Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
File:                     bfpKH_x0mxxPo7bagZttu5rohaA.mft (raw, json)
Hash identifier:          w7XOPGwSJAW+gGcJ0ZjKqnWMAMOas4VOcc4lAUBJyxM=
Subject key identifier:   6C:E9:FA:34:56:5A:EF:FF:CB:DC:82:8C:9D:B0:0C:B6:FE:55:F6:E9
Authority key identifier: 6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0
Certificate issuer:       /CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
Certificate serial:       01962E992FFC927D5FBDC4FB21C60C0F292B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 10:01:53 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:53 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:53 +0000
Files and hashes:         1: bfpKH_x0mxxPo7bagZttu5rohaA.crl (hash: qCAwJ1L37X61N8B0CTBcs5Z3h70b7P7gZg7ia70wTHs=)
                          2: dwh4D1mLE-BJM3O3JRIbCS8CiAE.roa (hash: 0ebutZnVkcZLLmshdUGZMamHfBLJzhHs685jtIwVRjk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:2f:fc:92:7d:5f:bd:c4:fb:21:c6:0c:0f:29:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0
        Validity
            Not Before: Apr 13 10:01:53 2025 GMT
            Not After : Apr 14 10:01:53 2025 GMT
        Subject: CN=6ce9fa34565aefffcbdc828c9db00cb6fe55f6e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:59:aa:5a:78:b6:f6:b6:c0:06:a3:31:0a:a0:
                    35:cd:c0:eb:35:c1:4b:32:9d:db:f1:35:c1:3f:0a:
                    14:5c:93:e0:75:2b:d5:20:43:5a:da:de:e1:7b:66:
                    80:58:27:8f:5f:1f:ee:f5:4a:1f:ef:08:4c:09:d4:
                    29:31:f8:72:51:46:56:cd:37:a9:cb:a1:95:35:a7:
                    44:5d:50:0e:47:80:7f:be:f9:50:62:43:f5:85:06:
                    cd:91:f0:ba:f4:e4:f5:39:ef:f5:3a:32:bb:8a:3c:
                    a4:45:9a:8a:8f:1f:d7:3b:e1:13:53:06:81:52:40:
                    bd:8d:c7:37:2b:d4:39:4e:f9:ce:4a:2e:dd:37:98:
                    73:4a:a6:33:94:c2:a7:2e:9b:21:62:83:35:ee:73:
                    7a:70:a7:db:b3:71:d2:30:13:38:66:bd:8e:e6:a1:
                    1c:02:17:6c:6d:69:18:f0:88:ef:c0:0f:82:21:b0:
                    5f:e8:c0:fb:9e:ee:b2:40:e6:11:27:99:8b:7c:1f:
                    8e:24:a3:b8:4c:45:b8:93:62:61:ee:9b:f3:ce:0c:
                    63:0b:7a:d0:4b:d2:28:c3:a7:2e:44:aa:45:61:22:
                    87:1f:dd:ec:2d:b2:c8:07:bc:27:e5:2d:0d:5e:39:
                    97:b8:b3:fb:95:c3:3a:67:47:ae:38:78:f4:68:e0:
                    8b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E9:FA:34:56:5A:EF:FF:CB:DC:82:8C:9D:B0:0C:B6:FE:55:F6:E9
            X509v3 Authority Key Identifier:
                keyid:6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:9b:ce:39:bd:90:a1:14:1f:ef:ea:ec:b2:e5:67:af:d6:9a:
         4a:29:25:72:67:f7:14:71:d1:51:d6:55:f5:d2:15:08:03:07:
         55:1f:89:ac:4f:c9:4e:a3:43:9f:61:35:7c:da:e6:76:1e:00:
         91:8f:89:57:54:8c:44:0a:2f:8b:69:41:3c:35:c8:04:18:21:
         c8:17:fc:d2:97:59:5e:e9:4d:a0:20:b1:b3:b8:a6:42:78:54:
         c4:60:73:a6:03:0a:60:2a:fb:ab:08:7e:b5:e4:39:59:e0:0b:
         94:00:2e:c1:fe:5f:30:f7:6d:e6:73:f0:e2:72:85:82:d4:50:
         d8:7e:cd:74:dd:65:d8:b1:4a:c2:f8:f6:a0:21:9b:e6:c7:be:
         94:e1:7b:ef:66:71:96:f7:01:ac:13:a2:b6:ad:43:1b:68:35:
         6e:fd:8c:b7:7d:d5:7b:97:4b:be:4d:73:7b:77:5a:49:a9:9d:
         8e:7e:aa:10:7a:fb:ed:8f:8e:4c:94:6a:7c:2a:a2:68:3d:68:
         d1:27:5e:15:d0:eb:5a:79:86:87:e3:91:55:28:45:30:6d:d5:
         bf:e1:c2:2e:d6:9f:b9:a0:cb:00:8b:85:c4:26:c3:eb:a4:1f:
         5d:0a:a0:25:90:9b:03:1a:fa:77:d3:8e:35:83:1c:ba:0c:90:
         5c:80:64:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----