Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
File:                     bm17yr_MMI1CAFPEgqDVn7EoLjA.mft (raw, json)
Hash identifier:          jPKhdpti3X8k2OFkKXr9zyITg4DhzwTlylPYVYtL85A=
Subject key identifier:   93:44:21:D6:27:19:E5:1A:91:E5:88:F5:66:10:B0:93:DB:99:0A:83
Authority key identifier: 6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
Certificate issuer:       /CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Certificate serial:       01962F747F53E05EEFF5FCB8896397D2AB68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
Manifest number:          14FE
Signing time:             Sun 13 Apr 2025 14:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:25 +0000
Files and hashes:         1: GZloKAlNjoz3XqCPEm1hG7NatS4.roa (hash: 8eh4qVR8sPOLuprIgQpWCtpZheryazvSABEayh5f4b8=)
                          2: bm17yr_MMI1CAFPEgqDVn7EoLjA.crl (hash: C7/Z2BfHS5Y+wDy3B25MFllbNAY1aDlMbUNECMsJoX0=)
                          3: cVY_8rS3kZPDu1e0r3R63BtqpCQ.roa (hash: kfP4tSXYf9NAzPYnY28UC1ftu4NWH1iXr6TiCyzu6Bo=)
                          4: eSp8AI1UZ1ZHG1u2BcfDkkpePCM.roa (hash: wRG3Lif+KDOdrPbOSFcdJXTCfp36yCqfMsVM+rFpRi4=)
                          5: vVfAaVV4RQ-v10Ln3XvS11S8vIQ.roa (hash: pAR+AqdDFp48BMgN58F8Y9CgzqQ/1Cphi0yffPmxt8E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7f:53:e0:5e:ef:f5:fc:b8:89:63:97:d2:ab:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
        Validity
            Not Before: Apr 13 14:01:25 2025 GMT
            Not After : Apr 14 14:01:25 2025 GMT
        Subject: CN=934421d62719e51a91e588f56610b093db990a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ce:87:f4:3b:b4:bd:7c:8c:25:ad:5f:dd:9c:
                    9f:1d:6a:dc:de:b1:98:04:22:ac:30:b3:6b:f5:eb:
                    b1:fb:0e:76:48:51:6a:24:2a:e5:e1:65:5b:0a:52:
                    89:84:1d:b1:21:30:30:90:65:e5:ea:3b:35:57:54:
                    d7:ee:0c:a6:a7:d2:72:db:da:30:9d:c0:85:25:22:
                    45:ff:38:43:10:61:cc:c7:3e:68:7f:6c:4e:2d:ab:
                    2c:05:44:33:67:c7:3a:86:85:58:bf:9d:14:d3:c5:
                    f5:cd:34:63:05:b5:2d:17:59:b4:64:2f:ca:82:46:
                    a6:04:77:db:fc:ae:d0:6d:14:6e:a5:3f:1f:24:3e:
                    b5:e6:23:40:2c:58:3a:e9:f8:e6:94:ff:d6:6b:23:
                    99:02:e7:f4:f0:4b:e3:60:0d:ab:b1:cb:2a:b7:88:
                    07:b3:7b:03:29:6c:2d:43:29:5b:0b:74:fc:80:a4:
                    72:53:b4:b3:b0:20:a1:69:ee:1c:ba:eb:b4:e0:f1:
                    8a:52:de:ea:91:32:8a:27:d9:17:82:7f:45:ee:4c:
                    a3:15:0d:11:c2:18:7d:d2:de:89:9a:db:85:09:3a:
                    54:12:4f:60:41:ad:33:c5:54:93:5d:5b:9d:a3:a4:
                    3e:70:11:5c:12:1c:15:ec:67:77:a2:5c:2c:50:82:
                    db:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:44:21:D6:27:19:E5:1A:91:E5:88:F5:66:10:B0:93:DB:99:0A:83
            X509v3 Authority Key Identifier:
                keyid:6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:b5:b2:29:02:2c:38:f4:a7:c6:6c:98:20:a7:55:97:24:7b:
         c5:a0:73:58:e3:d6:74:41:9d:59:10:52:4b:af:59:86:e9:ac:
         b1:c2:de:0b:0d:4c:f3:8b:33:01:8b:e4:84:04:28:ba:d5:42:
         73:b0:17:d3:97:e5:c7:33:b9:94:84:94:d8:54:7f:bf:e1:db:
         25:f7:8c:0e:6c:49:ff:0d:ab:89:06:fb:35:63:b5:9a:69:c9:
         d4:d3:37:0b:86:56:56:f3:ae:8a:9d:bf:8b:fd:28:1a:95:6e:
         a3:91:5b:c6:eb:7a:ce:7a:5f:29:5b:e3:72:3a:00:27:f8:6e:
         c3:50:3b:60:02:08:b7:1c:65:6f:e8:57:3d:30:ca:b4:1d:92:
         de:63:00:53:5b:e0:bb:08:e6:3e:4e:ef:38:7e:c6:f3:70:c9:
         6c:2e:58:05:2e:4c:c3:2f:b1:ec:0e:a6:1f:12:01:98:cb:31:
         88:d7:14:31:09:eb:1b:12:0a:ea:ae:c7:6c:c0:ea:1b:c9:9b:
         c8:01:db:79:cf:f4:7d:54:76:97:3f:06:b0:80:43:08:74:a7:
         a5:ff:20:d4:96:f7:bb:5b:90:1b:cf:8e:38:b7:e3:30:e0:0d:
         55:84:ad:32:f4:ff:45:23:e2:6d:16:d0:e5:f4:0a:e6:f1:a8:
         60:94:41:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----