Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.mft
File:                     B_C6WbHHbPINxDguWihU1xQsJro.mft (raw, json)
Hash identifier:          pz0YpcBeUQLINxv96r/Qsht+3ZPvuWysLWO+oCourDo=
Subject key identifier:   BD:A2:BD:28:10:90:C1:F3:0B:9F:ED:90:E1:84:44:9B:7C:62:67:3B
Authority key identifier: 07:F0:BA:59:B1:C7:6C:F2:0D:C4:38:2E:5A:28:54:D7:14:2C:26:BA
Certificate issuer:       /CN=07f0ba59b1c76cf20dc4382e5a2854d7142c26ba
Certificate serial:       01962F74E25EAB4C89AE0772EEA26E36E6EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.mft
Manifest number:          05CD
Signing time:             Sun 13 Apr 2025 14:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:51 +0000
Files and hashes:         1: 2YctLvghF2NTGqouDl9SU7WsK8Q.roa (hash: dDP6o/nzzzraOHQZ9zrzu942AWsku2WIoZUV4lB/aVk=)
                          2: B_C6WbHHbPINxDguWihU1xQsJro.crl (hash: 3SXFtBR2VcUY9Z1IPmVarYs1paysnZt4hmBQ72XVDTQ=)
                          3: K4R2wbla95DXju27vgEj2IYahII.roa (hash: oVwWblaprncMfsgnEdqlxFveHCedyBjk+q0e8GaCPaQ=)
                          4: KDytCj01Z8HV3jbDjoNUphJ9ZqE.roa (hash: tpuGPSXore2CO2e6MYBfrJ1Vug8cc9qaaZfG9lHKTHs=)
                          5: WzL1Cl4sg1z4wQqIuCMHxMPDMuc.roa (hash: n4Yw3pq5MyOekrSTwdjLFgxLpUsIwy8D4jmXIUXMJcM=)
                          6: x5j9bCfCB-TRkwdEgD-n9hTBKuI.roa (hash: KGBK15KR60NfaIfx8RVCxr6b9iRlBdChSYDsXNFVIqg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e2:5e:ab:4c:89:ae:07:72:ee:a2:6e:36:e6:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07f0ba59b1c76cf20dc4382e5a2854d7142c26ba
        Validity
            Not Before: Apr 13 14:01:51 2025 GMT
            Not After : Apr 14 14:01:51 2025 GMT
        Subject: CN=bda2bd281090c1f30b9fed90e184449b7c62673b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d0:57:03:50:e5:c3:c5:26:1c:a8:12:a5:2f:
                    bd:58:d1:ff:9e:38:d6:79:b3:c3:65:de:ac:ed:28:
                    53:da:ac:a2:30:1d:b9:28:c6:ac:de:de:8f:7e:f4:
                    3e:93:c0:84:e0:80:12:4c:cf:d6:b4:1a:ff:40:cf:
                    aa:7a:12:c4:11:ce:7f:4d:78:9c:50:55:4f:e0:d8:
                    ef:7d:85:c2:33:67:17:ef:d5:da:31:10:87:b3:9d:
                    cf:d4:78:1b:2a:84:47:ee:cf:50:49:5b:cb:89:0e:
                    a5:bb:58:ed:e6:b9:32:ad:c3:6f:01:fe:e1:96:4e:
                    e4:fd:40:68:3c:6d:a4:c6:33:42:97:a1:cb:f6:c3:
                    5f:db:56:80:c7:b7:b4:7d:76:4d:f6:db:04:1c:e5:
                    e9:83:77:fa:56:75:5f:62:15:e1:ae:29:db:fd:82:
                    42:a0:80:1e:27:2b:95:4e:f4:5a:ce:5c:a6:40:13:
                    d2:95:a2:10:3f:01:1b:f5:1f:fd:75:35:55:66:dc:
                    0d:93:50:73:a8:6d:be:51:b8:02:73:02:56:6a:53:
                    04:39:08:09:9e:76:08:6e:5c:cf:80:f6:3a:ea:53:
                    17:39:99:00:1b:64:9d:0d:b5:37:6a:66:81:ac:5e:
                    b9:7f:da:d4:b4:0c:fb:f1:9a:a0:17:82:27:aa:8e:
                    bd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A2:BD:28:10:90:C1:F3:0B:9F:ED:90:E1:84:44:9B:7C:62:67:3B
            X509v3 Authority Key Identifier:
                keyid:07:F0:BA:59:B1:C7:6C:F2:0D:C4:38:2E:5A:28:54:D7:14:2C:26:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_C6WbHHbPINxDguWihU1xQsJro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296a78-01e2-496d-ba59-2200b3cc57e6/1/B_C6WbHHbPINxDguWihU1xQsJro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:29:62:c9:04:03:fb:b7:57:f6:bb:df:04:1b:20:94:de:7d:
         a3:d5:84:7a:57:3e:ee:be:76:70:ce:7d:6c:7d:fa:19:66:ec:
         ac:61:8f:28:7a:10:5f:6b:ef:8e:6f:de:13:e8:28:84:39:54:
         cc:9f:89:49:16:7e:a9:c4:c9:c3:d2:9c:c2:ef:62:9f:a9:49:
         d0:45:79:11:51:01:1d:9d:f5:4f:9d:9c:4a:60:34:6c:fb:90:
         50:8e:67:f7:1a:c1:4d:6a:8a:8c:b7:86:9b:90:e3:4f:71:55:
         c8:e6:e3:1f:b8:13:b7:69:68:14:82:54:3b:a1:5f:21:c1:01:
         fb:49:e8:2e:cc:5f:35:ed:f4:b6:53:37:37:9d:21:99:a1:64:
         4b:cd:02:cc:4f:7d:2c:50:a6:8a:e2:22:8c:72:1f:37:37:3e:
         8a:e5:f7:94:91:11:58:3c:e2:bd:a8:29:ea:59:64:ed:34:b9:
         9b:06:90:e5:b0:19:9c:c2:97:7c:ff:75:fd:b2:5a:9d:fa:2a:
         35:d3:4e:44:0e:47:48:b0:97:01:5c:8c:1d:84:4c:89:c8:be:
         f4:d2:71:18:b2:e0:9a:43:cb:e3:40:3e:a6:58:4a:d4:27:c4:
         fb:d9:71:ef:08:a2:ee:e4:3e:65:f5:dd:d0:25:da:1a:41:63:
         dc:26:96:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----