Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          AnibgQFWaA/CNIuuCu4qeUDR5vXqQER0DItJY1+YtLg=
Subject key identifier:   8C:7C:D5:ED:C8:AC:79:04:FE:62:1E:F6:3E:C6:9C:C0:37:93:12:0A
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       01962FAB39F05335A19786D9C4EB85DCC0F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          0D18
Signing time:             Sun 13 Apr 2025 15:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:12 +0000
Files and hashes:         1: CJ2ClG_JdfjMlY4Z6z_RGPwGBQA.roa (hash: hDhd3vstthEFV1qbikUvxMAn4J2gEu+fzCJOKi1wsv4=)
                          2: Q2-iT_0Zjzv9GH02ya8YtILj8aY.roa (hash: w4dI7huh81K1h/L8FZLaE05OH1acBhhl3bfSdimUZDw=)
                          3: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: NGuZ+lvBNQmQxJLS8SBaYtFvqlUneo0exzJaY+bWurw=)
                          4: oUFbfosRerYL4FfAZ6uYtohyzp4.roa (hash: JUInv/aznsbzYjMy5pV4S9vPkxKeoCUa9vUJpVjQ3KU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:39:f0:53:35:a1:97:86:d9:c4:eb:85:dc:c0:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Apr 13 15:01:12 2025 GMT
            Not After : Apr 14 15:01:12 2025 GMT
        Subject: CN=8c7cd5edc8ac7904fe621ef63ec69cc03793120a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7b:c9:64:5b:87:e3:6b:06:0b:82:e3:ca:05:
                    c2:e9:c4:5e:94:c7:8b:0b:fd:77:c3:53:ae:26:c7:
                    09:d7:61:69:db:04:8a:ad:31:f4:e0:f6:d0:2d:18:
                    ab:ba:2d:41:c3:0e:ca:e6:59:39:c2:12:6e:f9:97:
                    16:75:0e:f7:7a:f3:37:81:c7:01:a7:b6:5a:3a:bd:
                    c8:6a:c9:73:71:91:66:8e:a0:1f:cf:c5:a1:18:66:
                    12:03:4e:66:6b:64:63:cd:fe:c6:6f:45:b4:e2:d5:
                    76:bd:7e:d3:4c:f5:b3:a3:67:71:da:ab:2d:35:9e:
                    4d:a3:1b:38:b0:63:b8:7c:80:3e:4f:2e:ea:13:d4:
                    4d:60:89:3e:36:b9:f6:7d:c3:ad:eb:c9:04:0b:ea:
                    2e:2a:66:01:d8:3c:8b:30:0c:86:6b:e2:26:39:0d:
                    a1:d2:ff:c8:8a:aa:42:ea:75:99:d1:c6:93:95:0c:
                    46:f4:f9:bc:26:93:85:75:94:b4:a8:96:66:cb:98:
                    d3:ac:88:e0:00:bf:ce:d1:d5:78:40:80:f7:62:36:
                    0e:e7:ae:9e:a9:d8:92:80:40:7e:9f:83:5a:bc:a2:
                    7a:2a:b2:b6:1d:0b:a8:22:ac:83:74:a9:5e:a8:8a:
                    45:90:b8:7d:d6:3a:28:1d:1c:4c:c6:52:29:a7:b2:
                    66:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:7C:D5:ED:C8:AC:79:04:FE:62:1E:F6:3E:C6:9C:C0:37:93:12:0A
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:ed:e1:56:68:d9:f8:7b:02:8e:02:a1:7d:77:c3:3f:21:95:
         88:f9:09:87:09:b3:4c:e8:60:0c:4b:cc:97:ed:a1:73:2d:94:
         da:2a:3d:fb:72:18:32:df:df:90:1a:8c:63:7a:d1:ab:b8:c5:
         0d:00:50:0d:27:44:c4:db:51:30:5f:cf:91:d1:c8:7c:c9:21:
         cb:1d:55:ec:5e:70:49:a7:b4:16:5b:f0:de:1f:8e:79:c1:25:
         7f:ba:35:b8:fb:53:f5:bf:67:27:13:c6:30:94:49:2b:88:54:
         9e:f8:4d:ff:44:e2:f2:7d:d1:03:7a:fb:38:27:5e:4f:23:6e:
         b4:20:30:5a:d7:67:37:20:cf:50:f0:bb:a5:58:27:a8:81:18:
         a3:39:d5:02:15:b3:89:41:8a:20:22:73:78:61:14:34:64:c9:
         d7:36:d7:1c:c9:6d:94:74:5b:bf:4a:c6:bc:1d:94:c1:8d:90:
         08:68:c4:eb:a7:81:ed:21:b0:11:97:6f:4a:8a:1b:a9:e3:2c:
         8d:52:8e:9b:f0:b3:2f:21:5a:ee:13:3f:05:96:b7:1e:f9:8b:
         c8:9b:d4:63:84:32:d8:bd:a6:fa:88:c9:7c:bf:1d:05:1f:ac:
         50:cc:6f:74:bd:3a:67:0d:73:f4:42:57:e6:2c:f0:7f:84:61:
         9a:df:27:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----