Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
File:                     kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft (raw, json)
Hash identifier:          XKjuaql0YamcaucCnTQL2JG9xqhlSkTN0Jpn0L9arXc=
Subject key identifier:   BE:BC:DA:D7:3D:08:2F:AA:CC:B1:AE:EE:5D:FE:E3:76:24:CB:38:7D
Authority key identifier: 91:D0:1C:47:F0:0E:64:F3:5C:C7:52:D0:3B:34:A7:1B:71:40:6B:3F
Certificate issuer:       /CN=91d01c47f00e64f35cc752d03b34a71b71406b3f
Certificate serial:       01962F74812F1AEE5007053EF149C0552667
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
Manifest number:          1418
Signing time:             Sun 13 Apr 2025 14:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:26 +0000
Files and hashes:         1: 6fnAZ8W2MGF8ZNrQkh_nCxeTpv4.roa (hash: VVdXTpC74ZKSlf0OaYeG4sfAbOWwASAnFr5UUxM1yrQ=)
                          2: jwF2Fe8ZjLBRTo3L_7TINNi10fQ.roa (hash: Ap/raQBvujEIQc3hDUBU94DRN1La9dL+OAKrqJu5rbU=)
                          3: kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl (hash: yRQRnBzKbEqL3IMjVO/Nw+mBzqlICV2oltS+0o+T/DM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:81:2f:1a:ee:50:07:05:3e:f1:49:c0:55:26:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91d01c47f00e64f35cc752d03b34a71b71406b3f
        Validity
            Not Before: Apr 13 14:01:26 2025 GMT
            Not After : Apr 14 14:01:26 2025 GMT
        Subject: CN=bebcdad73d082faaccb1aeee5dfee37624cb387d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:57:d1:34:2d:8f:a9:1d:6c:9e:d5:3b:85:29:
                    c6:f8:cb:ef:3a:be:4a:e3:1c:2b:8f:e9:70:39:4e:
                    0d:ac:86:4e:60:5b:6a:f6:bc:35:4f:1d:9e:66:c8:
                    77:87:94:e5:66:de:4c:2e:14:1d:12:34:5e:85:8d:
                    2f:ae:7d:4e:57:f7:a3:09:d6:1e:f2:b0:cf:75:eb:
                    ac:f6:11:f3:08:ca:42:cd:56:21:d9:22:5d:9f:92:
                    cc:f4:37:d1:75:e3:22:d3:91:09:3c:fd:ee:cb:01:
                    26:79:73:8b:58:64:56:5c:52:8c:33:74:f3:ac:79:
                    b3:4c:52:09:2f:92:bb:e1:de:10:89:31:51:0b:77:
                    97:a6:cb:c9:9c:fb:7d:39:80:06:04:48:84:aa:c0:
                    bc:37:2d:01:31:91:05:b4:74:d0:7e:4d:58:8d:bd:
                    9e:2a:8b:21:3d:69:da:ed:49:bb:aa:26:3f:84:93:
                    9b:8d:a8:59:9e:e5:31:d3:a0:c9:1a:45:1f:cf:f8:
                    09:2c:60:53:69:e6:5b:c9:83:85:1a:fb:55:d4:66:
                    78:e5:a9:00:8b:d1:c5:37:de:7b:f2:bc:de:ca:67:
                    43:42:53:8c:fa:a5:85:5a:06:e5:27:9e:22:4a:87:
                    6c:26:19:57:ad:ad:48:08:c4:15:90:c1:32:8a:73:
                    87:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BC:DA:D7:3D:08:2F:AA:CC:B1:AE:EE:5D:FE:E3:76:24:CB:38:7D
            X509v3 Authority Key Identifier:
                keyid:91:D0:1C:47:F0:0E:64:F3:5C:C7:52:D0:3B:34:A7:1B:71:40:6B:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:fa:cf:a9:fe:40:93:fb:b1:fb:10:4f:26:63:4e:34:bb:cd:
         61:03:97:65:a4:64:ba:d7:5a:ea:8d:0b:ac:02:4f:f0:00:fc:
         cd:af:94:f9:64:2b:ce:65:60:6b:dd:b6:ec:bf:9e:8e:4b:33:
         2e:df:18:98:a3:71:53:76:ab:59:cf:47:5b:99:bf:f5:4f:71:
         59:b3:ae:11:d8:c7:61:7b:bc:06:1b:d5:fc:f4:d7:71:c6:d2:
         cd:dd:94:bf:87:41:30:9e:d9:60:b1:03:9b:57:75:77:6b:d1:
         ef:06:df:22:46:ca:b1:16:87:75:1e:20:55:6a:42:1c:65:93:
         cc:11:50:3e:f6:87:93:e8:c2:0f:ff:dc:ce:67:55:d0:e2:3a:
         35:07:fe:b9:a7:b6:41:19:72:2d:67:4b:47:66:48:f5:08:ed:
         d0:54:03:22:f9:3f:73:4c:58:78:3c:be:a7:3f:d5:65:96:e8:
         6e:a2:72:39:23:d1:da:13:85:f6:9c:f5:90:38:d9:65:65:c6:
         fe:18:61:74:68:70:f9:bb:9f:f8:3f:1c:3a:29:8c:f7:6d:a3:
         7c:bf:cd:07:4f:3b:2b:35:d8:74:9a:d5:23:25:6c:38:31:cf:
         71:8d:95:12:62:11:13:e4:a3:b1:a3:8f:d6:4d:1c:56:64:86:
         3a:18:19:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----