Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft
File:                     v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft (raw, json)
Hash identifier:          h9WXK4Sjs+c2t7p5pDNquhj8F8dSum7CwE1xqW0IcnE=
Subject key identifier:   A4:46:C1:B0:AB:B2:DC:1C:91:2C:F0:84:11:FC:86:11:2E:0E:95:ED
Authority key identifier: BF:A5:F0:E7:65:47:57:59:57:BC:92:C6:DD:DD:08:4D:3E:A7:F8:63
Certificate issuer:       /CN=bfa5f0e76547575957bc92c6dddd084d3ea7f863
Certificate serial:       01962E61AE7D81F6155983C54DCD6207E6A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v6Xw52VHV1lXvJLG3d0ITT6n-GM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft
Manifest number:          13FC
Signing time:             Sun 13 Apr 2025 09:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:15 +0000
Files and hashes:         1: RyCW3YF5iKkzrNHX6rZe54l5IMM.roa (hash: nnvkgafHFhfZcY1hKxlsPbFkmUe449pia8RGh1NFs+Q=)
                          2: aJ0uGpexjSkAa27B-n72oqb3t3I.roa (hash: H6fzloTmxNo2mJK6Qd1BL+h1srxz+hjXl3IHpHqT1Kw=)
                          3: v6Xw52VHV1lXvJLG3d0ITT6n-GM.crl (hash: t8y73JLs0OVXmeyWO+njAfznmXt1esruI7JCFmWXAUw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ae:7d:81:f6:15:59:83:c5:4d:cd:62:07:e6:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfa5f0e76547575957bc92c6dddd084d3ea7f863
        Validity
            Not Before: Apr 13 09:01:15 2025 GMT
            Not After : Apr 14 09:01:15 2025 GMT
        Subject: CN=a446c1b0abb2dc1c912cf08411fc86112e0e95ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:16:b5:c1:59:d9:39:ba:cb:79:a7:9e:1d:80:
                    2f:d5:cb:bd:06:7b:3a:91:e9:58:6e:fa:fb:ec:dd:
                    c1:25:f1:71:85:34:32:d0:57:ee:2c:8c:f3:bc:63:
                    47:36:11:de:84:6d:e2:65:52:cd:d5:35:44:92:15:
                    03:bb:4e:e4:27:eb:d7:be:a5:04:eb:62:58:d2:c1:
                    1e:eb:b4:e5:18:c9:21:84:58:bb:0f:79:5c:c3:06:
                    78:8b:5b:b3:6e:6b:6f:e6:ba:4f:89:09:1b:ed:75:
                    8c:18:99:2c:68:17:02:91:8b:59:8f:24:84:6a:6a:
                    6f:2c:bf:39:ea:df:23:74:1e:f0:61:df:a9:3b:e9:
                    86:be:33:45:91:63:ca:72:50:76:2e:67:32:46:48:
                    4f:d8:e3:6d:83:6a:b0:f8:7e:5a:14:b0:76:ad:66:
                    91:0f:49:7a:5e:02:0c:df:10:20:10:c8:80:35:fc:
                    da:b7:2f:41:10:20:93:60:96:2d:8f:d4:f9:4e:4d:
                    5b:80:7b:67:f8:83:3f:21:e4:e2:00:b4:7c:66:67:
                    40:5b:55:a4:d6:52:0f:be:c8:c8:55:2d:ee:30:7c:
                    5b:a0:69:f9:5d:69:61:ff:d6:45:98:6a:d3:d9:6f:
                    be:32:1d:9b:e5:20:da:a1:f7:f0:76:9e:48:57:67:
                    6f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:46:C1:B0:AB:B2:DC:1C:91:2C:F0:84:11:FC:86:11:2E:0E:95:ED
            X509v3 Authority Key Identifier:
                keyid:BF:A5:F0:E7:65:47:57:59:57:BC:92:C6:DD:DD:08:4D:3E:A7:F8:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6Xw52VHV1lXvJLG3d0ITT6n-GM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/bcccb8-6c74-4d0a-895f-01d19a74be23/1/v6Xw52VHV1lXvJLG3d0ITT6n-GM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:16:d8:50:e3:a3:37:db:1e:12:59:7c:23:33:32:76:4b:ea:
         1d:ab:e4:eb:34:08:8b:53:ca:43:68:95:c7:2c:6a:b2:43:45:
         50:27:d1:9a:f5:2b:6b:e4:64:95:a1:68:a2:b9:27:22:ba:c2:
         6c:5a:6d:15:86:64:46:30:d0:53:c5:be:8e:52:a6:85:67:7d:
         2b:e8:28:05:47:b6:bc:1a:56:00:0d:1a:13:6f:7a:ef:7a:83:
         fc:46:f8:c4:5a:b7:4c:85:2d:12:79:42:05:cc:a8:45:1a:fe:
         9b:3b:f1:95:2e:b1:36:1c:b2:b5:36:2a:76:a4:1d:e4:71:a6:
         93:6b:b7:9a:99:91:8e:6e:7f:6b:07:de:54:f7:bb:1d:2f:90:
         be:47:c1:00:40:cf:e8:5c:0f:6e:1c:c8:2b:4b:7b:a1:bf:30:
         be:b6:0c:db:56:9a:45:bc:f7:86:bb:01:98:05:a9:0a:77:21:
         d5:c4:13:0a:2e:50:4f:4e:9a:53:33:11:2f:39:97:ba:3c:24:
         38:78:63:35:7d:9f:bc:f2:db:19:7c:8f:62:52:5d:17:d6:ed:
         0a:48:33:08:ac:70:d9:62:59:d6:97:23:e7:d6:39:4b:a0:a5:
         85:97:05:26:fa:8b:2f:d3:65:de:02:99:8b:76:d6:90:a5:39:
         16:8e:86:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----