Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
File:                     bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft (raw, json)
Hash identifier:          fMSYSJQsZRYiYAXkaqnzVSglfaOA/sbOc75/rM2OVLs=
Subject key identifier:   E3:73:F7:EC:C3:A6:FA:1B:2E:ED:E9:C4:39:F5:27:20:A0:59:4E:C4
Authority key identifier: 6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
Certificate issuer:       /CN=6cc57691c15c9eb3a379917806d294fd39175e07
Certificate serial:       01962F0668DEABDAFA5E2BA53DB9E7E092F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 12:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:11 +0000
Files and hashes:         1: NEV_-oCqja9NUg4iDlmgfjuQWbE.roa (hash: ReSei0m0CMnR22mGMZi2S582O1et/LA16EgWBVKTiLE=)
                          2: bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl (hash: rjJdDjgyJaJeIp86vUJEL67pAACLLdFA6JqgV+beNGw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:68:de:ab:da:fa:5e:2b:a5:3d:b9:e7:e0:92:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc57691c15c9eb3a379917806d294fd39175e07
        Validity
            Not Before: Apr 13 12:01:11 2025 GMT
            Not After : Apr 14 12:01:11 2025 GMT
        Subject: CN=e373f7ecc3a6fa1b2eede9c439f52720a0594ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:da:39:ce:c2:96:cc:8c:1e:2a:97:9a:92:a1:
                    a2:30:05:ff:fa:a7:36:2d:a7:e5:84:fe:d3:8a:41:
                    8f:d6:b5:7e:52:37:90:e9:dc:e5:9a:85:91:c9:b3:
                    63:ca:a1:d1:e3:7a:62:30:f4:64:76:2d:34:27:14:
                    d5:23:a8:f0:48:fd:fd:f3:df:7a:b1:97:ac:cd:bd:
                    c3:df:76:01:32:8a:68:9f:2c:f5:fe:23:67:0c:9c:
                    7e:d6:69:f0:41:8f:a9:e8:df:d0:bf:50:24:be:98:
                    b2:cd:46:04:2f:9c:8b:ff:ed:3f:ff:2d:96:51:6d:
                    3f:51:78:92:a3:e5:a8:aa:ab:43:4a:6c:a4:fc:e5:
                    5e:9d:3e:6f:09:fe:38:04:00:15:66:d5:25:c3:fd:
                    92:76:2e:34:8e:ca:09:c7:f0:25:77:b3:3c:e4:d0:
                    02:ac:db:07:dd:db:87:46:39:0e:5d:84:90:5c:e6:
                    d0:56:9c:6b:ea:66:f8:0a:1c:bc:67:1a:0e:8f:3c:
                    5d:08:e9:e1:94:31:dc:5b:d7:33:da:61:ac:0f:de:
                    e0:ca:46:63:8d:c4:a6:3f:a5:c6:a3:52:b7:79:77:
                    d1:9a:23:12:ec:a0:29:db:5d:27:d5:9d:07:9e:21:
                    ce:d7:d8:d5:83:ad:21:33:f6:8c:a7:f9:14:d6:93:
                    f8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:73:F7:EC:C3:A6:FA:1B:2E:ED:E9:C4:39:F5:27:20:A0:59:4E:C4
            X509v3 Authority Key Identifier:
                keyid:6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:16:e2:ca:54:0d:aa:5b:79:96:db:81:b1:8f:c4:02:4b:db:
         55:21:f0:4b:b7:2e:03:1d:fc:5e:0b:2c:e2:8b:6f:bb:3d:e2:
         20:03:2e:64:c3:39:14:40:51:45:3a:a5:e7:4c:8e:34:c9:e8:
         2e:e3:9b:27:2d:30:cc:16:89:8f:af:17:12:a4:6d:9d:8e:9c:
         f5:34:dd:8b:88:f7:4c:ae:68:0a:61:95:1f:b8:11:1b:91:77:
         b4:95:5f:8a:f8:4d:cf:2d:e1:6e:46:de:33:1b:15:e0:73:58:
         25:2b:c6:56:43:8d:0e:7c:88:f6:e5:31:66:1e:eb:e4:ba:48:
         51:b9:f7:68:0d:db:cc:3d:d6:ba:09:ee:ea:b4:ce:7c:ee:13:
         94:7d:5a:82:6c:88:dd:a7:64:d3:81:30:5e:a9:2b:9c:b4:74:
         3e:94:86:1c:1d:66:67:6c:51:56:19:2f:10:7d:b7:6f:db:9e:
         93:40:36:86:4f:bf:5c:a1:e5:b1:46:68:ac:97:f1:f1:e2:2a:
         c4:f6:bb:97:79:f3:5d:8e:5c:97:cd:18:84:1e:5b:46:00:fe:
         1b:18:0c:97:b8:ad:72:98:2d:88:d8:c1:af:da:82:d0:8a:6f:
         d6:76:64:b8:27:7c:57:fa:ba:0a:eb:dc:89:7f:11:da:d3:c2:
         28:f3:bf:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----