Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
File:                     _JvrAZLQ00al5oWKp0SwQ0_tMYk.mft (raw, json)
Hash identifier:          HfAZktLBOmuUjjz+cY6NGxmoWT1ZERgcY2onp4ovCBc=
Subject key identifier:   BC:F8:FA:04:E3:7A:D4:94:71:11:AB:ED:BB:17:00:A4:AF:F3:F7:AD
Authority key identifier: FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89
Certificate issuer:       /CN=fc9beb0192d0d346a5e6858aa744b0434fed3189
Certificate serial:       01962E2B13EE040B2364C7F52B8315DD2C66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft
Manifest number:          14AA
Signing time:             Sun 13 Apr 2025 08:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:37 +0000
Files and hashes:         1: FasPE0L4fE1899bsu_j-7tmu6ok.roa (hash: Qhda7nOss3uAhstVaL86g/VtZIZV1OO3A8B7YvZv5Tg=)
                          2: _JvrAZLQ00al5oWKp0SwQ0_tMYk.crl (hash: 9KSIgIomD83HDyJeHub70MTmmn091GrHVFXS+2cyt5c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:13:ee:04:0b:23:64:c7:f5:2b:83:15:dd:2c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9beb0192d0d346a5e6858aa744b0434fed3189
        Validity
            Not Before: Apr 13 08:01:37 2025 GMT
            Not After : Apr 14 08:01:37 2025 GMT
        Subject: CN=bcf8fa04e37ad4947111abedbb1700a4aff3f7ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:75:9f:16:72:83:d0:b8:e4:3a:f0:ad:f0:ba:
                    e6:53:be:d5:d7:22:81:e0:06:08:33:8b:a4:87:38:
                    53:56:a7:a1:4b:69:ab:b6:f4:2b:37:dc:b1:88:dc:
                    99:71:9a:79:12:04:ac:02:2c:33:0a:02:a4:30:67:
                    d8:1e:88:a0:39:ac:d6:75:51:bb:d0:d0:da:83:d9:
                    07:0b:05:bc:71:40:6f:6e:db:f1:9c:66:66:10:0a:
                    62:3c:ee:81:16:82:4c:06:1b:5f:16:88:e4:6f:ac:
                    3c:a5:2a:45:aa:f0:e1:45:11:0f:67:a7:63:9e:18:
                    27:b9:f7:1c:91:7e:3d:92:d0:aa:5d:0e:4d:54:d2:
                    4d:76:78:72:06:ac:8d:3f:c5:6f:7d:2f:c2:3e:b6:
                    da:ef:d4:84:be:77:68:66:3d:7f:b0:51:8e:a8:12:
                    b8:99:ac:a2:06:b8:1d:c1:9f:7b:fa:a2:a5:d1:76:
                    14:8b:fa:2f:e3:34:70:0c:4c:d2:c3:3c:c0:30:ee:
                    17:7a:29:b3:be:ac:f1:83:2f:aa:20:6a:e9:41:a1:
                    4b:d6:33:88:f8:25:12:86:47:c4:90:0f:4d:87:81:
                    1b:e6:33:9a:a7:03:4f:c9:f5:0a:1d:06:b8:fd:ae:
                    34:c2:cf:00:3f:40:d4:38:5f:45:e3:d4:37:d5:2a:
                    f3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F8:FA:04:E3:7A:D4:94:71:11:AB:ED:BB:17:00:A4:AF:F3:F7:AD
            X509v3 Authority Key Identifier:
                keyid:FC:9B:EB:01:92:D0:D3:46:A5:E6:85:8A:A7:44:B0:43:4F:ED:31:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JvrAZLQ00al5oWKp0SwQ0_tMYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/215de6-4176-42d2-8da2-6b70169cda1b/1/_JvrAZLQ00al5oWKp0SwQ0_tMYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:fe:6e:63:36:d2:d8:b9:38:dc:67:e6:bc:48:fb:b9:be:ea:
         94:43:ba:ea:a9:2a:8f:cf:ed:fe:39:c7:03:c2:94:c7:d7:8b:
         20:9a:fd:e9:12:53:55:de:43:a6:88:fc:e2:18:71:02:3e:1d:
         e3:df:04:cd:87:ad:58:89:22:e0:fb:8f:aa:89:d1:12:c7:7e:
         eb:3a:f3:69:6f:fe:9b:ac:ed:9e:5f:d6:e7:48:a2:c2:de:37:
         57:68:06:5f:4d:49:eb:7f:92:b0:7e:23:d2:c2:a8:b4:10:03:
         2c:4e:03:39:f1:35:d7:8a:b0:c7:3c:e0:5e:60:82:c6:20:0d:
         5c:54:52:65:de:87:3c:90:e1:12:22:2b:a1:5b:7a:9a:a5:e2:
         2e:28:ad:42:de:e3:b0:f8:e6:b8:a9:1a:fa:d5:ea:04:bb:c4:
         f6:60:32:8e:0b:c9:91:3b:2c:a4:8d:e1:6d:b3:25:f3:93:69:
         de:05:cb:a9:6a:5c:ac:b5:7e:91:3c:ca:99:50:ff:2c:04:3f:
         6b:18:7b:3e:7d:8f:dd:03:f5:7c:eb:28:fa:6a:1b:3f:13:f5:
         da:97:8f:2a:e1:b3:83:c5:8a:86:7f:83:9e:9b:b0:54:63:64:
         ad:69:2e:95:85:37:b0:76:af:e5:32:cb:56:0f:64:39:07:bc:
         0b:85:4d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----