT
        Subject: CN=db166cf6e6fc702d9d7ac3d27a975b81c27878a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:91:00:89:09:ae:d8:0c:18:91:95:bd:02:e4:
                    af:27:df:f2:a7:e8:ef:2a:cc:cd:07:82:59:1d:7c:
                    d8:8f:e6:36:e6:f7:e1:26:54:5e:e7:84:9c:35:cd:
                    54:c3:6e:9b:79:bb:9d:f6:c4:2b:f8:6e:e1:63:db:
                    8a:ef:5e:9d:1f:06:ba:2a:9c:d5:78:4f:0d:ec:9d:
                    29:89:62:02:5a:82:4a:46:c7:53:62:58:60:35:96:
                    e6:85:a3:35:fd:5f:bf:ed:64:15:4e:0f:ce:0d:b2:
                    7e:03:ed:e7:8d:f5:48:a3:75:4e:ab:e4:10:07:7f:
                    1c:9c:69:2a:08:14:bc:50:c4:eb:4f:ac:24:1c:6d:
                    35:6d:b5:d4:a9:62:40:fa:5f:5c:23:00:61:1e:a3:
                    30:47:f2:db:24:bb:1d:4d:8e:d7:75:cd:62:ec:59:
                    e5:c4:6b:5c:9f:a1:0d:92:52:9e:8e:31:2e:fb:b9:
                    3e:1c:d0:15:ba:10:13:e6:34:f8:38:02:2a:62:57:
                    c6:d1:c1:0d:e1:e3:c6:27:ec:cf:b0:fb:79:c3:ea:
                    d8:15:91:23:2a:6e:b3:df:8f:a4:99:3f:43:60:8d:
                    ba:12:29:e7:b0:81:e4:ee:58:b5:93:fe:27:67:72:
                    4e:f9:34:f0:9a:6b:77:02:28:b7:c0:1d:cf:16:b0:
                    c3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:16:6C:F6:E6:FC:70:2D:9D:7A:C3:D2:7A:97:5B:81:C2:78:78:A1
            X509v3 Authority Key Identifier:
                keyid:6F:05:CF:77:1D:99:92:E7:0F:F6:74:0E:6B:20:62:0C:E5:2D:0D:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwXPdx2ZkucP9nQOayBiDOUtDYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a23404-f219-49f5-bf33-245650f842d5/1/bwXPdx2ZkucP9nQOayBiDOUtDYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:98:81:21:87:97:e1:95:7c:f0:47:ca:c0:4e:d4:13:89:ae:
         0e:31:e8:61:07:67:53:5f:71:5e:44:95:3f:4a:79:01:c7:b7:
         15:e5:10:ee:c7:aa:11:26:61:9d:69:57:d1:04:de:84:e2:91:
         0e:77:56:d9:50:56:55:ca:fa:74:a5:3a:c9:40:85:6d:14:bb:
         05:f7:ca:93:58:8f:6f:dc:d5:3e:e3:0b:af:62:a0:26:59:77:
         39:bc:c9:62:ca:9d:15:bc:5f:3d:0d:9d:5c:54:3b:13:d7:69:
         96:8e:10:ee:e6:d5:53:73:2c:c9:66:53:27:41:99:a9:b8:c9:
         f0:e2:d8:70:52:51:e2:f8:9d:07:66:75:eb:e5:76:1b:f7:da:
         ea:62:ce:c2:63:96:f2:c1:32:2d:0b:0b:f8:07:d1:a5:a6:d8:
         eb:77:c3:f6:60:51:4c:ba:61:db:11:9a:ea:43:fe:fd:27:c7:
         47:3d:d7:ee:0f:a8:a5:bc:8c:4a:ad:f7:45:ea:02:78:ad:77:
         fb:b8:0c:6b:b9:6f:51:8a:46:1c:cc:9d:fa:ac:29:33:80:6d:
         f7:84:81:c7:8c:9f:bb:65:8e:30:d7:92:9a:c1:a5:27:30:f8:
         de:24:bd:56:c9:d4:7f:18:e7:60:3d:3f:2c:0d:87:c8:3d:87:
         85:04:82:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----