Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft
File:                     BkizODOZAP9_O1myRtJNJofGNnw.mft (raw, json)
Hash identifier:          wAgcho0Grsqq1A2VMW3l5BmAAV21CRJtYSOrIBqNL30=
Subject key identifier:   43:9F:6C:1C:F6:9C:9D:05:0C:85:C0:57:00:A5:F9:C6:1B:EE:79:B9
Authority key identifier: 06:48:B3:38:33:99:00:FF:7F:3B:59:B2:46:D2:4D:26:87:C6:36:7C
Certificate issuer:       /CN=0648b338339900ff7f3b59b246d24d2687c6367c
Certificate serial:       01962E61AE805AD99B31C5053E2B0DA1FB08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BkizODOZAP9_O1myRtJNJofGNnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft
Manifest number:          69
Signing time:             Sun 13 Apr 2025 09:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:15 +0000
Files and hashes:         1: BkizODOZAP9_O1myRtJNJofGNnw.crl (hash: O11wJJJ7LBYCUx7CXOYOAKmoKtIUKEpcf2uw7VDlwig=)
                          2: pO5jZKPZtKc7LFh2B3gUF2ssV3Y.roa (hash: rDX32rjjFQPeFJLlsJ7HQ9El7VqEOXBlwYtku8n7ZJg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ae:80:5a:d9:9b:31:c5:05:3e:2b:0d:a1:fb:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0648b338339900ff7f3b59b246d24d2687c6367c
        Validity
            Not Before: Apr 13 09:01:15 2025 GMT
            Not After : Apr 14 09:01:15 2025 GMT
        Subject: CN=439f6c1cf69c9d050c85c05700a5f9c61bee79b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f4:6f:e3:fd:6f:61:de:8c:30:75:94:17:cf:
                    b9:bd:35:fa:a2:38:aa:b4:9f:e3:88:b5:9f:0f:80:
                    a1:7b:e8:bd:5b:1f:34:92:2c:ef:54:5a:a8:a0:4e:
                    47:48:bf:1d:76:6a:53:08:d6:48:9e:40:15:ff:c6:
                    8c:57:26:9d:46:8b:e9:b4:5c:81:e7:c7:35:98:58:
                    0f:00:e2:e5:1e:c5:99:51:fe:6f:bd:29:2e:01:48:
                    e2:9a:01:99:f6:f0:b3:e7:af:86:31:ba:d0:53:93:
                    83:df:c3:e2:ca:5f:4f:d0:84:89:62:92:94:1a:6f:
                    64:72:cc:0d:4d:c0:d2:e4:35:3f:3b:f2:d6:9d:b7:
                    25:fb:0d:f8:96:53:bd:84:3b:4a:9c:28:bc:ae:bd:
                    03:44:0d:db:67:67:d6:b6:c4:b3:60:32:8f:af:42:
                    31:85:8b:e5:50:90:83:20:b8:d0:84:c8:59:ee:83:
                    6b:0c:be:09:9f:c1:72:88:e3:86:d2:38:33:21:e5:
                    34:b6:75:84:2a:89:bc:65:26:e8:c8:c9:19:f6:1a:
                    0b:12:4d:71:4a:70:56:ce:31:74:39:04:cc:bf:da:
                    1e:50:01:da:f0:14:7f:52:c0:d6:e4:47:8b:94:ef:
                    cd:44:51:f2:6c:94:18:fd:5e:6d:43:e4:09:e6:1e:
                    d9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:9F:6C:1C:F6:9C:9D:05:0C:85:C0:57:00:A5:F9:C6:1B:EE:79:B9
            X509v3 Authority Key Identifier:
                keyid:06:48:B3:38:33:99:00:FF:7F:3B:59:B2:46:D2:4D:26:87:C6:36:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkizODOZAP9_O1myRtJNJofGNnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/33a037-0675-48f8-925d-0d918eedc26f/1/BkizODOZAP9_O1myRtJNJofGNnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:75:6a:8a:52:43:e4:84:60:08:8d:06:82:7c:3e:18:76:d9:
         17:ca:b2:1d:03:32:50:31:04:31:3e:d9:01:60:00:36:7c:4c:
         fe:70:de:b3:59:25:8c:4e:87:26:26:7c:e4:e4:eb:39:92:51:
         9d:ef:8a:0d:c8:49:6d:c1:3a:8e:88:fe:40:fe:dd:6f:ee:58:
         c9:e3:c2:88:63:26:08:79:0b:90:11:9d:cd:e2:f2:93:b7:8b:
         64:1c:de:c9:d4:d3:5c:e7:3e:67:e0:96:c2:a4:4a:69:e5:55:
         8a:31:19:fc:6f:53:93:12:b9:02:04:61:fd:64:8e:d4:eb:9f:
         69:13:60:e9:95:df:71:7f:a3:7b:11:3a:be:7d:c9:1a:d2:90:
         82:09:c3:6f:30:ea:e9:09:6f:30:a4:cd:fe:4c:68:57:ec:32:
         49:3f:e4:cd:ab:04:48:00:0f:ef:80:82:c5:3f:ed:64:b6:72:
         27:f1:93:e5:3a:d9:7c:60:4c:24:e2:7e:c6:35:a0:68:00:8b:
         8a:19:1a:da:be:59:2e:b7:db:78:57:96:65:2e:fb:0a:35:a7:
         15:ca:90:58:ed:69:e9:b5:25:ed:e2:fd:96:05:9e:a4:c2:f6:
         b5:2b:97:1c:05:91:e5:a8:2a:2f:b9:66:44:7b:66:b1:bd:f3:
         85:e2:ba:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----